Rules and guards
The system-wide rules every PEEK screen and command enforces, independent of the UI.
These rules come from the common enforcement requirements (SYS01–SYS24) and appear throughout the screen contracts. The server enforces each one even when the browser would allow the action.
| Rule | What it means in practice |
|---|---|
| Tenant isolation | Every query is scoped to tenants in your assignment; guessed IDs show nothing and reveal no enumeration detail. |
| Explicit context | Opening a customer sets tenant + environment and clears the previous tenant’s workspace. |
| Capability check per command | The primary action’s capability is checked server side at commit, not just when the page loads. |
| Independent review | Requester and reviewer/verifier must be different people; approvals bind to the exact proposal or diff hash. |
| Recheck at commit | Readiness, versions and dependencies are reevaluated at commit; stale state returns a conflict. |
| Entitlement ≠ enablement ≠ access | Purchase, agency enablement and user record grants are always separate. |
| Core independence | No base workflow requires a paid peer module. |
| Recommendations are not decisions | Nothing PEEK publishes is adopted for an agency automatically. |
| No secrets in PEEK | No secret entry, reveal or export; audit and incidents carry metadata only. |
| Immediate restriction, reviewed restoration | Stops apply at once; restoration is separate and never replays queued work. |
| Synthetic previews | Previews use fixture identities and mock responses; live writes and external calls are disabled. |
| Verified authority only | Unverified references cannot be labeled binding. |
Related guides
Catalog lifecycle: draft, review, publish
How every “Publish …” screen works: draft, validation, independent technical review bound to the diff hash, then publish.
Operator roles and capabilities
The five PEEK platform roles, the capabilities each one holds, and how capabilities gate screens and actions.
Glossary
Terms used across the PEEK Administration Center.