Observe — read onlyYou are inside Achimota School
Acting as
No one — observing as yourself
Reason
Applicant cannot see their status
Ticket
EG-24817
Every action is logged as
Efua Mensah
Time leftSession expires at 26 Aug 2026, 14:42.
enrollghana
Signed in as Efua Mensah

Session sup_02 · EG-24790

Wesley Girls' High School

Act session opened 26 Aug 2026, 09:38, ended 26 Aug 2026, 10:06 after 28 min.

Act — can writeEnded

What this session is

Recorded permanently
Institution
Wesley Girls' High School
Support policy
require consent
Ticket
EG-24790
Reason code
Payment taken but not applied
Support agent
Efua Mensah
Acting as
A. N. · Registrar

Masked · FR-M12-05

Opened
26 Aug 2026, 09:38
Ended
26 Aug 2026, 10:06

Justification, as written

“Registrar reports eleven applicants paid on 3 September but the cycle still shows them unpaid. Need to view the transaction states against the applications to work out whether the callback or the matching is at fault.”

Wesley Girls' High School can read this, verbatim, alongside everything the session did.

Applications in this institution

1 visible

A support session can never see more than the institution's own staff, and staff never see an application the applicant has not submitted. Drafts are filtered out at the data layer, not hidden in the markup — BRD §3.4.

EG-3P8T-51RBoffer issued2027/2028 Direct Admission
Submitted
03 Sept 2026, 14:41
Last changed
19 Sept 2026, 08:15
Programme choices
General Science
Institution
Wesley Girls' High School

Status timeline

  1. offer issued — from under review

    Institution staff · Offer of admission — General Science, boarding.

  2. submitted — from draft

    Applicant

Attached documents2 attached

  • Birth certificate

    1 page · uploaded 20 Aug 2026, 19:40

    Excluded from support accessAC-CS-04

  • BECE results slip

    2 pages · uploaded 20 Aug 2026, 19:40

    Excluded from support accessAC-CS-04

File names and dates are metadata and are shown so you can confirm something was uploaded. The files themselves have no reachable address from a support session — FR-M12-06a.

What you can and cannot do here

FR-M12-06 · default deny

Every control is asked of one table before it is drawn. A capability the table does not mention is refused — absence is a refusal, not an oversight. Nothing is hidden from you; you are shown the refusal and the clause behind it.

Open masked application

Read the application's status, timeline and masked applicant details.

AC-CS-01Permitted by the impersonation ceiling.

Change an answer the applicant gave.

  • FR-M12-06fOnly the institution's own staff may change an application.

View or download a file the applicant uploaded.

  • FR-M12-06a / AC-CS-04Excluded from support access — applicant identity documents are never viewable or downloadable from a support session.

Make an offer, or decline the application.

  • FR-M12-06fOnly the institution's own staff may issue a decision.

Change the account the institution's fees are paid into.

  • FR-M12-06b / AC-CS-05Where an institution's money is paid can never be changed from support.

Record a payment against the application.

  • FR-M12-06cSupport cannot issue a payment.

Refund or void a collected fee.

  • FR-M12-06cSupport cannot reverse or amend a payment.

Download the cycle register as a file.

  • FR-M12-06dRegisters cannot be exported from a support session.

Remove an entry from the tenant's audit trail.

  • FR-M12-06eAudit records cannot be deleted by anyone, support included.

Add a colleague to the institution's team.

  • FR-M12-06gSupport cannot invite staff to a tenant.

Revoke a colleague's access to the institution.

  • FR-M12-06gSupport cannot remove a tenant's staff.

Alter the tenant's sign-in and multi-factor rules.

  • FR-M12-06hA tenant's own security settings can only be changed by the tenant.

Send the applicant's last SMS or email again.

  • FR-M12-06c — default denyNothing in the impersonation ceiling grants this, so it is denied. Capabilities are added to the ceiling reviewably, one at a time — absence is a refusal, not an oversight.

No rule for this capability exists in the ceiling. Default deny.

Read a former student's record held by this institution.

  • FR-M12-06c — default denyNothing in the impersonation ceiling grants this, so it is denied. Capabilities are added to the ceiling reviewably, one at a time — absence is a refusal, not an oversight.

No rule for this capability exists in the ceiling. Default deny.

Act mode does not currently unlock a single write

Every write in the ceiling is seated at permitted: false, so an Act session today can read and nothing more. That is the default-deny design working, not a gap: capabilities are added to the ceiling one at a time, each with the clause that justified it (TSD §13.4). Act still exists, is still separately approved, and is still reviewed — because the day a write is granted, the approval and the review have to already be there.

Everything this session did

5 entries

Recorded against both identities — yours and the account acted as — including the attempts that were refused. The record cannot be edited or deleted by anyone, support included (FR-M12-13, FR-M12-14).

WhenWhoWhatOutcome
26 Aug 2026, 10:06Efua Mensahacting as A. N.Session ended by the agent. Escalated to engineering as a callback fault.support_session · UPDATEPermittedFR-M12-11
26 Aug 2026, 09:56Efua Mensahacting as A. N.Attempted to export the cycle register to compare against the bank file.application_register · EXECUTERefusedFR-M12-06d
26 Aug 2026, 09:50Efua Mensahacting as A. N.Attempted to mark a stuck mobile money transaction as settled.payment · UPDATERefusedFR-M12-06c
26 Aug 2026, 09:42Efua Mensahacting as A. N.Read eleven masked applications in the 2027/2028 cycle.application · SELECTPermittedAC-CS-01
26 Aug 2026, 09:38Efua Mensahacting as A. N.Session opened in Act mode, acting as the Wesley Girls' registrar.support_session · INSERTPermittedFR-M12-03

Back to diagnostics · Supervisor review queue