Commercial automation needs explicit boundaries.

The exact approved GTM payload, including structured action metadata, is hashed before execution. Modified payloads are rejected.

Application queries are scoped by workspace, authentication data and commercial records use PostgreSQL, and external credentials are delegated to the integration layer.

Nango integration webhooks and signed GTM capture requests are verified, deduplicated, and processed idempotently.

Report a suspected vulnerability to [email protected]. Include reproduction steps, affected URLs, and the potential impact. Do not access data that is not yours, disrupt service availability, or use destructive testing.

The canonical machine-readable disclosure channel is /.well-known/security.txt.