TR mirror drift in docs/guides/iso_soc2_deployer_guide.md: Every model promotion is dual-controlled; two distinct operator IDs prove segregation of duties (DOC-TR08-008) #322

Wave 1 · theme D1-10: Documentation-only fixes · highest severity High · 1 finding(s) · effort docs fix

Summary

Neither: ForgeLM records identities only; operator IDs are unauthenticated strings and not enforced (see human_approval_gate §6).

Primary finding

DOC-TR08-008 — TR mirror drift in docs/guides/iso_soc2_deployer_guide.md: Every model promotion is dual-controlled; two distinct operator IDs prove segregation of duties

severity High

Where. EN docs/guides/iso_soc2_deployer_guide.md:28-29,158-159 · TR docs/guides/iso_soc2_deployer_guide-tr.md:28-30,158-159

English text. Every model promotion is dual-controlled; two distinct operator IDs prove segregation of duties

Turkish text. Her model promotion çift kontrollü ... İki farklı operator ID görev ayrılığını kanıtlar

Which is correct. Neither: ForgeLM records identities only; operator IDs are unauthenticated strings and not enforced (see human_approval_gate §6).

Proposed correction (Turkish text for the -tr page). ForgeLM her promotion için hem eğiten hem onaylayan kimliği kaydeder; ikisinin farklı olmasını ZORUNLU KILMAZ ve kimliği doğrulamaz. İki farklı operator ID, IdP kayıtlarıyla birlikte görev ayrılığının kanıtına katkı yapar, tek başına kanıt değildir.

Acceptance criteria

• Each statement is re-checked against the code at fix time.
• Documentation listed above is corrected in English and in its Turkish mirror in the same PR.
• Every finding in this issue is resolved or explicitly closed with a reason.

_{Found by the October 2026 ForgeLM code and documentation review against commit cab2947. Code links point at that commit; line numbers may have moved since. Finding IDs (CR-…, DOC-…, TECH-…) are stable references for this backlog.}