Security

Tenant isolation and role-based controls

Azums enforces workspace/tenant context in backend requests. Frontend permissions mirror backend role rules and do not fabricate authority.

Auth surface

Session cookie auth for app routes with protected backend proxy endpoints.

Sensitive data handling

API key secrets are one-time reveal only; key list never returns token values.

Execution truth

Receipts, history, callbacks, and replay lineage are backend-sourced durable records.