Skip to content
PROTOTYPE — MOCK DATAFigures are generated fixtures derived from the registry. Not ACF actuals.
Menu (13)

Appraisal — daily decision report

FAILING
Appraisal / Underwriting · production · 1 dataset
k-2026-07-01-01ACTIVEPRODUCTION
SHA256:d4839a1845ee
Issued 1 Jul 2026 to Appraisal / Underwriting · expires 28 Dec 2026
push:datasetread:receiptread:schema
96
DAYS LEFT
ROTATION

Two keys may be active at once, overlapping for at most 30 days. That overlap is not a convenience — without zero-downtime rotation, the rotation never happens, and an eternal credential is the one nobody replaces.

WHAT WE REFUSE TO ISSUE
  • · An organisation-wide shared key. A Telesales key must not be able to write Finance numbers.
  • · A credential that can both read and write. This one is push-only — it cannot read a single metric value.
  • · An unlimited lifetime. 180 days by default, 365 at most.
  • · “Resend me the same key.” Lost means rotate, never recover.

Each of these would be a one-line feature, and each would quietly undo the row-level security model in 04 §8. That is why they are listed as refusals rather than left unbuilt.