4.2 Action Confirmation for Destructive Operations

Description

Destructive or irreversible operations MUST require explicit confirmation.

Rationale

Confirmation gates provide a checkpoint before irreversible damage occurs.

Audit Procedure

1. Identify destructive operations
2. Verify confirmation is required
3. Check confirmation cannot be bypassed

Remediation

1. Categorize operations by reversibility
2. Implement confirmation for irreversible ops
3. Log all confirmed actions

Framework Mappings