Approval Policy

Auto-approve reversible actions
Allow add-to-cart and similar actions without manual approval

Always required: COMMITMENT (bookings), FINANCIAL (payments)

Never automated: CAPTCHA, OTP, PIN, CVV, biometric

Notifications

Push notifications
Get notified when approval is needed

Model Provider

Ollama (Local)
llama3.1 — Temperature: 0
Configured

Security

• Passwords hashed with Argon2id (64MB memory cost)

• JWT access tokens expire in 15 minutes

• Rotating refresh tokens (7-day expiry)

• All logs pass through redaction middleware

• Card numbers, OTPs, PINs are NEVER stored

• Website credentials encrypted with AES-256-GCM