Operate

Security

Sirius treats governance as part of the runtime, not a plugin.

Identity

People sign in with a local account or your IdP (OIDC, and brokered directory or SAML providers). Services use revocable sk_ tokens. A break-glass key exists for emergencies and is audited when used. See Connect an identity provider and Issue an API token.

Authorization

RBAC is enforced on the console, the REST API, and the agent together. A role that cannot deploy in the UI also cannot deploy through a script. Seeded roles cover admin, operator, viewer, auditor, and support; you can grant finer permissions.

Tenancy

Resources belong to a tenant. Cross-tenant reads look like missing objects (404). Production deployments should refuse to start if isolation is off.

Secrets and encryption

Credentials live in a managed secret store and are referenced from connectors. Exported integration packages carry those references, never raw secrets. Payload encryption and retention policy are tenant settings.

Sandbox

Mapping scripts cannot see the host filesystem or the network by default. Connector I/O is explicit and allowlisted. TLS peers are verified unless a deployment deliberately permits otherwise.

Audit

Mutations write an audit record. Attribute agent or service actions with X-Sirius-Agent-ID so the trail stays honest.