[{"data":1,"prerenderedAt":1781},["ShallowReactive",2],{"navigation":3,"/vault/access-policies":925,"/vault/access-policies-surround":1776},[4,35,57,98,116,185,206],{"title":5,"path":6,"stem":7,"children":8,"icon":10},"Use it","/use","00.use/1.index",[9,11,16,21,26,30],{"title":5,"path":6,"stem":7,"icon":10},"i-lucide-list-checks",{"title":12,"path":13,"stem":14,"icon":15},"Run a workflow from an assistant","/use/run-from-an-assistant","00.use/2.run-from-an-assistant","i-lucide-bot",{"title":17,"path":18,"stem":19,"icon":20},"Connect a cloud and use it","/use/connect-a-cloud","00.use/3.connect-a-cloud","i-lucide-cloud",{"title":22,"path":23,"stem":24,"icon":25},"Put Orkestia in your app","/use/in-your-app","00.use/4.in-your-app","i-lucide-key-round",{"title":27,"path":28,"stem":29,"icon":15},"Stand up an actor","/use/stand-up-an-actor","00.use/5.stand-up-an-actor",{"title":31,"path":32,"stem":33,"icon":34},"Operate a run","/use/operate-a-run","00.use/6.operate-a-run","i-lucide-activity",{"title":36,"path":37,"stem":38,"children":39,"icon":42},"Getting Started","/getting-started","02.getting-started/1.index",[40,43,48,53],{"title":41,"path":37,"stem":38,"icon":42},"Quick Start","i-lucide-rocket",{"title":44,"path":45,"stem":46,"icon":47},"Architecture Overview","/getting-started/architecture-overview","02.getting-started/2.architecture-overview","i-lucide-layout-dashboard",{"title":49,"path":50,"stem":51,"icon":52},"Concepts at a Glance","/getting-started/concepts","02.getting-started/3.concepts","i-lucide-list",{"title":54,"path":55,"stem":56,"icon":15},"Connect an AI Assistant","/getting-started/connect-an-ai-assistant","02.getting-started/4.connect-an-ai-assistant",{"title":58,"path":59,"stem":60,"children":61,"icon":63},"Guides","/guides","04.guides/1.index",[62,64,69,74,79,84,89,93],{"title":58,"path":59,"stem":60,"icon":63},"i-lucide-compass",{"title":65,"path":66,"stem":67,"icon":68},"Building with DGI","/guides/building-with-dgi","04.guides/2.building-with-dgi","i-lucide-brain-circuit",{"title":70,"path":71,"stem":72,"icon":73},"Creating & Exposing Virtual Workflows","/guides/virtual-workflows","04.guides/4.virtual-workflows","i-lucide-blocks",{"title":75,"path":76,"stem":77,"icon":78},"Runner Management & Provisioning","/guides/runner-management","04.guides/5.runner-management","i-lucide-server",{"title":80,"path":81,"stem":82,"icon":83},"Security & Compliance","/guides/security-and-compliance","04.guides/7.security-and-compliance","i-lucide-shield",{"title":85,"path":86,"stem":87,"icon":88},"Tickets & Software Delivery","/guides/tickets-and-software-delivery","04.guides/8.tickets-and-software-delivery","i-lucide-ticket",{"title":90,"path":91,"stem":92},"Orkestia for AI-driven cloud infrastructure automation","/guides/cloud-automation-alternatives","04.guides/9.cloud-automation-alternatives",{"title":94,"path":95,"stem":96,"icon":97},"Typed decisions with TypeSafe","/guides/typed-decisions-with-typesafe","04.guides/9.typed-decisions-with-typesafe","i-lucide-git-branch",{"title":99,"path":100,"stem":101,"children":102,"icon":105},"Introduction","/introduction","01.introduction/1.index",[103,106,111],{"title":104,"path":100,"stem":101,"icon":105},"What is Orkestia?","i-lucide-sparkles",{"title":107,"path":108,"stem":109,"icon":110},"Core Philosophy","/introduction/core-philosophy","01.introduction/2.core-philosophy","i-lucide-shield-check",{"title":112,"path":113,"stem":114,"icon":115},"Key Benefits","/introduction/key-benefits","01.introduction/3.key-benefits","i-lucide-trophy",{"title":117,"path":118,"stem":119,"children":120,"icon":122},"Core Concepts","/concepts","03.concepts/01.index",[121,123,128,133,138,142,147,151,156,161,166,170,175,180],{"title":117,"path":118,"stem":119,"icon":122},"i-lucide-book-open",{"title":124,"path":125,"stem":126,"icon":127},"Workflows","/concepts/workflows","03.concepts/02.workflows","i-lucide-workflow",{"title":129,"path":130,"stem":131,"icon":132},"DGI — Dialog Generative Interface","/concepts/dgi","03.concepts/03.dgi","i-lucide-brain",{"title":134,"path":135,"stem":136,"icon":137},"Staff & AI Workforce Governance","/concepts/staff-governance","03.concepts/04.staff-governance","i-lucide-users-round",{"title":139,"path":140,"stem":141,"icon":15},"Agents — the execution substrate","/concepts/agents-platform","03.concepts/05.agents-platform",{"title":143,"path":144,"stem":145,"icon":146},"Runners & Execution Environments","/concepts/runners","03.concepts/06.runners","i-lucide-server-cog",{"title":148,"path":149,"stem":150,"icon":34},"Lumen Observability","/concepts/lumen","03.concepts/07.lumen",{"title":152,"path":153,"stem":154,"icon":155},"Identity & Multi-Tenancy","/concepts/identity-multi-tenancy","03.concepts/08.identity-multi-tenancy","i-lucide-users",{"title":157,"path":158,"stem":159,"icon":160},"Billing, Pricing & Seats","/concepts/billing-and-seats","03.concepts/09.billing-and-seats","i-lucide-credit-card",{"title":162,"path":163,"stem":164,"icon":165},"App Data","/concepts/appdata","03.concepts/10.appdata","i-lucide-database",{"title":167,"path":168,"stem":169,"icon":132},"Engram","/concepts/engram","03.concepts/11.engram",{"title":171,"path":172,"stem":173,"icon":174},"DevKit","/concepts/devkit","03.concepts/12.devkit","i-lucide-terminal",{"title":176,"path":177,"stem":178,"icon":179},"App Host","/concepts/app-host","03.concepts/13.app-host","i-lucide-globe",{"title":181,"path":182,"stem":183,"icon":184},"Agent