A financial services firm wants to enforce access so that contractors can only reach the internal code repository during business hours (08:00–18:00) on weekdays, from corporate-managed IP ranges, and the same restriction applies uniformly to every contractor regardless of their job title or department. The security architect must select the access control model that natively enforces these globally applied conditions without evaluating individual user identities or their assigned roles. Which model best fits this requirement?