Workspace-scoped API
API keys and persisted decisions are associated with a workspace; cross-workspace ownership checks have runtime evidence.
ENTERPRISE
Scoped pilots for runtime control of AI agent actions.
Aegisora is seeking design partners to test a policy decision before a consequential tool action. Production hosting, customer SSO, and full audit operations are not yet verified.
Four workspace roles
OWNER, ADMIN, OPERATOR, and VIEWER team permissions have a real Supabase JWT test. Invite and member-removal flows are not available yet.
Decision and evidence paths
The API records runtime decisions and evidence. End-to-end governance coverage is still being validated; no complete audit-ledger claim is made.
Identity federation planned
A provider boundary is documented, but customer SAML/OIDC and automated provisioning are not configured or verified.