Security
Control-plane security for social operations
Komenin is designed for managed engagement operations with explicit approvals, encrypted credentials, and immutable audit trails—not uncontrolled spam tooling.
Data protection
Sensitive values stay protected at rest.
Application-level encryption for secrets and session material
Least-privilege workspace isolation on every business query
No plaintext credential storage in operator UI
Operational guardrails
Automation remains human-supervised by default.
Approval-required campaign mode as the default
Daily quotas, delays, and health gating before send/publish
High-risk skills can force manual review even in auto mode
Identity & access
Role boundaries are first-class.
Fine-grained workspace permissions
SSO/SAML config stored today; production login enforcement coming next
Platform superadmin separated from workspace roles
Auditability
Every sensitive action is reviewable.
Append-only audit logs for config and billing changes
CSV export for compliance archives
Delivery and job run histories for outbound actions