Variable: SEPARATED_DUTIES_ENVIRONMENTS

const SEPARATED_DUTIES_ENVIRONMENTS: readonly EnvironmentClass[]

Defined in: packages/secrets/src/environment.ts:36

The classes in which one person may not both run the anchor and govern the tree (security review C-1). A local or CI stack has one operator and needs the union bundle SOLE_ADMIN; an environment others rely on names a second account for governing, so that admitting an organization and approving its publication take two people whatever the four-eyes setting says.

It lives beside the classes, not in the setup engine or in identity, because both enforce the rule and both already import this package: the setup runner when it loads an answer file, and identity's bootstrap.apply when the request arrives. One list means the two cannot disagree about which environments are covered. The element type keeps the spelling honest: a class renamed above stops this compiling instead of quietly switching the rule off.