Local simulationExternal actions off
Owner-only operations
PILOT OPERATIONS
Readiness is a gate, not a feeling.
This view reports only verified checks. Missing credentials and unperformed drills remain visible and block a customer pilot.
3/6gates passedCustomer pilot blocked
PRODUCTION READINESS GATES
Evidence required before pilot
Application controlsPassed
Database isolationPassed
Google credentialsConfigured
Internal tenant verificationNot run
Incident drillNot run
Backup restore drillNot run
LIMITS & METERING
Conservative pilot envelope
- Pilot tenants
- Maximum 5
- Autonomy
- Level 1–2
- Outbound/day
- 20 per tenant
- AI budget/month
- £250 per tenant
- Recipient scope
- Allowlist only
- Retention
- 90-day pilot
INCIDENT RUNBOOK
Contain first, investigate second
- 01 Activate tenant or provider kill switch.
- 02 Revoke OAuth tokens and webhook channels.
- 03 Preserve audit evidence and provider IDs.
- 04 Notify the owner and classify severity.
- 05 Recover only after explicit approval.
No automated recovery in the pilot.