The maker-checker matrix is not the path in the application
Why a laminated dual-control table can look complete while a live transfer still releases from a single login.
Retail banks in Kuala Lumpur often keep a tidy matrix: amount bands, DuitNow versus intra-bank, and named checkers. The mobile banking application may display that table on a help screen while the live path uses a different rule set—acting roles, a leftover corporate-user flag, or a limit that resets when the customer reinstalls the app.
A transfer-path reconstruction starts with a sample of completed instructions, not with the policy PDF. If a payment can reach “released” without the person the matrix names, the control exists on paper only.
We ask one practical question in the walkthrough: would internal audit accept this screenshot as evidence that the named checker decided? If the answer is no, the configuration work belongs on the next change window, not in a footnote.