Admin console
Tenant administration
Webhook rotation, audit integrity proofs, waiver lifecycle, SLO targets, and the rule-pack marketplace.
Tenant
—
Resolved server-side; matches every `requireRole` decision.
Tier
enterprise
src: default
Source chain: JWT claim → env-tenant → env-global → entitlement store → default.
Serving region
uk
Data residency pinned per tenant (SN3). UK pair: UK-South / UK-West.
CN2
Webhook rotation + delivery
Rotate signing keys with a dual-key grace window; replay failed deliveries with idempotency.
CN3
Audit-log integrity proofs
Verify a chain range; export a signed proof bundle for evidence collection.
CN4
Waiver lifecycle
Grant / acknowledge / revoke; review the expiry queue; every action audit-logged.
CN5
SLO targets
Per-tenant SLO definitions; feeds the SN2 paging threshold evaluation.
CN6
Rule-pack marketplace
Install or enable rule packs per tenant; the jurisdiction-tagged registry seam.