Securing the Break-Glass: Why Physics Needs a Taxi Meter 🚖💥

A VITI Magazine Exclusive

In the Business Impact Governance Framework (BIGF), we replace manual ITIL processes with a deterministic state machine. If your telemetry fails or your architecture violates the required Business Impact Analysis (BIA) thresholds, the system triggers a 403 Hard Halt.

But what happens when an executive demands an "emergency exception" to bypass the rules and save a release?

In traditional Corporate IT, exceptions are granted in a 2:00 AM crisis meeting. A temporary workaround is created, the IT team absorbs the risk, and that "temporary" fix stays in production for five years. The exception becomes the new normal.

Under BIGF, you can break the glass. But it will cost you. Literally.

We secure the Break-Glass protocol by hardcoding human psychology, financial friction, and cryptographic accountability directly into the runtime. Here is the actual Python implementation of the BIGF Break-Glass Taxi Meter.

The Code: break_glass.py

This module enforces four immutable laws of BIGF physics:

1. Cryptographic Shame: Every override is signed and hashed. No backroom deals.
2. Liability Shift: The system SLA drops to 0.0 (WARRANTY_VOID). The executive owns the risk.
3. The Taxi Meter: A €500/hour fee is billed directly to the executive's cost center.
4. Exponential TTL: When the Time-to-Live expires, the price doubles.

import time
import hashlib

class BIGFBreakGlassProtocol:
    def __init__(self, financial_ledger, base_rate_eur: float = 500.0, default_ttl_sec: int = 7200):
        self.ledger = financial_ledger
        self.base_rate = base_rate_eur
        self.default_ttl = default_ttl_sec
        self.active_overrides = {}

    def smash_glass(self, executive_id: str, target_system: object, reason: str, crypto_key: str):
        """
        Suspends gravity, but shifts 100% of the liability and cost to the requester.
        """
        now = int(time.time())

        # 1. Cryptographic Shame (Canonical Decision Record)
        decision_hash = hashlib.sha256(f"{executive_id}:{target_system.id}:{reason}:{now}".encode()).hexdigest()

        if not self._verify_ed25519_signature(executive_id, crypto_key):
            return {"status": "403_FORBIDDEN", "msg": "Invalid cryptographic signature."}

        # 2. Complete Liability Shift (WARRANTY_VOID)
        target_system.set_sla(0.0)
        target_system.set_support_status("WARRANTY_VOID")

        # 3. Financial Friction (The Taxi Meter)
        override_id = f"OVR-{decision_hash[:8]}"
        self.active_overrides[override_id] = {
            "exec_cost_center": executive_id,
            "system": target_system.id,
            "ttl_expires": now + self.default_ttl,
            "current_rate": self.base_rate
        }

        # Bill the first hour immediately
        self.ledger.bill_cost_center(executive_id, amount=self.base_rate, reason=f"Break-Glass Init: {override_id}")

        return {
            "status": "GRAVITY_SUSPENDED",
            "override_id": override_id,
            "liability": executive_id,
            "sla": "0.0%",
            "ttl_seconds_remaining": self.default_ttl,
            "taxi_meter": f"€{self.base_rate}/hour (Exponential post-TTL)"
        }

    def enforce_ttl_tick(self):
        """
        Called by a cron job every minute. Enforces the Exponential Time-to-Live.
        """
        now = int(time.time())
        for ovr_id, data in list(self.active_overrides.items()):

            if now > data["ttl_expires"]:
                # 4. Exponential Time-to-Live Penalty
                data["current_rate"] *= 2.0  # The price doubles
                data["ttl_expires"] = now + 3600 # Grant one more hour of agony

                self.ledger.bill_cost_center(
                    cost_center=data["exec_cost_center"], 
                    amount=data["current_rate"], 
                    reason=f"TTL Violation Penalty: {ovr_id}"
                )

                # Optional BIGF Purist Mode: 
                # Uncomment the line below to physically kill the connection instead of billing.
                # target_system.hard_reset_to_compliance()

Why This Destroys Governance Theater

When an executive sees this code, their definition of a "critical business emergency" suddenly becomes very strict.

They can no longer force the IT department to carry the risk of a botched deployment. When they pull the lever, the monitoring dashboards flash red with WARRANTY_VOID, their personal cryptographic signature is broadcast to the entire organization, and their own budget starts bleeding €500 an hour.

We don't need to argue in CAB meetings anymore. We just let the code execute.

---

(Business Impact Governance Framework by Erkki Laine - Designed in Turku, Enforced by Physics)

Just google it: BIG framework Erkki Laine

UPDATE (Nov 2026):
The official BIGF "Break-Glass Protocol Activated. The Taxi Meter is Running." deterministic gear is available to fund the resistance.
👉 [VITI Labs Official Store: viti-labs.myspreadshop.fi]