-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathcase-studies.html
More file actions
137 lines (121 loc) · 7.32 KB
/
case-studies.html
File metadata and controls
137 lines (121 loc) · 7.32 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Execution Scenarios - Waveframe Labs</title>
<meta name="description" content="Concrete governed execution scenarios: finance transfers, CI/CD deployments, permission changes, approval replay, multi-role approval, and contract mismatch blocking." />
<link rel="icon" type="image/png" href="favicon-32x32.png" />
<link rel="canonical" href="https://waveframelabs.org/case-studies.html" />
<style>
:root{--bg:#0b0c10;--card:#14161b;--panel:#0f1116;--ink:#e7eaef;--muted:#9aa3b2;--soft:#c5cad3;--edge:#252832;--accent:#ff7a18;--green:#3ddc84;--red:#ff5b5b;--maxw:1080px;--rad:8px}
*{box-sizing:border-box}
html,body{margin:0;padding:0;background:var(--bg);color:var(--ink);font-family:ui-sans-serif,system-ui,-apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif}
a{color:inherit;text-decoration:none}a:hover{color:var(--accent)}
.wrap{max-width:var(--maxw);margin:0 auto;padding:20px 20px 72px}
.hdr{padding:18px 24px;border-bottom:1px solid var(--edge);background:rgba(20,22,27,.88);backdrop-filter:blur(12px);display:flex;justify-content:space-between;align-items:center;position:sticky;top:0;z-index:100;margin-bottom:28px}
.brand{display:flex;align-items:center;gap:12px}.brand-text{font-weight:700}.topnav{display:flex;gap:24px;font-size:.9rem;flex-wrap:wrap}.topnav a{opacity:.72}.active-link{opacity:1!important;color:var(--accent)!important}
.hero{margin-bottom:22px;padding:24px;border:1px solid var(--edge);border-radius:var(--rad);background:linear-gradient(180deg,rgba(255,122,24,.10),rgba(0,0,0,0))}
.kicker{color:var(--accent);font-size:.75rem;text-transform:uppercase;font-weight:800;letter-spacing:.12em;margin-bottom:8px;display:block}
h1{margin:0 0 .6rem;font-size:clamp(2rem,4vw,3.2rem);line-height:1.08}h2{margin:34px 0 10px}h3{margin:0 0 8px}
p{color:var(--muted);line-height:1.65}.lede{font-size:1.1rem;color:var(--soft);max-width:780px}
.grid{display:grid;grid-template-columns:1fr 1fr;gap:16px}.scenario{background:var(--card);border:1px solid var(--edge);border-radius:var(--rad);padding:18px}.scenario p:last-child{margin-bottom:0}
.label{display:inline-block;border:1px solid var(--edge);background:var(--panel);border-radius:999px;padding:5px 9px;color:var(--soft);font-size:.78rem;font-weight:800;margin-bottom:12px}
.allow{color:var(--green);font-weight:850}.block{color:var(--red);font-weight:850}.details{background:var(--panel);border:1px solid var(--edge);border-radius:var(--rad);padding:12px;margin:12px 0}
.details strong{color:var(--ink)}.cta{background:var(--panel);border:1px solid var(--edge);border-radius:var(--rad);padding:18px;margin-top:18px}
footer{margin-top:40px;border-top:1px solid var(--edge);padding-top:18px;color:var(--muted);font-size:.9rem;display:flex;justify-content:space-between;gap:12px;flex-wrap:wrap}
@media(max-width:820px){.hdr{align-items:flex-start;flex-direction:column}.grid{grid-template-columns:1fr}}
</style>
</head>
<body>
<div class="wrap">
<header class="hdr">
<div class="brand">
<img src="waveframe-logo-mark.png" width="28" height="28" alt="Waveframe Labs mark">
<div class="brand-text">Waveframe Labs</div>
</div>
<nav class="topnav">
<a href="index.html">Home</a>
<a href="hierarchy.html">How It Works</a>
<a href="tools.html">Tools</a>
<a href="compatibility.html">Compatibility</a>
<a class="active-link" href="case-studies.html">Examples</a>
<a href="updates.html">Updates</a>
</nav>
</header>
<section class="hero">
<span class="kicker">Governed Execution Scenarios</span>
<h1>Concrete actions. Deterministic outcomes.</h1>
<p class="lede">
These scenarios show the operational surface Waveframe is built for: money movement, production
deployment, privileged changes, approval replay, multi-role workflows, and contract integrity.
</p>
</section>
<section>
<h2>Operational Scenarios</h2>
<div class="grid">
<article class="scenario">
<span class="label">Finance Transfer Governance</span>
<h3>High-value transfer by an unapproved actor</h3>
<p>Proposed action: transfer $1.25M from operating reserves to a vendor account.</p>
<div class="details"><strong>Evaluation:</strong> actor role is intern; contract requires manager approval and finance controller approval.</div>
<p class="block">Result: BLOCKED before execution</p>
</article>
<article class="scenario">
<span class="label">CI/CD Deployment Enforcement</span>
<h3>Production deployment without release evidence</h3>
<p>Proposed action: deploy a production build from an AI-generated change set.</p>
<div class="details"><strong>Evaluation:</strong> missing test artifact, missing reviewer approval, and unsigned release manifest.</div>
<p class="block">Result: BLOCKED before deployment</p>
</article>
<article class="scenario">
<span class="label">Privileged Permission Change</span>
<h3>Admin role escalation</h3>
<p>Proposed action: grant organization administrator rights to a service account.</p>
<div class="details"><strong>Evaluation:</strong> actor lacks authority for privileged identity mutation.</div>
<p class="block">Result: BLOCKED before permissions change</p>
</article>
<article class="scenario">
<span class="label">Approval Replay Blocking</span>
<h3>Old approval reused against a new mutation</h3>
<p>Proposed action: execute a modified transfer using an approval from a previous transfer.</p>
<div class="details"><strong>Evaluation:</strong> approval artifact does not bind to the current mutation hash.</div>
<p class="block">Result: BLOCKED for integrity violation</p>
</article>
<article class="scenario">
<span class="label">Multi-Role Approval Flow</span>
<h3>Required approvals satisfied</h3>
<p>Proposed action: reallocate a budget after manager, controller, and CFO approvals are bound to the proposal.</p>
<div class="details"><strong>Evaluation:</strong> required roles, artifacts, and contract identity checks pass.</div>
<p class="allow">Result: ALLOWED to execute</p>
</article>
<article class="scenario">
<span class="label">Contract Mismatch Blocking</span>
<h3>Proposal references the wrong authority</h3>
<p>Proposed action: run a production mutation with a proposal that declares an outdated contract hash.</p>
<div class="details"><strong>Evaluation:</strong> proposal contract hash does not match the compiled authority contract.</div>
<p class="block">Result: BLOCKED for contract identity mismatch</p>
</article>
</div>
</section>
<section class="cta">
<h2 style="margin-top:0;">What these scenarios have in common</h2>
<p>
The model can propose. A workflow can request. A service can prepare an action. But the action
reaches the production system only after the contract-bound execution boundary returns an allowed
decision.
</p>
<p>
<a href="tools.html" style="color:var(--accent);font-weight:800;">View the tools that implement the boundary</a>
</p>
</section>
<footer>
<span>© <span id="year"></span> Waveframe Labs</span>
<span>Concrete governed execution scenarios</span>
</footer>
</div>
<script>
document.getElementById('year').textContent = new Date().getFullYear();
</script>
</body>
</html>