PKPEEK Docs
Docs/Workflows, rules & reference

Glossary

Terms used across the PEEK Administration Center.

Tenant / customer
An agency customer with its own isolated boundary, e.g. tenant-a (CBP demonstration).
Operator
A PEEK workforce identity holding platform roles and a customer scope.
Capability
A named permission such as customer.activate; roles bundle capabilities.
Entitlement
What the customer purchased (module, term, quota).
Enablement
The agency’s decision to turn a purchased module on.
Shared Core
The foundation module every workflow can run on alone.
Optional peer
A module that cooperates with another when present but is never required.
Catalog
A global, versioned set of templates (roles, personas, workflows, connectors…) published for adoption.
Recommendation
A suggested setting or template; never binding until the agency adopts it.
Delegation ceiling
The maximum authority a role may grant to others.
Handoff
Submission of a package from one module/user to another for human acceptance.
SI
Supervised Intelligence — model-assisted features (Sigma Companion, background SI, SI agents).
Sigma
The PDCC assistant; limited to enabled capabilities and the user’s authorized evidence.
Governor
A profile bounding an agent’s operations, destinations, quotas and approvals.
Workload identity
A scoped agency service identity an agent may run as.
Containment
An immediate, preauthorized restrictive action during an incident.
Support window
Approved, scoped, expiring support access to customer resources.
Drift
Difference between released rules and a tenant’s effective configuration.
Designation evidence
The agency’s proof that a named person is its initial administrator.
Screen contract
The fields, flow, validation, success and negative case defined for a screen in the SRS.