Security model
SDD combines identity controls, workspace-level access rules, auditable events, and optional enterprise hardening.
- Role-based access model: Owner, Admin, Developer, QA, Auditor, Viewer.
- Server-side and UI-side entitlement checks for plan-controlled actions.
- Audit records for plan updates, billing lifecycle, and onboarding state transitions.
- Premium/Corporate options include API/webhooks and optional mTLS enforcement controls.
- Corporate isolated deployment option supports dedicated infrastructure boundaries.