Exchange","/concepts/agent-exchange","03.concepts/14.agent-exchange","i-lucide-landmark",{"title":186,"path":187,"stem":188,"children":189,"icon":191},"Reference","/reference","05.reference/1.index",[190,192,197,201],{"title":186,"path":187,"stem":188,"icon":191},"i-lucide-library",{"title":193,"path":194,"stem":195,"icon":196},"MCP Integration","/reference/mcp-integration","05.reference/3.mcp-integration","i-lucide-plug-zap",{"title":198,"path":199,"stem":200,"icon":174},"API & Tooling","/reference/api-tooling","05.reference/4.api-tooling",{"title":202,"path":203,"stem":204,"icon":205},"Platform Services","/reference/platform-services","05.reference/7.platform-services","i-lucide-boxes",{"title":207,"path":208,"icon":191,"children":209},"Product pages","/product-pages",[210,237,258,287,317,340,383,411,439,457,491,512,555,569,592,657,695,718,730,820,850,898],{"title":211,"path":212,"stem":213,"children":214,"icon":216},"Advanced Topics","/advanced","06.advanced/1.index",[215,217,222,227,232],{"title":211,"path":212,"stem":213,"icon":216},"i-lucide-flask-conical",{"title":218,"path":219,"stem":220,"icon":221},"Hybrid AI + Deterministic Execution","/advanced/hybrid-execution-model","06.advanced/2.hybrid-execution-model","i-lucide-git-merge",{"title":223,"path":224,"stem":225,"icon":226},"Drift Detection & Self-Healing","/advanced/drift-detection-self-healing","06.advanced/3.drift-detection-self-healing","i-lucide-heart-pulse",{"title":228,"path":229,"stem":230,"icon":231},"Governance & Approvals","/advanced/governance-and-approvals","06.advanced/4.governance-and-approvals","i-lucide-scale",{"title":233,"path":234,"stem":235,"icon":236},"Cost & Performance Optimization","/advanced/cost-and-performance","06.advanced/5.cost-and-performance","i-lucide-zap",{"title":238,"path":239,"stem":240,"children":241,"icon":243},"Operations","/operations","07.operations/1.index",[242,244,248,253],{"title":238,"path":239,"stem":240,"icon":243},"i-lucide-settings-2",{"title":245,"path":246,"stem":247,"icon":205},"Deployment Models","/operations/deployment-models","07.operations/2.deployment-models",{"title":249,"path":250,"stem":251,"icon":252},"Monitoring & Debugging","/operations/monitoring-and-debugging","07.operations/3.monitoring-and-debugging","i-lucide-bug",{"title":254,"path":255,"stem":256,"icon":257},"Best Practices","/operations/best-practices","07.operations/4.best-practices","i-lucide-check-check",{"title":259,"path":260,"stem":261,"children":262,"icon":264},"AWS Connections","/aws-connections","08.aws-connections/1.index",[263,265,268,273,278,283],{"title":259,"path":260,"stem":261,"icon":264},"i-simple-icons-amazonaws",{"title":36,"path":266,"stem":267,"icon":42},"/aws-connections/getting-started","08.aws-connections/2.getting-started",{"title":269,"path":270,"stem":271,"icon":272},"Setup Methods","/aws-connections/setup-methods","08.aws-connections/3.setup-methods","i-lucide-wrench",{"title":274,"path":275,"stem":276,"icon":277},"Managing Connections","/aws-connections/managing-connections","08.aws-connections/4.managing-connections","i-lucide-settings",{"title":279,"path":280,"stem":281,"icon":282},"Security Best Practices","/aws-connections/security-best-practices","08.aws-connections/5.security-best-practices","i-lucide-lock",{"title":284,"path":285,"stem":286,"icon":252},"Troubleshooting","/aws-connections/troubleshooting","08.aws-connections/6.troubleshooting",{"title":288,"path":289,"stem":290,"children":291,"icon":293},"Cloud Connections","/cloud-connections","09.cloud-connections/1.index",[292,294,299,304,308,313],{"title":288,"path":289,"stem":290,"icon":293},"i-lucide-cable",{"title":295,"path":296,"stem":297,"icon":298},"Google Cloud (GCP)","/cloud-connections/gcp","09.cloud-connections/2.gcp","i-simple-icons-googlecloud",{"title":300,"path":301,"stem":302,"icon":303},"Microsoft Azure","/cloud-connections/azure","09.cloud-connections/3.azure","i-simple-icons-microsoftazure",{"title":305,"path":306,"stem":307,"icon":20},"Magalu Cloud","/cloud-connections/magalu","09.cloud-connections/4.magalu",{"title":309,"path":310,"stem":311,"icon":312},"Kubernetes","/cloud-connections/kubernetes","09.cloud-connections/5.kubernetes","i-simple-icons-kubernetes",{"title":314,"path":315,"stem":316,"icon":231},"TypeSafe","/cloud-connections/typesafe","09.cloud-connections/6.typesafe",{"title":318,"path":319,"stem":320,"children":321,"icon":78},"DNS Providers","/dns-providers","10.dns-providers/1.index",[322,324,327,330,333,337],{"title":323,"path":319,"stem":320,"icon":78},"DNS Provider Connections",{"title":36,"path":325,"stem":326,"icon":42},"/dns-providers/getting-started","10.dns-providers/2.getting-started",{"title":269,"path":328,"stem":329,"icon":272},"/dns-providers/setup-methods","10.dns-providers/3.setup-methods",{"title":274,"path":331,"stem":332,"icon":277},"/dns-providers/managing-connections","10.dns-providers/4.managing-connections",{"title":334,"path":335,"stem":336,"icon":52},"Zones and Records","/dns-providers/zones-and-records","10.dns-providers/5.zones-and-records",{"title":284,"path":338,"stem":339,"icon":252},"/dns-providers/troubleshooting","10.dns-providers/6.troubleshooting",{"title":341,"path":342,"stem":343,"children":344,"icon":42},"Cloud Deploy","/cloud-deploy","11.cloud-deploy/01.index",[345,346,349,354,358,363,367,371,376,380],{"title":341,"path":342,"stem":343,"icon":42},{"title":36,"path":347,"stem":348,"icon":42},"/cloud-deploy/getting-started","11.cloud-deploy/02.getting-started",{"title":350,"path":351,"stem":352,"icon":353},"Creating