Trust-On-Call

The assumption that a caller’s voice, familiarity, or stated role is enough to authorise an identity change. It is a weak assurance pattern because it relies on conversation rather than cryptographic proof. In practice, it creates a security gap between support workflows and formal authentication policy.