{
  "format": "minctrl.process/v1",
  "graph": {
    "edges": [
      {
        "id": "e0___start____scope",
        "source": "__start__",
        "target": "scope"
      },
      {
        "id": "e1_scope__split-domains",
        "source": "scope",
        "target": "split-domains"
      },
      {
        "id": "e2_split-domains__test-access",
        "source": "split-domains",
        "target": "test-access"
      },
      {
        "id": "e3_split-domains__test-change",
        "source": "split-domains",
        "target": "test-change"
      },
      {
        "id": "e4_split-domains__test-ops",
        "source": "split-domains",
        "target": "test-ops"
      },
      {
        "id": "e5_test-access__merge-domains",
        "source": "test-access",
        "target": "merge-domains"
      },
      {
        "id": "e6_test-change__merge-domains",
        "source": "test-change",
        "target": "merge-domains"
      },
      {
        "id": "e7_test-ops__merge-domains",
        "source": "test-ops",
        "target": "merge-domains"
      },
      {
        "id": "e8_merge-domains__rate",
        "source": "merge-domains",
        "target": "rate"
      },
      {
        "id": "e9_rate__severity",
        "source": "rate",
        "target": "severity"
      },
      {
        "id": "e10_severity__autoclear",
        "label": "clean / low (deficiency only)",
        "source": "severity",
        "target": "autoclear"
      },
      {
        "id": "e11_severity__stage",
        "label": "significant / material weakness",
        "source": "severity",
        "target": "stage"
      },
      {
        "id": "e12_autoclear__signoff",
        "source": "autoclear",
        "target": "signoff"
      },
      {
        "id": "e13_stage__signoff",
        "source": "stage",
        "target": "signoff"
      },
      {
        "id": "e14_signoff__test-access",
        "label": "rejected — re-test required",
        "source": "signoff",
        "target": "test-access"
      },
      {
        "id": "e15_signoff__issue",
        "label": "opinion signed",
        "source": "signoff",
        "target": "issue"
      },
      {
        "id": "e16_issue__monitor",
        "source": "issue",
        "target": "monitor"
      },
      {
        "id": "e17_monitor__scope",
        "label": "roll-forward to next period",
        "source": "monitor",
        "target": "scope"
      }
    ],
    "nodes": [
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "__start__",
        "interrupt_before": false,
        "kind": "terminal",
        "label": "Start",
        "position": {
          "x": 0,
          "y": 0
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "terminal",
        "tools": []
      },
      {
        "agent": "intake",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "scope",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Scope the in-scope ITGCs and pull access, change and operations evidence",
        "position": {
          "x": 0,
          "y": 120
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "control-evidence",
          "gl-erp"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": "parallel",
        "human": null,
        "id": "split-domains",
        "interrupt_before": false,
        "kind": "gateway",
        "label": "Fan out the three ITGC domains to test in parallel",
        "position": {
          "x": 0,
          "y": 240
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "gateway",
        "tools": []
      },
      {
        "agent": "tester",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "test-access",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Test logical access ITGCs (provisioning, recerts, privileged access) and flag exceptions",
        "position": {
          "x": 0,
          "y": 360
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "itgc-test"
        ]
      },
      {
        "agent": "tester",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "test-change",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Test change-management ITGCs (approvals, segregation, migration evidence) and flag exceptions",
        "position": {
          "x": 0,
          "y": 480
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "itgc-test"
        ]
      },
      {
        "agent": "tester",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "test-ops",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Test IT-operations ITGCs (jobs, backups, incident handling) and flag exceptions",
        "position": {
          "x": 0,
          "y": 600
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "itgc-test"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": "parallel",
        "human": null,
        "id": "merge-domains",
        "interrupt_before": false,
        "kind": "gateway",
        "label": "Join the three domains once all tests have run",
        "position": {
          "x": 0,
          "y": 720
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "gateway",
        "tools": []
      },
      {
        "agent": "compliance",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "rate",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Rate exception severity (deficiency / significant / material weakness); check independence and materiality",
        "position": {
          "x": 0,
          "y": 840
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "medium",
        "tools": [
          "itgc-test"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": "exclusive",
        "human": null,
        "id": "severity",
        "interrupt_before": false,
        "kind": "gateway",
        "label": "Severity of exceptions?",
        "position": {
          "x": 0,
          "y": 960
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "gateway",
        "tools": []
      },
      {
        "agent": "compliance",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "autoclear",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Auto-clear the control conclusion and draft a clean workpaper",
        "position": {
          "x": 0,
          "y": 1080
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "workpaper"
        ]
      },
      {
        "agent": "compliance",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "stage",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Stage the deficiency package (severity rationale, exceptions, draft modified conclusion) for partner review",
        "position": {
          "x": 0,
          "y": 1200
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "medium",
        "tools": [
          "workpaper"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": "gate:engagement-partner-signoff",
        "gateway": null,
        "human": "CPA / engagement partner",
        "id": "signoff",
        "interrupt_before": true,
        "kind": "gate",
        "label": "A licensed CPA / engagement partner reviews the conclusion and signs the ICFR opinion — or sends it back for re-test",
        "position": {
          "x": 0,
          "y": 1320
        },
        "reversible": false,
        "sla": null,
        "sla_spec": null,
        "tier": "high",
        "tools": []
      },
      {
        "agent": "issue",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "issue",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Issue the signed workpapers and the ICFR opinion",
        "position": {
          "x": 0,
          "y": 1440
        },
        "reversible": false,
        "sla": null,
        "sla_spec": null,
        "tier": "high",
        "tools": [
          "workpaper"
        ]
      },
      {
        "agent": "monitor",
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "monitor",
        "interrupt_before": false,
        "kind": "agent",
        "label": "Track remediation of deficiencies and roll forward to the next period",
        "position": {
          "x": 0,
          "y": 1560
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "low",
        "tools": [
          "control-evidence"
        ]
      },
      {
        "agent": null,
        "confidential": false,
        "gate": null,
        "gateway": null,
        "human": null,
        "id": "__end__",
        "interrupt_before": false,
        "kind": "terminal",
        "label": "Done",
        "position": {
          "x": 0,
          "y": 1680
        },
        "reversible": true,
        "sla": null,
        "sla_spec": null,
        "tier": "terminal",
        "tools": []
      }
    ]
  },
  "hash": "841e6239581c3dd8571ec642d03cdb526ebdbbcc7e8de4b5592d834c8d99b5c1",
  "name": "SOX ITGC audit autopilot",
  "slug": "audit",
  "source": "example",
  "version": null,
  "violations": []
}