Policy matrix
The policy matrix explains the effective authorization result produced by all active compliance frameworks for supported actions.
Effective policy
A record can inherit regulatory tags and policy context from related species, protocols, workflows, samples, batches, or steps. FlaskTrack evaluates applicable mappings and authorization rules, then applies the most restrictive relevant result.
| Result | Operational effect |
|---|---|
| Allowed | The action may continue when all other validation and permission checks pass. |
| Requires approval | The action remains pending until an authorized reviewer approves it. |
| Blocked | The action is rejected by the configured policy. |
A less restrictive framework does not relax a more restrictive effective result.
Read a matrix entry
Review the entity type, action, inherited tags, framework, compliance level, matching scope, and final result. The explanation should show why a rule applies.
Use the matrix before production
Test representative records for:
- expected allowed actions;
- approval-required actions;
- blocked actions;
- records with multiple tags;
- records affected by multiple frameworks;
- records that should fall outside a scope.
Troubleshoot unexpected results
- Confirm the record’s regulatory tags and inherited relationships.
- Review tag-to-framework mappings.
- Confirm the compliance level.
- Review authorization rules for the entity and action.
- Confirm scope conditions.
- Check whether another active framework is more restrictive.
- Record and approve configuration changes before retesting.
The matrix explains configured policy. It does not decide whether the configuration accurately reflects an external requirement; that remains an organizational review responsibility.