Governance

A human in the loop, exactly where you want one

Drop an approval gate before the risky step. Execution pauses, reviewers get a pending request, and the workflow resumes on approve or routes to rejection handling on deny. Unanswered requests expire automatically.

• approval.gate node pauses execution mid-graph
• Approve or reject from the dashboard
• Configurable expiry sweeps stale requests

1. SecurityJWT auth, bcrypt hashing, webhook signature verification, and service-token guards.
2. AuditAppend-only audit events for auth, vault, integrations, triggers, and workspaces.
3. BudgetMonthly token budgets with hard-stop and warning thresholds, enforced pre-execution.
4. SandboxRun tools in Docker containers or Cloud Run sandboxes with limited CPU, memory, and network.
5. Secret rotationOpt-inRotation policies with due dates, verification against the real provider, and a grace window where old and new both work.