Skip to content
Lorca Labs
Live demo
Agents & policy

Dual Control Timer

Not a key manager — but a policy-gated gate that proves N parties explicitly approved before a timed release.

The problem

When sensitive actions require multiple approvals and a time-delayed release, you need a stateful gate that records every approval, rejects self-approval, deduplicates approvers, and only unlocks once the threshold is met and the timer expires.

What it does

01

Creates a dual-control approval request with actionLabel, optional requesterId, requiredApprovals, unlockAfter (ISO-8601 timestamp), and optional meta.

02

Returns a requestId and initial status (pending).

03

Approves a request by requestId + approverId; rejects self-approval and duplicate approvers.

04

Status transitions: pending → armed (threshold met, timer active) → unlocked (timer expired).

05

Lists all requests and fetches a full record by ID.

Who it’s for

  • Security teams enforcing multi-party operations
  • SREs managing production access change windows
  • Compliance reviewers auditing approval chains

In context

Complements Sovereignty (agent governance), Escape Hatch Notarization (exception records), and the Consent Receipt Registry (consent integrity).

Try it live in the studio

A no-signup, in-browser experiment against an isolated demo host. Load sample data, run the flow, and see the result — nothing is stored.