Governance and security
How tenant scope, consent, credentials, and human authority are enforced.
Key scopes
| Key | Can | Cannot |
|---|---|---|
| Write | Send events | Read them back |
| Read | Query profiles, journeys, campaigns | Ingest |
| Admin | Both, plus keys, webhooks, settings | — |
Narrower scopes exist for subsystems, such as commerce:read or agent:manage.
◈Identity never runs ahead of consentDevice fingerprinting is gated on the
personalization purpose and never runs while Do Not Track is honored.