Glossary
Deferred Action
A deferred action is requested at one point in time but executed at a later one — a scheduled send, a delayed post, a future-dated change — which opens a gap between when the requester's authorization was checked and when the action actually takes effect. A principal's authorization can genuinely change during that gap: access could be revoked, a role could shift, an account could be suspended, all after the action was scheduled but before it runs.
A system that checks authorization only at scheduling time and never again at execution risks carrying out an action on behalf of a principal whose authority to do so no longer holds by the time it actually executes. Re-verifying at execution, not just trusting the authorization snapshot taken when the action was originally requested, is what closes this gap.