Team workflows
Multiple analysts can share a tenant, with role-based scoping and an audit log of every change.
01
Roles
- Admin: manage tokens, billing, integrations.
- Analyst: create runs, triage findings.
- Viewer: read-only access to findings and evidence packs.
02
Audit log
- Every state change writes to `audit_events`.
- Exportable as JSONL for SIEM ingestion.
- Retention follows your tenant data-retention contract.