01 · Long control antecedents
Shared custody and countersignature
Institutions have long separated initiation, custody and approval to reduce error and abuse; implementations differ by sector and jurisdiction.
GERMAN OPERATING PRINCIPLE · HISTORY × APPLICATION × BOUNDARY
Vier-Augen-PrinzipVier-Augen-Prinzip
Require a suitably independent second person to challenge a material commitment before it becomes irreversible.
Four-eyes review is not two signatures on the same assumption. Independence, competence, authority and a recorded response to challenge are essential.
HISTORICAL LINEAGE · WITHOUT INVENTED CONTINUITY
Older antecedents and modern translation are kept separate.
02 · Modern governance
Segregation of duties
Financial, safety, security and public-administration controls formalised independent review and divided authority.
03 · Digital workflow
Approval gained an audit trail
Workflow systems can preserve reviewer identity and change history, but cannot manufacture independence or competent judgement.
04 · Site translation · 2026
Decision-specific challenge
The reviewer is selected for the risk: evaluator, delivery, commercial, legal, security or executive—not for generic proofreading.
WORKED SCENARIO · ILLUSTRATIVE, NOT MEASURED PERFORMANCE
What changes when the principle becomes observable.
The same author designs, writes, checks and approves a critical mobilisation claim.
A delivery leader tests feasibility and a commercial owner tests contractual exposure; both dispositions are recorded.
The claim is revised, bounded and accepted by the people who must execute and fund it.
SOURCE TRAIL · REVIEWED 26 JUL 2026