Skip to content
PROTOTYPE — MOCK DATAFigures are generated fixtures derived from the registry. Not ACF actuals.
Menu (13)

National Sales Network — POS register

NEVER RUN
National Sales Network · sandbox · 1 dataset
k-2026-09-11-01ACTIVESANDBOX
SHA256:8a09960f18dd
Issued 11 Sep 2026 to National Sales Network · expires 10 Mar 2027
push:datasetread:receiptread:schema
168
DAYS LEFT
ROTATION

Two keys may be active at once, overlapping for at most 30 days. That overlap is not a convenience — without zero-downtime rotation, the rotation never happens, and an eternal credential is the one nobody replaces.

WHAT WE REFUSE TO ISSUE
  • · An organisation-wide shared key. A Telesales key must not be able to write Finance numbers.
  • · A credential that can both read and write. This one is push-only — it cannot read a single metric value.
  • · An unlimited lifetime. 180 days by default, 365 at most.
  • · “Resend me the same key.” Lost means rotate, never recover.

Each of these would be a one-line feature, and each would quietly undo the row-level security model in 04 §8. That is why they are listed as refusals rather than left unbuilt.