Finance — STRAVIS monthly upload

This project is upload-only. A credential exists to authenticate a machine; a person uploading a file authenticates as themselves, and the upload carries their identity into the audit log. Issuing a key here would create a secret with nothing to use it.

• · An organisation-wide shared key. A Telesales key must not be able to write Finance numbers.
• · A credential that can both read and write. This one is push-only — it cannot read a single metric value.
• · An unlimited lifetime. 180 days by default, 365 at most.
• · “Resend me the same key.” Lost means rotate, never recover.

Each of these would be a one-line feature, and each would quietly undo the row-level security model in 04 §8. That is why they are listed as refusals rather than left unbuilt.