Legal pillar · v0.16.0
access-review AccessReview
Periodic access-review record (per-system, per-period).
$id · https://corpospec.com/schemas/v0.16.0/access-review.schema.json
Fields
| Field | Type | Required | Description |
|---|---|---|---|
| cadence | AccessReviewCadence | yes | Access-review cadence. |
| control_basis | string | yes | Control reference (e.g. "ISO 27001 A.5.18 + A.8.2; SOC 2 CC6.2"). |
| decisions | GrantDecision[] | yes | Per-grant decisions. |
| due_date | IsoDate | yes | ISO 8601 date (YYYY-MM-DD). |
| entity | PathRef | yes | Path-based cross-reference relative to .corpospec/ root. Pattern: `^[a-z0-9_-]+(/[a-z0-9_.-]+)+$` |
| grants_reviewed | integer | yes | Total grants reviewed. |
| id | PathRef | yes | Path-based cross-reference relative to .corpospec/ root. Pattern: `^[a-z0-9_-]+(/[a-z0-9_.-]+)+$` |
| period_end | IsoDate | yes | ISO 8601 date (YYYY-MM-DD). |
| period_start | IsoDate | yes | ISO 8601 date (YYYY-MM-DD). |
| reviewer | PathRef | yes | PathRef to the primary reviewer (system owner). |
| status | AccessReviewStatus | yes | Review lifecycle. |
| system | PathRef | yes | PathRef to the system being reviewed. |
| completed_at | IsoDate? | — | |
| evidence_ref | PathRef? | — | PathRef to evidence (export of access list, signed log). |
| second_reviewer | PathRef? | — | PathRef to a secondary reviewer (two-eye / four-eye sign-off). |
Definitions
Shared types referenced within this schema.
AccessReviewCadence
Access-review cadence.
enum: "monthly", "quarterly", "semi_annual", "annual"
AccessReviewDecision
Reviewer's decision on a given grant.
AccessReviewStatus
Review lifecycle.
enum: "scheduled", "open", "closed", "overdue"
GrantDecision
Decision on one access grant.
type: object
IsoDate
ISO 8601 date (YYYY-MM-DD).
type: string
PathRef
Path-based cross-reference relative to .corpospec/ root.
Pattern: `^[a-z0-9_-]+(/[a-z0-9_.-]+)+$`
pattern: ^[a-z0-9_-]+(/[a-z0-9_.-]+)+$
Reference in your YAML
# yaml-language-server: $schema=https://corpospec.com/schemas/v0.16.0/access-review.schema.json