fix(provenance): feature flagged, inexact sidecars (#6491)

This commit is contained in:
Vikhyath Mondreti
2026-08-10 09:26:19 -07:00
committed by GitHub
parent c051c593b4
commit 156ee3ebf2
22 changed files with 787 additions and 106 deletions
@@ -181,6 +181,7 @@ See [Observability](/platform/self-hosting/observability).
| `NEXT_PUBLIC_CHAT_DISABLED` | Set to `true` to hide the Chat module: the workspace lands on your first workflow, with no chats list, scheduled tasks, or editor Chat panel. Chat is shown when unset; `bun run setup` sets it for you if you skip the chat key |
| `PII_REDACTION` | Redact PII from workflow logs via Data Retention rules; requires the PII service and a cluster-reachable `INTERNAL_API_BASE_URL` |
| `PII_GRANULAR_REDACTION` | Additionally expose the execution-altering redaction stages |
| `DURABLE_SECRET_PROVENANCE_ENFORCED_SURFACES` | Durable stores where a value whose secret provenance was never recorded fails the run instead of logging a warning. `all`, or a comma-separated subset of `memory`, `table-row`, `knowledge`. Unset (nothing enforced) by default |
| `ADMIN_API_KEY` | Admin API key for GitOps operations and organization provisioning |
## Enterprise Features