Enterprise

Enterprise

Enterprise v2 overlay: fail-closed security, SSRF allowlists, durable SQLite jobs, /api/v2, RBAC.

Deep: enterprise-v2.md · Security and Target Policy.

What the installer changes

Area	Change
Webhooks	Signatures required; X-GitHub-Delivery; replay rejection
Jobs	Durable SQLite workers; recursive secret redaction
URLs	Target policy before every execution
AI flow	Deterministic safety gateway
Scheduler / findings	SQLite-backed

Backups of patched files: *.v1-backup.

Queue a durable job

curl -X POST https://qa.example.com/api/v2/jobs \
  -H 'Content-Type: application/json' \
  -H 'Idempotency-Key: deployment-7f0a1' \
  -d '{
    "kind": "vitals",
    "params": {"url": "https://app.example.com", "device": "Desktop Chrome"}
  }'

Secret references (raw tokens rejected when persisted):

{
  "kind": "realtime",
  "params": {
    "url": "https://app.example.com",
    "ws": "/ws/events",
    "token": {"$secret": "env:QA_REALTIME_TOKEN"}
  }
}

Service tokens

python tools/hash_api_token.py
# Store hashes only
export ZYVOR_API_TOKENS_FILE=/run/secrets/zyvor/api-tokens.json

Role	Scope
viewer	Read jobs, findings, schedules, audit
operator	Run/cancel jobs; manage schedules/findings
admin	All scopes

Persistence

Default DB: reports/mission-control.db
Override: ZYVOR_STATE_DB=/var/lib/zyvor-qa/mission-control.db

SQLite suits one control-plane replica; use Postgres + external queue before horizontal scale.

Secure Kubernetes

kubectl apply -f kubernetes/enterprise/secure-deployment.yaml
kubectl apply -f kubernetes/enterprise/network-policy.yaml

Pod restart is excluded from default RBAC — apply optional-pod-restart-rbac.yaml only if needed.

Agent modes

read_only · supervised · unrestricted — see Security and Target Policy.

Related: Dashboard API · Webhooks Reference · Admin Basics