Identity
WorkOS users, orgs, memberships
Launch governance is enforced
Public registration remains closed until readiness passes and the approval request is enabled.
Ready
Security Gates
Step-up, legal hold, break-glass
Evidence Ledger
Append-only M14/M16 records
Launch Approval
Two distinct admin approvals
Support Drills
Recovery, export, incident, billing, outage
Deployments
AWS and Hetzner artifacts ready
Readiness Checks
M14 security checklistRequired
M16 evidence packageRequired
Public launch flagDisabled
Route 53AWS login pending
Audit posture
High-risk actions use idempotency, tenant context, RLS, audit events, and outbox evidence.
Break-glass
Customer approval and second staff approval are required before scoped activation.