Security
How access, keys and data are protected between the ERP and its agents.
- Least privilege. Agents read through a narrow, read-only service identity, and each request runs with the asking person's own permissions.
- Signed requests. Each request from the agents to the ERP carries a short-lived, single-use signature naming who is asking and for exactly what. A request without one is refused.
- Pinned to one address. The agents' access key works only from the agents' own server. A copied key is useless elsewhere.
- One door. Other agent access that would bypass approval is switched off. Every agent goes through Dynocortex's controls.
- Pinned tool definitions. The agents check that the tools they're offered haven't been changed since release.
- Outside text is marked untrusted. Text from customers and suppliers reaches the agents labeled as untrusted content, to report on, not to obey. Approval before every write is the backstop.
- Sensitive data excluded by default: payroll, bank accounts, employee personal data, contact details and passwords.
- Secrets are kept in configuration, never in code.