CI bots and deployment pipelines can dispatch workflows, change production configuration, and rotate secrets — often with bearer tokens and after-the-fact logs only.
Solution domain
Infrastructure & DevOps
ActivePer-action control over privileged automation.
Domain readout
- Status
- Active
- Protected workflows
- 2 shipped guards
Domain status
Active- Shipped today
- Workflow Dispatch GuardShipped
- Deployment & Config Change GuardShipped
Workflow dispatch guard is canonical; deployment guard available under engagement.
2 shipped guards
- 01Workflow Dispatch GuardShipped
- 02Deployment & Config Change GuardShipped
A high-risk workflow dispatch is held until a named operator approves this exact run — then evidence records the full authority trail.
Related workflow guards
We show outcomes — not internal recipes. Verify in the Proof Lab.
See the authority loop proof