Skip to content
PROTOTYPE — MOCK DATAFigures are generated fixtures derived from the registry. Not ACF actuals.
Menu (13)

HR — ClickUp delivery feed (Layer 4)

HEALTHY
HR & Administration · production · 1 dataset
k-2026-09-01-01ACTIVEPRODUCTION
SHA256:185e86fb1b32
Issued 1 Sep 2026 to HR & Administration · expires 28 Feb 2027
push:datasetread:receiptread:schema
158
DAYS LEFT
ROTATION

Two keys may be active at once, overlapping for at most 30 days. That overlap is not a convenience — without zero-downtime rotation, the rotation never happens, and an eternal credential is the one nobody replaces.

WHAT WE REFUSE TO ISSUE
  • · An organisation-wide shared key. A Telesales key must not be able to write Finance numbers.
  • · A credential that can both read and write. This one is push-only — it cannot read a single metric value.
  • · An unlimited lifetime. 180 days by default, 365 at most.
  • · “Resend me the same key.” Lost means rotate, never recover.

Each of these would be a one-line feature, and each would quietly undo the row-level security model in 04 §8. That is why they are listed as refusals rather than left unbuilt.