a Site","/cloud-deploy/creating-a-site","11.cloud-deploy/03.creating-a-site","i-lucide-plus-circle",{"title":355,"path":356,"stem":357,"icon":47},"Site Overview and Deployments","/cloud-deploy/site-overview","11.cloud-deploy/04.site-overview",{"title":359,"path":360,"stem":361,"icon":362},"Deployment Progress and Success","/cloud-deploy/deployment-progress","11.cloud-deploy/05.deployment-progress","i-lucide-loader",{"title":364,"path":365,"stem":366,"icon":277},"Settings","/cloud-deploy/settings","11.cloud-deploy/06.settings",{"title":368,"path":369,"stem":370,"icon":179},"Custom Domains","/cloud-deploy/custom-domains","11.cloud-deploy/07.custom-domains",{"title":372,"path":373,"stem":374,"icon":375},"Resources, Releases, and Danger Zone","/cloud-deploy/resources-releases","11.cloud-deploy/08.resources-releases","i-lucide-package",{"title":377,"path":378,"stem":379,"icon":83},"Admin Dashboard","/cloud-deploy/admin-dashboard","11.cloud-deploy/09.admin-dashboard",{"title":284,"path":381,"stem":382,"icon":252},"/cloud-deploy/troubleshooting","11.cloud-deploy/10.troubleshooting",{"title":384,"path":385,"stem":386,"children":387,"icon":390},"User Onboarding","/user-onboarding","12.user-onboarding/1.index",[388,391,394,399,404,408],{"title":389,"path":385,"stem":386,"icon":390},"User Creation and Onboarding","i-lucide-user-plus",{"title":36,"path":392,"stem":393,"icon":42},"/user-onboarding/getting-started","12.user-onboarding/2.getting-started",{"title":395,"path":396,"stem":397,"icon":398},"Creating Your Organization","/user-onboarding/onboarding","12.user-onboarding/3.onboarding","i-lucide-building-2",{"title":400,"path":401,"stem":402,"icon":403},"Invitations","/user-onboarding/invitations","12.user-onboarding/4.invitations","i-lucide-mail",{"title":405,"path":406,"stem":407,"icon":277},"Managing Your Account","/user-onboarding/managing-account","12.user-onboarding/5.managing-account",{"title":284,"path":409,"stem":410,"icon":252},"/user-onboarding/troubleshooting","12.user-onboarding/6.troubleshooting",{"title":364,"path":412,"stem":413,"children":414,"icon":416},"/settings","13.settings/1.index",[415,417,422,426,431,435],{"title":364,"path":412,"stem":413,"icon":416},"i-lucide-sliders-horizontal",{"title":418,"path":419,"stem":420,"icon":421},"General Settings","/settings/general","13.settings/2.general","i-lucide-user",{"title":423,"path":424,"stem":425,"icon":155},"Members Settings","/settings/members","13.settings/3.members",{"title":427,"path":428,"stem":429,"icon":430},"Notifications Settings","/settings/notifications","13.settings/4.notifications","i-lucide-bell",{"title":432,"path":433,"stem":434,"icon":83},"Security Settings","/settings/security","13.settings/5.security",{"title":436,"path":437,"stem":438,"icon":25},"Signing Keys","/settings/keys","13.settings/6.keys",{"title":440,"path":441,"stem":442,"children":443,"icon":42},"App Enablement","/app-enablement","14.app-enablement/1.index",[444,445,449,453],{"title":440,"path":441,"stem":442,"icon":42},{"title":446,"path":447,"stem":448,"icon":25},"Sign in with Orkestia","/app-enablement/sign-in-with-orkestia","14.app-enablement/2.sign-in-with-orkestia",{"title":450,"path":451,"stem":452,"icon":165},"End-user data","/app-enablement/end-user-data","14.app-enablement/3.end-user-data",{"title":454,"path":455,"stem":456,"icon":73},"Compositions — use, invoke, share","/app-enablement/compositions","14.app-enablement/4.compositions",{"title":458,"path":459,"stem":460,"children":461,"icon":34},"Lumen","/lumen","15.lumen/1.index",[462,463,468,473,478,482,486],{"title":458,"path":459,"stem":460,"icon":34},{"title":464,"path":465,"stem":466,"icon":467},"Enable Lumen","/lumen/enable","15.lumen/2.enable","i-lucide-power",{"title":469,"path":470,"stem":471,"icon":472},"Send data","/lumen/send-data","15.lumen/3.send-data","i-lucide-upload",{"title":474,"path":475,"stem":476,"icon":477},"Collector","/lumen/collector","15.lumen/4.collector","i-lucide-container",{"title":479,"path":480,"stem":481,"icon":47},"Use Lumen","/lumen/observe","15.lumen/5.observe",{"title":483,"path":484,"stem":485,"icon":15},"Lumen MCP","/lumen/mcp","15.lumen/6.mcp",{"title":487,"path":488,"stem":489,"icon":490},"Query API","/lumen/query-api","15.lumen/7.query-api","i-lucide-search",{"title":492,"path":493,"stem":494,"children":495,"icon":497},"SDKs","/sdks","16.sdks/1.index",[496,498,503,508],{"title":492,"path":493,"stem":494,"icon":497},"i-lucide-code",{"title":499,"path":500,"stem":501,"icon":502},"Workflows SDK — Node / TypeScript","/sdks/workflows-nodejs","16.sdks/2.workflows-nodejs","i-lucide-file-ts",{"title":504,"path":505,"stem":506,"icon":507},"Workflows SDK — Python","/sdks/workflows-python","16.sdks/3.workflows-python","i-simple-icons-python",{"title":509,"path":510,"stem":511,"icon":25},"Auth SDK — Sign in with Orkestia","/sdks/auth","16.sdks/4.auth",{"title":162,"path":513,"stem":514,"children":515,"icon":165},"/appdata","17.appdata/1.index",[516,517,522,527,531,536,541,546,551],{"title":162,"path":513,"stem":514,"icon":165},{"title":518,"path":519,"stem":520,"icon":521},"Declare structures","/appdata/declare","17.appdata/2.declare","i-lucide-table",{"title":523,"path":524,"stem":525,"icon":526},"Records & Data API","/appdata/data-api","17.appdata/3.data-api","i-lucide-rows-3",{"title":528,"path":529,"stem":530,"icon":398},"Ownership & workspaces","/appdata/ownership","17.appdata/4.ownership",{"title":532,"path":533,"stem":534,"icon":535},"Expose App Data to end-users","/appdata/expose","17.appdata/5.expose","i-lucide-app-window",{"title":537,"path":538,"stem":539,"icon":540},"PostgREST HTTP","/appdata/postgrest","17.appdata/6.postgrest","i-lucide-unplug",{"title":542,"path":543,"stem":544,"icon":545},"Ordered append","/appdata/append","17.appdata/7.append","i-lucide-list-ordered",{"title":547,"path":548,"stem":549,"icon":550},"Databases and instances","/appdata/instances","17.appdata/8.instances","i-lucide-hard-drive",{"title":552,"path":553,"stem":554,"icon":174},"Query console and SQL","/appdata/query","17.appdata/9.query",{"title":167,"path":556,"stem":557,"children":558,"icon":132},"/engram","18.engram/1.index",[559,560,564],{"title":167,"path":556,"stem":557,"icon":132},{"title":561,"path":562,"stem":563,"icon":97},"Write & recall","/engram/write-recall","18.engram/2.write-recall",{"title":565,"path":566,"stem":567,"icon":568},"Field & feed","/engram/agent-memory","18.engram/3.agent-memory","i-lucide-radio",{"title":171,"path":570,"stem":571,"children":572,"icon":174},"/devkit","19.devkit/1.index",[573,574,579,583,588],{"title":171,"path":570,"stem":571,"icon":174},{"title":575,"path":576,"stem":577,"icon":578},"Install DevKit","/devkit/install","19.devkit/2.install","i-lucide-download",{"title":580,"path":581,"stem":582,"icon":540},"Hook redirect","/devkit/hooks","19.devkit/3.hooks",{"title":584,"path":585,"stem":586,"icon":587},"Local coding runner","/devkit/local-runner","19.devkit/4.local-runner","i-lucide-cpu",{"title":589,"path":590,"stem":591,"icon":73},"Compositions from DevKit","/devkit/compositions","19.devkit/5.compositions",{"title":593,"path":594,"stem":595,"children":596,"icon":15},"Staff & Agents","/staff-and-agents","20.staff-and-agents/01.index",[597,598,602,606,610,614,618,622,626,631,635,640,645,649,652],{"title":593,"path":594,"stem":595,"icon":15},{"title":599,"path":600,"stem":601,"icon":10},"Prerequisites","/staff-and-agents/prerequisites","20.staff-and-agents/02.prerequisites",{"title":603,"path":604,"stem":605,"icon":390},"Hire an actor","/staff-and-agents/hire-an-actor","20.staff-and-agents/03.hire-an-actor",{"title":607,"path":608,"stem":609,"icon":47},"Console","/staff-and-agents/console","20.staff-and-agents/04.console",{"title":611,"path":612,"stem":613,"icon":105},"Configs, skills, and MCP","/staff-and-agents/configs-skills-mcp","20.staff-and-agents/05.configs-skills-mcp",{"title":615,"path":616,"stem":617,"icon":78},"Agent runner groups","/staff-and-agents/runner-groups","20.staff-and-agents/06.runner-groups",{"title":619,"path":620,"stem":621,"icon":110},"Governance","/staff-and-agents/governance","20.staff-and-agents/07.governance",{"title":623,"path":624,"stem":625,"icon":25},"Identity and tokens","/staff-and-agents/identity","20.staff-and-agents/08.identity",{"title":627,"path":628,"stem":629,"icon":630},"Memory and cost","/staff-and-agents/memory-and-cost","20.staff-and-agents/09.memory-and-cost","i-lucide-wallet",{"title":632,"path":633,"stem":634,"icon":97},"Coding agents","/staff-and-agents/coding-agents","20.staff-and-agents/10.coding-agents",{"title":636,"path":637,"stem":638,"icon":639},"Wire a repository for coding agents","/staff-and-agents/wire-a-repository","20.staff-and-agents/11.wire-a-repository","i-lucide-link",{"title":641,"path":642,"stem":643,"icon":644},"Run a ticket end to end","/staff-and-agents/run-a-ticket","20.staff-and-agents/12.run-a-ticket","i-lucide-play",{"title":646,"path":647,"stem":648,"icon":137},"Build a product team of actors","/staff-and-agents/build-a-product-team","20.staff-and-agents/13.build-a-product-team",{"title":284,"path":650,"stem":651,"icon":272},"/staff-and-agents/troubleshooting","20.staff-and-agents/14.troubleshooting",{"title":653,"path":654,"stem":655,"icon":656},"Media actors","/staff-and-agents/media-actors","20.staff-and-agents/15.media-actors","i-lucide-clapperboard",{"title":176,"path":658,"stem":659,"children":660,"icon":179},"/app-host","21.app-host/1.index",[661,662,666,669,674,678,683,687,691],{"title":176,"path":658,"stem":659,"icon":179},{"title":663,"path":664,"stem":665,"icon":535},"Your app and site","/app-host/your-app","21.app-host/2.your-app",{"title":162,"path":667,"stem":668,"icon":165},"/app-host/app-data","21.app-host/3.app-data",{"title":670,"path":671,"stem":672,"icon":673},"Website and process","/app-host/hosting","21.app-host/4.hosting","i-lucide-cloud-upload",{"title":675,"path":676,"stem":677,"icon":568},"Buzz","/app-host/buzz","21.app-host/5.buzz",{"title":679,"path":680,"stem":681,"icon":682},"Files","/app-host/files","21.app-host/6.files","i-lucide-folder",{"title":684,"path":685,"stem":686,"icon":179},"Your own domain","/app-host/your-domain","21.app-host/7.your-domain",{"title":688,"path":689,"stem":690,"icon":252},"Troubleshooting App Host","/app-host/troubleshooting","21.app-host/8.troubleshooting",{"title":692,"path":693,"stem":694,"icon":25},"Signing keys","/app-host/signing-keys","21.app-host/9.signing-keys",{"title":181,"path":696,"stem":697,"children":698,"icon":184},"/agent-exchange","22.agent-exchange/01.index",[699,700,703,707,711,715],{"title":181,"path":696,"stem":697,"icon":184},{"title":603,"path":701,"stem":702,"icon":390},"/agent-exchange/hire","22.agent-exchange/02.hire",{"title":704,"path":705,"stem":706,"icon":231},"List an