City policy requires two independent approvers before a newly trained 311 classifier can be promoted to production. What lifecycle defense is that?
Select an answer to reveal the explanation.
Short Explanation
Two keys to promote a model is the same idea as two signatures on a check—don’t let one person flip prod alone.
Full Explanation
City policy requiring two independent approvers before a newly trained 311 classifier can be promoted to production is change-control dual approval for civic model promotion as a training-lifecycle defense. Dual control reduces the chance that a single insider, compromised account, or rushed operator promotes a poisoned or defective model into resident-facing triage. It applies classic separation of duties to the ML lifecycle: train and propose versus authorize production.
Continuous drift monitoring for civic model accuracy after production deployment is a post-deployment detection control and does not implement promotion dual control before a model reaches residents. Automated single-step promotion for civic model release on validation score removes the required second human approver and lets one metric or automated process flip prod alone. Immutable training dataset versioning for civic model audit traceability and reproducibility supports provenance but does not create two-person integrity for model release. These options fail because they address post-deployment detection, single-step automation, or dataset provenance—none enforces two independent approvers at the promotion gate.
Exam caveat: dual approval is preventive control, not detection of poison by itself—approvers need evidence (metrics, integrity checks, model card) or the ritual is rubber-stamping. Break-glass promotion should be rare, logged, and time-bounded. Distinguish dual approval of code deploy from dual approval of model artifacts; civic AI needs the latter explicitly.
Operational check: enforce two distinct identities in the model registry promotion workflow; block self-approval; attach checklist evidence before the second signature. Audit recent 311 classifier promotions for single-approver exceptions. If one person can still flip prod alone, the training-lifecycle defense is not actually institutionalized.