Identity & permissions
Which accounts connect, which actions are read-only, and how are production writes approved?
Deployment review
Security starts with the exact workflow and access boundary.
The public catalogue does not imply one universal hosting model or control set. Review the proposed implementation before granting access.
Data boundary
What enters the workflow, where is it processed, how long is it retained and who can access it?
Integration failure
How do retries, partial results, rate limits and provider outages surface to an owner?
External actions
Which publishing, bidding, complaint or infrastructure actions require explicit review?
Operations
Who monitors the deployment, handles incidents, rotates credentials and approves changes?
Exit path
How are access, exports and retained data handled when the workflow is discontinued?
Need a scoped review?
Send the product, providers and deployment model to [email protected]. Do not send credentials in the initial message.