actor","/agent-exchange/list","22.agent-exchange/03.list",{"title":708,"path":709,"stem":710,"icon":174},"Invoke & leases","/agent-exchange/invoke","22.agent-exchange/04.invoke",{"title":712,"path":713,"stem":714,"icon":83},"Settlement & trust","/agent-exchange/settlement","22.agent-exchange/05.settlement",{"title":124,"path":716,"stem":717,"icon":127},"/agent-exchange/workflows","22.agent-exchange/06.workflows",{"title":719,"path":720,"stem":721,"children":722,"icon":146},"Runners","/runners","23.runners/1.index",[723,725],{"title":724,"path":720,"stem":721,"icon":146},"Runner groups",{"title":726,"path":727,"stem":728,"icon":729},"Purposes & integrations","/runners/purposes","23.runners/16.purposes","i-lucide-layers",{"title":731,"path":732,"stem":733,"children":734,"icon":736},"Chat","/chat","24.chat/01.index",[735,737,741,746,750,755,760,764,769,773,778,783,787,792,797,801,805,810,815],{"title":731,"path":732,"stem":733,"icon":736},"i-lucide-messages-square",{"title":738,"path":739,"stem":740,"icon":467},"Enable and publish","/chat/enable-and-publish","24.chat/02.enable-and-publish",{"title":742,"path":743,"stem":744,"icon":745},"Theme and customization","/chat/theme-and-customization","24.chat/03.theme-and-customization","i-lucide-palette",{"title":747,"path":748,"stem":749,"icon":155},"Members and moderation","/chat/members-and-moderation","24.chat/04.members-and-moderation",{"title":751,"path":752,"stem":753,"icon":754},"Channels","/chat/channels","24.chat/05.channels","i-lucide-hash",{"title":756,"path":757,"stem":758,"icon":759},"Using the chat","/chat/using-the-chat","24.chat/06.using-the-chat","i-lucide-message-circle",{"title":761,"path":762,"stem":763,"icon":15},"Actors in chat","/chat/actors-in-chat","24.chat/07.actors-in-chat",{"title":765,"path":766,"stem":767,"icon":768},"Internal support actor","/chat/internal-support-actor","24.chat/08.internal-support-actor","i-lucide-life-buoy",{"title":770,"path":771,"stem":772,"icon":174},"API and console","/chat/api-and-console","24.chat/09.api-and-console",{"title":774,"path":775,"stem":776,"icon":777},"Limits","/chat/limits","24.chat/10.limits","i-lucide-triangle-alert",{"title":779,"path":780,"stem":781,"icon":782},"Structured chat with DGI","/chat/structured-chat","24.chat/11.structured-chat","i-lucide-layout-list",{"title":784,"path":785,"stem":786,"icon":179},"Option A: hosted chat with DGI","/chat/option-a-hosted-chat","24.chat/12.option-a-hosted-chat",{"title":788,"path":789,"stem":790,"icon":791},"Option B: embed the chat component","/chat/option-b-embed-component","24.chat/13.option-b-embed-component","i-lucide-component",{"title":793,"path":794,"stem":795,"icon":796},"Option C: custom client (wire contract)","/chat/option-c-custom-client","24.chat/14.option-c-custom-client","i-lucide-braces",{"title":798,"path":799,"stem":800,"icon":568},"Cards, live updates and proactive posts","/chat/cards-live-and-proactive","24.chat/16.cards-live-and-proactive",{"title":802,"path":803,"stem":804,"icon":110},"Structured chat security model","/chat/structured-chat-security","24.chat/17.structured-chat-security",{"title":806,"path":807,"stem":808,"icon":809},"Option D: any app or API (dgi.chat)","/chat/option-d-chat-api","24.chat/18.option-d-chat-api","i-lucide-plug",{"title":811,"path":812,"stem":813,"icon":814},"Living Surfaces","/chat/living-surfaces","24.chat/20.living-surfaces","i-lucide-sprout",{"title":816,"path":817,"stem":818,"icon":819},"Connect your WhatsApp number","/chat/whatsapp","24.chat/21.whatsapp","i-lucide-phone",{"title":821,"path":822,"stem":823,"children":824,"icon":132},"DGI","/dgi","25.dgi/1.index",[825,827,832,837,841,845],{"title":826,"path":822,"stem":823,"icon":132},"What is DGI",{"title":828,"path":829,"stem":830,"icon":831},"How DGI works","/dgi/how-it-works","25.dgi/2.how-it-works","i-lucide-cog",{"title":833,"path":834,"stem":835,"icon":836},"Interfaces","/dgi/interfaces","25.dgi/3.interfaces","i-lucide-layout-grid",{"title":838,"path":839,"stem":840,"icon":42},"Quickstart","/dgi/quickstart","25.dgi/4.quickstart",{"title":842,"path":843,"stem":844,"icon":110},"Trust and safety","/dgi/trust-and-safety","25.dgi/5.trust-and-safety",{"title":846,"path":847,"stem":848,"icon":849},"FAQ","/dgi/faq","25.dgi/6.faq","i-lucide-circle-help",{"title":851,"path":852,"stem":853,"children":854,"icon":656},"Media","/media","26.media/01.index",[855,856,860,865,869,874,879,883,887,891,894],{"title":851,"path":852,"stem":853,"icon":656},{"title":857,"path":858,"stem":859,"icon":809},"Set up the studio","/media/set-up","26.media/02.set-up",{"title":861,"path":862,"stem":863,"icon":864},"Files, covers and looks","/media/files-covers-and-looks","26.media/03.files-covers-and-looks","i-lucide-images",{"title":751,"path":866,"stem":867,"icon":868},"/media/channels","26.media/04.channels","i-lucide-tv",{"title":870,"path":871,"stem":872,"icon":873},"Posts and review","/media/posts-and-review","26.media/05.posts-and-review","i-lucide-send",{"title":875,"path":876,"stem":877,"icon":878},"Video templates","/media/video-templates","26.media/06.video-templates","i-lucide-film",{"title":880,"path":881,"stem":882,"icon":656},"Render videos","/media/render-videos","26.media/07.render-videos",{"title":884,"path":885,"stem":886,"icon":497},"Templates as code","/media/templates-as-code","26.media/08.templates-as-code",{"title":888,"path":889,"stem":890,"icon":15},"Agents and