- Shipped
- November 15, 2026 at 9:56 AM UTC
- Author
- Kamo
- Commit
- 02be635
- POST **************** (MANAGE_SIGN_IN_METHODS): who a draft sign-in rule change would touch — need an email code, locked out, lose passkeys, lose a linked outside account, need two-step set up, admins need a passkey — counted over real active people only (never system/fake/god/SI), up to 8 member ids per bucket. The draft goes through the same applyChanges the save uses, on a detached copy. - GET **************** (VIEW_ACCESS_LOGS or MANAGE_ACCESS_RULES): sign-in attempts and blocks per country, one org+time-bounded aggregate, with country centroids for map pins. - GET **************** the Tool Plane readiness the Enforce switch asks, for the meter. - Monthly Access Review: a singleton scheduler on the 1st (06:15 UTC) asks the VIEW_ACCESS_LOGS holders of every org that handles health records or had PHI reads last month (MONTHLY_ACCESS_REVIEW, counts only, once per org+month via org_access_reviews' unique key); GET /api/security/access-reviews and POST /{month}/confirm. - GET /api/security/posture (any security right): two-step, alert rules on, stale keys, disclosure enforced, PHI boundary.