stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
deb82b4f03bbabf1067f28e3c7aa3a5c1509b583
git.stella-ops.org/docs/modules/notify/security/tenant-approvals.md
StellaOps Bot deb82b4f03 docs consolidation work
2025-12-25 10:54:10 +02:00

509 B
Raw Blame History

Tenant scoping and approvals (NR2)

  • All Notify APIs require tenant_id in request and ledger records.
  • High-impact actions (escalations, PII-bearing templates, cross-tenant fan-out) need N-of-M approvals: default 2 of 3 approvers with Notify.Approver role.
  • Approvals captured as DSSE-signed records (future hook) and stored alongside rule change requests.
  • Rejection reasons must be logged and returned in error payloads; audit log keeps requester, approver IDs, timestamps, and rule/template IDs.