media","/media/agents-and-media","26.media/09.agents-and-media",{"title":186,"path":892,"stem":893,"icon":122},"/media/reference","26.media/10.reference",{"title":895,"path":896,"stem":897,"icon":768},"Limits and troubleshooting","/media/limits-and-troubleshooting","26.media/11.limits-and-troubleshooting",{"title":899,"path":900,"stem":901,"children":902,"icon":904},"Vault","/vault","27.vault/01.index",[903,905,909,913,917,922],{"title":899,"path":900,"stem":901,"icon":904},"i-lucide-vault",{"title":906,"path":907,"stem":908,"icon":25},"Secrets","/vault/secrets","27.vault/02.secrets",{"title":910,"path":911,"stem":912,"icon":110},"Access policies","/vault/access-policies","27.vault/03.access-policies",{"title":914,"path":915,"stem":916,"icon":873},"API access","/vault/api-access","27.vault/04.api-access",{"title":918,"path":919,"stem":920,"icon":921},"Audit log and keys","/vault/audit-and-keys","27.vault/05.audit-and-keys","i-lucide-scroll-text",{"title":186,"path":923,"stem":924,"icon":122},"/vault/reference","27.vault/06.reference",{"id":926,"title":910,"body":927,"description":1769,"extension":1770,"links":1771,"meta":1772,"navigation":1773,"path":911,"seo":1774,"stem":912,"__hash__":1775},"docs/27.vault/03.access-policies.md",{"type":928,"value":929,"toc":1761},"minimark",[930,935,967,971,979,983,1086,1096,1104,1108,1172,1176,1204,1208,1218,1307,1317,1321,1324,1457,1460,1576,1579,1745,1757],[931,932,934],"h2",{"id":933},"who-may-do-what","Who may do what",[936,937,938,946,961],"ul",{},[939,940,941,945],"li",{},[942,943,944],"strong",{},"Organization owners and admins"," can do everything.",[939,947,948,951,952,956,957,960],{},[942,949,950],{},"Members and Staff agents"," need an ",[953,954,955],"code",{},"allow"," policy that matches. If a ",[953,958,959],{},"deny"," policy matches, they are refused, whatever else allows them.",[939,962,963,966],{},[942,964,965],{},"End users of your apps"," cannot use the Vault.",[968,969,970],"p",{},"A personal API token acts as the person who owns it.",[968,972,973,974,978],{},"Refusals are recorded in the ",[975,976,977],"a",{"href":919},"audit log"," with the reason.",[931,980,982],{"id":981},"permissions","Permissions",[984,985,986,999],"table",{},[987,988,989],"thead",{},[990,991,992,996],"tr",{},[993,994,995],"th",{},"Permission",[993,997,998],{},"Allows",[1000,1001,1002,1013,1023,1033,1046,1056,1066,1076],"tbody",{},[990,1003,1004,1010],{},[1005,1006,1007],"td",{},[953,1008,1009],{},"list",[1005,1011,1012],{},"See that the secret exists, never its value",[990,1014,1015,1020],{},[1005,1016,1017],{},[953,1018,1019],{},"read",[1005,1021,1022],{},"Reveal the value",[990,1024,1025,1030],{},[1005,1026,1027],{},[953,1028,1029],{},"resolve",[1005,1031,1032],{},"Pass the value to a step in a workflow, without showing it",[990,1034,1035,1040],{},[1005,1036,1037],{},[953,1038,1039],{},"use",[1005,1041,1042,1043,1045],{},"Call an API with the secret through ",[975,1044,914],{"href":915},", without seeing it",[990,1047,1048,1053],{},[1005,1049,1050],{},[953,1051,1052],{},"write",[1005,1054,1055],{},"Add new versions",[990,1057,1058,1063],{},[1005,1059,1060],{},[953,1061,1062],{},"delete",[1005,1064,1065],{},"Delete and restore versions",[990,1067,1068,1073],{},[1005,1069,1070],{},[953,1071,1072],{},"destroy",[1005,1074,1075],{},"Erase versions or the whole secret for good",[990,1077,1078,1083],{},[1005,1079,1080],{},[953,1081,1082],{},"admin",[1005,1084,1085],{},"Manage policies, read the audit log, rotate the key",[968,1087,1088,1089,1091,1092,1095],{},"Permissions are separate. ",[953,1090,1039],{}," does ",[942,1093,1094],{},"not"," allow reading the value.",[1097,1098,1099],"warning",{},[968,1100,1101,1103],{},[953,1102,1039],{}," lets the holder do whatever the credential can do on the API it is bound to. Give the credential itself only the permissions it needs at the provider.",[931,1105,1107],{"id":1106},"who-a-policy-applies-to","Who a policy applies to",[984,1109,1110,1124],{},[987,1111,1112],{},[990,1113,1114,1119],{},[993,1115,1116],{},[953,1117,1118],{},"principal_kind",[993,1120,1121],{},[953,1122,1123],{},"principal_ref",[1000,1125,1126,1140,1155],{},[990,1127,1128,1133],{},[1005,1129,1130],{},[953,1131,1132],{},"member",[1005,1134,1135,1136,1139],{},"A member's user id, or ",[953,1137,1138],{},"*"," for every member",[990,1141,1142,1147],{},[1005,1143,1144],{},[953,1145,1146],{},"role",[1005,1148,1149,1150,1152,1153],{},"A role name, such as ",[953,1151,1132],{}," or ",[953,1154,1082],{},[990,1156,1157,1162],{},[1005,1158,1159],{},[953,1160,1161],{},"agent",[1005,1163,1164,1165,1168,1169,1171],{},"A ",[975,1166,1167],{"href":594},"Staff"," agent's id, or ",[953,1170,1138],{}," for every agent",[931,1173,1175],{"id":1174},"which-secrets","Which secrets",[936,1177,1178,1191],{},[939,1179,1180,1182,1183,1186,1187,1190],{},[953,1181,1138],{}," matches one part of a path: ",[953,1184,1185],{},"aws/*/deploy"," matches ",[953,1188,1189],{},"aws/prod/deploy",".",[939,1192,1193,1196,1197,1200,1201,1190],{},[953,1194,1195],{},"**"," matches any number of parts: ",[953,1198,1199],{},"aws/**"," matches everything under ",[953,1202,1203],{},"aws/",[931,1205,1207],{"id":1206},"write-a-policy","Write a policy",[968,1209,1210,1211,1214,1215,1190],{},"In the Console: ",[942,1212,1213],{},"Vault → Policies",". From the API: ",[953,1216,1217],{},"vault.policy.set",[984,1219,1220,1230],{},[987,1221,1222],{},[990,1223,1224,1227],{},[993,1225,1226],{},"Input",[993,1228,1229],{},"Meaning",[1000,1231,1232,1242,1254,1263,1273,1287,1297],{},[990,1233,1234,1239],{},[1005,1235,1236],{},[953,1237,1238],{},"name",[1005,1240,1241],{},"A