# Notifications Studio

Notifications Studio turns platform events into tenant-scoped alerts that are
explainable, deterministic, and offline friendly.

Core capabilities
- Rules engine for filtering by event kind, severity, and context.
- Channel connectors for chat, email, and webhook delivery.
- Templates with deterministic rendering and safe helpers.
- Digests to coalesce bursts into scheduled summaries.
- Delivery ledger for audit and troubleshooting.

Operational model
- Notify.Worker evaluates rules per tenant.
- Connectors deliver rendered payloads and report outcomes.
- Notify.WebService exposes API endpoints for UI and CLI.

Security and governance
- Tenancy enforced on all rules and deliveries.
- Secrets are referenced via secretRef, not stored in config.
- Ack tokens are DSSE signed and authority scoped.
- Webhook deliveries are HMAC-SHA256 signed with nonce or timestamp.
- Outbound allowlists block public egress in sealed deployments.

Offline posture
- Offline kits bundle default rules, templates, and plugins.
- Deterministic rendering keeps hashes stable across environments.

Related references
- docs/notifications/overview.md
- docs/notifications/rules.md
- docs/notifications/templates.md
- docs/notifications/digests.md
- docs/modules/notify/architecture.md
- docs2/notifications/overview.md
- docs2/notifications/rules.md
- docs2/notifications/channels.md
- docs2/notifications/templates.md
- docs2/notifications/digests.md
- docs2/notifications/pack-approvals.md