ROLES · RESPONSIBILITIES · DELEGATION · ACCOUNTABILITY
Institutional Roles & Responsibility
A role is not a title alone. It is a bounded assignment of authority, competence, evidence duties, decision rights, execution limits, escalation obligations, and outcome accountability.
What the role is permitted and required to decide.
What knowledge, qualification, and experience the role must possess.
What records the role must create, inspect, preserve, or challenge.
What outcome the role must answer for and cannot delegate away.
ROLE CONTROL DESK
Find the role. Inspect the authority. Preserve the boundary.
Use the index to inspect responsibilities, required evidence, and the limits that prevent titles from becoming unbounded permission.
Institutional authority
Governing Body
Sets institutional direction, approves policy, establishes risk appetite, appoints accountable officers, and preserves ultimate oversight responsibility.Approve governance policy and institutional objectives
Define risk appetite, consequence thresholds, and escalation boundaries
Review material failures, exceptions, and unresolved authority conflicts
Require evidence of implementation, not merely policy publication
Board resolutions
Approved policies
Delegation records
Management review minutes
◆ Cannot delegate away ultimate accountability
◆ Must distinguish oversight from operational execution
ROLE AUTHORITY CHAIN
A title becomes governable only when its mandate survives every link.
TA-14 preserves the route from institutional mandate through delegated role, competent decision, controlled execution, and accountable outcome.
ROLE FAILURE MODES
Most accountability failures begin before the decision.
These conditions should create HOLD, DENY, or ESCALATE rather than being hidden behind organizational titles.
No named person or body owns the decision.
Two roles claim incompatible authority.
The delegation or appointment is no longer current.
The role lacks required qualification or domain knowledge.
The role decides without access to necessary evidence.
Human review exists only nominally.
Technical systems act outside the committed determination.
No role remains accountable after action is taken.
ROLE RESOLUTION SCENARIOS
See how multiple roles combine around one consequential event.
No single title governs the entire route. Each scenario requires distinct authority, evidence, decision, execution, and outcome responsibilities to remain visible.
AI account suspension
A system proposes suspending a user account after detecting suspicious behavior.
- Is the suspension authority current and role-specific?
- Does the evidence support this account, event, and version?
- Is human review required before consequence?
- Who verifies the post-action outcome?
HOLD when identity, authority, evidence, or review conditions remain incomplete.
Hospital pressure failure
A hospital isolation room loses required pressure relationship during occupancy.
- Which activity and occupants are affected?
- What instrument and method establish the pressure state?
- Who may restrict, relocate, or close the room?
- What evidence supports reopening?
ESCALATE when patient safety, clinical authority, or conflicting evidence exceeds delegated scope.
Refrigerant charging intervention
A technician proposes charging a system after incomplete evacuation evidence.
- Is the technician competent and authorized?
- Is evacuation evidence complete and attributable?
- Are refrigerant and equipment identities preserved?
- What outcome measurements are required?
DENY when the proposed intervention would bypass required evidence or safety controls.
Clean Air Act applicability
A facility must determine whether an emissions activity triggers federal or state duties.
- Which source category and jurisdiction apply?
- What permit or regulatory program controls?
- Which adopted method and edition govern measurement?
- Who signs the resulting determination?
HOLD until jurisdiction, applicability, method, and responsible authority are resolved.
Model version change
A provider replaces the production model while preserving the same product name.
- Is the change material to performance or risk?
- Which prior evidence is no longer current?
- Who approves revalidation and redeployment?
- What users or decisions are affected?
HOLD until the new version is tested, approved, and bound to current authority.
Water contamination result
A laboratory reports a contaminant above a threshold in a drinking-water sample.
- Was sample custody preserved?
- Is the method within laboratory scope?
- Which threshold and jurisdiction apply?
- Who has notification and protective-action authority?
ESCALATE when public-health notification or emergency action may be required.
Entity review submission
An outside entity submits a broad claim that its platform guarantees compliant AI.
- Can the claim be bounded to one capability?
- What evidence and versions support it?
- What is outside scope?
- What may be published or registered?
HOLD until claim, non-claim, evidence, authority, and publication boundaries are complete.
Standard incorporated by reference
A contract cites the latest ASHRAE standard while local code adopted an older edition.
- Which edition is legally adopted?
- Does the contract impose a newer requirement?
- Can both duties coexist?
- What evidence proves implementation?
ESCALATE when adopted law and contractual duty conflict or create different thresholds.
Security incident with evidence risk
A security event threatens logs and execution records needed for later review.
- What must be contained immediately?
- Which evidence must be preserved before remediation?
- Who may isolate systems or revoke credentials?
- How will continuity be demonstrated afterward?
ALLOW emergency containment only within time-limited authority and evidence-preservation controls.
Privacy deletion request
A person requests deletion of data that also forms part of a legally required record.
- Which rights and exemptions apply?
- What retention authority controls?
- Can data be restricted or separated instead of erased?
- Who documents the final determination?
HOLD until privacy rights, retention duties, and evidence integrity are reconciled.
Registry correction
A registered entity discovers a material error in a previously published record.
- Can the error be corrected without erasing history?
- Does the correction change prior findings?
- Who approves supersession?
- What users must be notified?
ALLOW correction only with preserved prior version, reason, authority, and effective date.
Academy credential decision
A learner passes an assessment but has not demonstrated live operational competence.
- What does the credential actually attest?
- What operational authority remains separate?
- Are accommodations and assessment integrity preserved?
- Who grants live-role authorization?
DENY automatic execution authority; issue only the bounded learning or readiness credential supported.
ROLE & RESPONSIBILITY ACADEMY
Learn the mandate before accepting the title.
The Academy teaches how roles are created, delegated, limited, evidenced, challenged, suspended, superseded, and connected to real execution and outcome accountability.
Read the instrument that creates the role.
Trace who delegated what to whom.
Prove readiness for the assigned duty.
Know what the role may allow, hold, deny, or escalate.
Create and preserve the evidence the role owes.
Practice conflicts, exceptions, and adverse outcomes.
TA-14 INSTITUTIONAL ROLE RESOLUTION