unique name. Using an existing name replaces that policy",[990,1243,1244,1251],{},[1005,1245,1246,1248,1249],{},[953,1247,1118],{},", ",[953,1250,1123],{},[1005,1252,1253],{},"Who it applies to",[990,1255,1256,1261],{},[1005,1257,1258],{},[953,1259,1260],{},"path_pattern",[1005,1262,1175],{},[990,1264,1265,1270],{},[1005,1266,1267],{},[953,1268,1269],{},"capabilities",[1005,1271,1272],{},"One or more permissions from the table above",[990,1274,1275,1280],{},[1005,1276,1277],{},[953,1278,1279],{},"effect",[1005,1281,1282,1284,1285],{},[953,1283,955],{}," (default) or ",[953,1286,959],{},[990,1288,1289,1294],{},[1005,1290,1291],{},[953,1292,1293],{},"description",[1005,1295,1296],{},"Why the policy exists",[990,1298,1299,1304],{},[1005,1300,1301],{},[953,1302,1303],{},"disabled",[1005,1305,1306],{},"Keep the policy but stop applying it",[968,1308,1309,1312,1313,1316],{},[953,1310,1311],{},"vault.policy.list"," shows your policies and ",[953,1314,1315],{},"vault.policy.delete"," removes one.",[931,1318,1320],{"id":1319},"examples","Examples",[968,1322,1323],{},"Let a Staff agent call GitHub with one token, and nothing else:",[1325,1326,1331],"pre",{"className":1327,"code":1328,"language":1329,"meta":1330,"style":1330},"language-json shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\n  \"name\": \"ci-agent-github\",\n  \"principal_kind\": \"agent\",\n  \"principal_ref\": \"\u003Cagent id>\",\n  \"path_pattern\": \"github/ci/token\",\n  \"capabilities\": [\"use\"]\n}\n","json","",[953,1332,1333,1342,1369,1388,1408,1428,1451],{"__ignoreMap":1330},[1334,1335,1338],"span",{"class":1336,"line":1337},"line",1,[1334,1339,1341],{"class":1340},"sMK4o","{\n",[1334,1343,1345,1348,1351,1354,1357,1360,1364,1366],{"class":1336,"line":1344},2,[1334,1346,1347],{"class":1340},"  \"",[1334,1349,1238],{"class":1350},"spNyl",[1334,1352,1353],{"class":1340},"\"",[1334,1355,1356],{"class":1340},":",[1334,1358,1359],{"class":1340}," \"",[1334,1361,1363],{"class":1362},"sfazB","ci-agent-github",[1334,1365,1353],{"class":1340},[1334,1367,1368],{"class":1340},",\n",[1334,1370,1372,1374,1376,1378,1380,1382,1384,1386],{"class":1336,"line":1371},3,[1334,1373,1347],{"class":1340},[1334,1375,1118],{"class":1350},[1334,1377,1353],{"class":1340},[1334,1379,1356],{"class":1340},[1334,1381,1359],{"class":1340},[1334,1383,1161],{"class":1362},[1334,1385,1353],{"class":1340},[1334,1387,1368],{"class":1340},[1334,1389,1391,1393,1395,1397,1399,1401,1404,1406],{"class":1336,"line":1390},4,[1334,1392,1347],{"class":1340},[1334,1394,1123],{"class":1350},[1334,1396,1353],{"class":1340},[1334,1398,1356],{"class":1340},[1334,1400,1359],{"class":1340},[1334,1402,1403],{"class":1362},"\u003Cagent id>",[1334,1405,1353],{"class":1340},[1334,1407,1368],{"class":1340},[1334,1409,1411,1413,1415,1417,1419,1421,1424,1426],{"class":1336,"line":1410},5,[1334,1412,1347],{"class":1340},[1334,1414,1260],{"class":1350},[1334,1416,1353],{"class":1340},[1334,1418,1356],{"class":1340},[1334,1420,1359],{"class":1340},[1334,1422,1423],{"class":1362},"github/ci/token",[1334,1425,1353],{"class":1340},[1334,1427,1368],{"class":1340},[1334,1429,1431,1433,1435,1437,1439,1442,1444,1446,1448],{"class":1336,"line":1430},6,[1334,1432,1347],{"class":1340},[1334,1434,1269],{"class":1350},[1334,1436,1353],{"class":1340},[1334,1438,1356],{"class":1340},[1334,1440,1441],{"class":1340}," [",[1334,1443,1353],{"class":1340},[1334,1445,1039],{"class":1362},[1334,1447,1353],{"class":1340},[1334,1449,1450],{"class":1340},"]\n",[1334,1452,1454],{"class":1336,"line":1453},7,[1334,1455,1456],{"class":1340},"}\n",[968,1458,1459],{},"Let every member see and reveal shared secrets:",[1325,1461,1463],{"className":1327,"code":1462,"language":1329,"meta":1330,"style":1330},"{\n  \"name\": \"members-shared\",\n  \"principal_kind\": \"role\",\n  \"principal_ref\": \"member\",\n  \"path_pattern\": \"shared/**\",\n  \"capabilities\": [\"list\", \"read\"]\n}\n",[953,1464,1465,1469,1488,1506,1524,1543,1572],{"__ignoreMap":1330},[1334,1466,1467],{"class":1336,"line":1337},[1334,1468,1341],{"class":1340},[1334,1470,1471,1473,1475,1477,1479,1481,1484,1486],{"class":1336,"line":1344},[1334,1472,1347],{"class":1340},[1334,1474,1238],{"class":1350},[1334,1476,1353],{"class":1340},[1334,1478,1356],{"class":1340},[1334,1480,1359],{"class":1340},[1334,1482,1483],{"class":1362},"members-shared",[1334,1485,1353],{"class":1340},[1334,1487,1368],{"class":1340},[1334,1489,1490,1492,1494,1496,1498,1500,1502,1504],{"class":1336,"line":1371},[1334,1491,1347],{"class":1340},[1334,1493,1118],{"class":1350},[1334,1495,1353],{"class":1340},[1334,1497,1356],{"class":1340},[1334,1499,1359],{"class":1340},[1334,1501,1146],{"class":1362},[1334,1503,1353],{"class":1340},[1334,1505,1368],{"class":1340},[1334,1507,1508,1510,1512,1514,1516,1518,1520,1522],{"class":1336,"line":1390},[1334,1509,1347],{"class":1340},[1334,1511,1123],{"class":1350},[1334,1513,1353],{"class":1340},[1334,1515,1356],{"class":1340},[1334,1517,1359],{"class":1340},[1334,1519,1132],{"class":1362},[1334,1521,1353],{"class":1340},[1334,1523,1368],{"class":1340},[1334,1525,1526,1528,1530,1532,1534,1536,1539,1541],{"class":1336,"line":1410},[1334,1527,1347],{"class":1340},[1334,1529,1260],{"class":1350},[1334,1531,1353],{"class":1340},[1334,1533,1356],{"class":1340},[1334,1535,1359],{"class":1340},[1334,1537,1538],{"class":1362},"shared/**",[1334,1540,1353],{"class":1340},[1334,1542,1368],{"class":1340},[1334,1544,1545,1547,1549,1551,1553,1555,1557,1559,1561,1564,1566,1568,1570],{"class":1336,"line":1430},[1334,1546,1347],{"class":1340},[1334,1548,1269],{"class":1350},[1334,1550,1353],{"class":1340},[1334,1552,1356],{"class":1340},[1334,1554,1441],{"class":1340},[1334,1556,1353],{"class":1340},[1334,1558,1009],{"class":1362},[1334,1560,1353],{"class":1340},[1334,1562,1563],{"class":1340},",",[1334,1565,1359],{"class":1340},[1334,1567,1019],{"class":1362},[1334,1569,1353],{"class":1340},[1334,1571,1450],{"class":1340},[1334,1573,1574],{"class":1336,"line":1453},[1334,1575,1456],{"class":1340},[968,1577,1578],{},"Keep