Separation between businesses
In developmentEach business's records are tagged to its organization, and database access rules limit staff to their own organization's data; known gaps in this separation are still being closed.
Lamiak Core · Deployment and governance
How records are kept apart per organisation, which outside services receive data and why, and what would have to be true before something changes.
The question
Records are tagged to the organisation they belong to, and database access rules are set up per organisation. Known gaps in that separation are open work, and we hold the status at in development until they are closed. Outside services are called for a named purpose, and which ones receive a product's data is published before that product is offered to customers. What would govern a change — a registry of what is running, and a gate a candidate has to pass — is designed and not built.
How it works today
In developmentSeparation between organisations is built and still being hardened. What crosses the boundary is a short, named list.
Every record carries the organisation it belongs to, and database access rules limit staff to their own organisation's data.
Known gaps in that separation are open work. The registry entry stays at in development until they are closed, rather than being raised early.
Model, transcription, payment, messaging and calendar services are called for a named purpose, and which ones receive a product's data is something we will publish before that product reaches customers.
What is planned
PlannedThe machinery that would govern a change is on the registry as planned.
Models, adapters and prompts listed with the evaluation history behind each one, so a question about a result has somewhere to go.
A candidate would have to do better on evaluations before it is trusted with more in production than the one it replaces.
Where the records sit
Inside your organisation's boundary
Outside the boundary
What this leans on
Each card carries its own status, taken from the registry rather than written here. How the labels are used is set out on the trust page.
Each business's records are tagged to its organization, and database access rules limit staff to their own organization's data; known gaps in this separation are still being closed.
A registry of models, adapters and prompts with their evaluation history.
A candidate must prove better on evaluations before it receives authority in production.
The rest of Lamiak Core
We map the work, the systems it touches and the approvals it needs before anything is automated.