API connection
BackendServer-side only
API URLKNOWLEDGE_SHADOW_API_URL
Tenant credentialProtected server secret
The tenant API key is intentionally never exposed through NEXT_PUBLIC_* variables or rendered into browser JavaScript.
Subscription boundary
tenant idlogistics-demo
plan codepilot
statusactive
max monthly events30000
entitlementsdecisions,outcomes,knowledge,analytics
Organization members
Workspace membership returned by the commercial SaaS boundary.
No organization members
Member management is available through the commercial organization API.
Security posture
Visible product boundaries for the paid-pilot stage.
Tenant isolation
Application reads are scoped by authenticated tenant context.
Credential lifecycle
Issue, rotate with grace period, and revoke tenant API credentials.
Evidence governance
The system surfaces evidence for review; policy changes remain human decisions.