production secrets away from every agent:",[1325,1580,1582],{"className":1327,"code":1581,"language":1329,"meta":1330,"style":1330},"{\n  \"name\": \"no-agents-on-prod\",\n  \"principal_kind\": \"agent\",\n  \"principal_ref\": \"*\",\n  \"path_pattern\": \"**/prod/**\",\n  \"capabilities\": [\"read\", \"resolve\", \"use\", \"write\", \"delete\", \"destroy\"],\n  \"effect\": \"deny\"\n}\n",[953,1583,1584,1588,1607,1625,1643,1662,1723,1740],{"__ignoreMap":1330},[1334,1585,1586],{"class":1336,"line":1337},[1334,1587,1341],{"class":1340},[1334,1589,1590,1592,1594,1596,1598,1600,1603,1605],{"class":1336,"line":1344},[1334,1591,1347],{"class":1340},[1334,1593,1238],{"class":1350},[1334,1595,1353],{"class":1340},[1334,1597,1356],{"class":1340},[1334,1599,1359],{"class":1340},[1334,1601,1602],{"class":1362},"no-agents-on-prod",[1334,1604,1353],{"class":1340},[1334,1606,1368],{"class":1340},[1334,1608,1609,1611,1613,1615,1617,1619,1621,1623],{"class":1336,"line":1371},[1334,1610,1347],{"class":1340},[1334,1612,1118],{"class":1350},[1334,1614,1353],{"class":1340},[1334,1616,1356],{"class":1340},[1334,1618,1359],{"class":1340},[1334,1620,1161],{"class":1362},[1334,1622,1353],{"class":1340},[1334,1624,1368],{"class":1340},[1334,1626,1627,1629,1631,1633,1635,1637,1639,1641],{"class":1336,"line":1390},[1334,1628,1347],{"class":1340},[1334,1630,1123],{"class":1350},[1334,1632,1353],{"class":1340},[1334,1634,1356],{"class":1340},[1334,1636,1359],{"class":1340},[1334,1638,1138],{"class":1362},[1334,1640,1353],{"class":1340},[1334,1642,1368],{"class":1340},[1334,1644,1645,1647,1649,1651,1653,1655,1658,1660],{"class":1336,"line":1410},[1334,1646,1347],{"class":1340},[1334,1648,1260],{"class":1350},[1334,1650,1353],{"class":1340},[1334,1652,1356],{"class":1340},[1334,1654,1359],{"class":1340},[1334,1656,1657],{"class":1362},"**/prod/**",[1334,1659,1353],{"class":1340},[1334,1661,1368],{"class":1340},[1334,1663,1664,1666,1668,1670,1672,1674,1676,1678,1680,1682,1684,1686,1688,1690,1692,1694,1696,1698,1700,1702,1704,1706,1708,1710,1712,1714,1716,1718,1720],{"class":1336,"line":1430},[1334,1665,1347],{"class":1340},[1334,1667,1269],{"class":1350},[1334,1669,1353],{"class":1340},[1334,1671,1356],{"class":1340},[1334,1673,1441],{"class":1340},[1334,1675,1353],{"class":1340},[1334,1677,1019],{"class":1362},[1334,1679,1353],{"class":1340},[1334,1681,1563],{"class":1340},[1334,1683,1359],{"class":1340},[1334,1685,1029],{"class":1362},[1334,1687,1353],{"class":1340},[1334,1689,1563],{"class":1340},[1334,1691,1359],{"class":1340},[1334,1693,1039],{"class":1362},[1334,1695,1353],{"class":1340},[1334,1697,1563],{"class":1340},[1334,1699,1359],{"class":1340},[1334,1701,1052],{"class":1362},[1334,1703,1353],{"class":1340},[1334,1705,1563],{"class":1340},[1334,1707,1359],{"class":1340},[1334,1709,1062],{"class":1362},[1334,1711,1353],{"class":1340},[1334,1713,1563],{"class":1340},[1334,1715,1359],{"class":1340},[1334,1717,1072],{"class":1362},[1334,1719,1353],{"class":1340},[1334,1721,1722],{"class":1340},"],\n",[1334,1724,1725,1727,1729,1731,1733,1735,1737],{"class":1336,"line":1453},[1334,1726,1347],{"class":1340},[1334,1728,1279],{"class":1350},[1334,1730,1353],{"class":1340},[1334,1732,1356],{"class":1340},[1334,1734,1359],{"class":1340},[1334,1736,959],{"class":1362},[1334,1738,1739],{"class":1340},"\"\n",[1334,1741,1743],{"class":1336,"line":1742},8,[1334,1744,1456],{"class":1340},[1746,1747,1748],"note",{},[968,1749,1750,1751,1753,1754,1756],{},"Only owners and admins can set ",[975,1752,914],{"href":915}," on a secret. Give ",[953,1755,1082],{}," only to people you would trust as admins.",[1758,1759,1760],"style",{},"html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":1330,"searchDepth":1337,"depth":1344,"links":1762},[1763,1764,1765,1766,1767,1768],{"id":933,"depth":1344,"text":934},{"id":981,"depth":1344,"text":982},{"id":1106,"depth":1344,"text":1107},{"id":1174,"depth":1344,"text":1175},{"id":1206,"depth":1344,"text":1207},{"id":1319,"depth":1344,"text":1320},"Decide who may read, use, change or manage which secrets. Owners and admins can do everything; everyone else needs a policy, and deny always wins","md",null,{},{"icon":110},{"title":910,"description":1769},"6py5fhcb-pwulAqsSwhqM17d66Pf2_aCxcXMKdx15iY",[1777,1779],{"title":906,"path":907,"stem":908,"description":1778,"icon":25,"children":-1},"Store a secret at a path, keep its versions, reveal it to the person who asks, and delete, restore or destroy it",{"title":914,"path":915,"stem":916,"description":1780,"icon":873,"children":-1},"Let workflows and agents call an API with a Vault secret they never receive. The Vault calls only the hosts you allowed and removes the secret from the response",1791676346666]