RAZORGROWTH SECURITY CENTER
Cybersecurity & AI Guardrails System
Defense-in-depth architecture enforcing server-side authorization, Zod validation, rate limiting, and AI tool isolation.
SYSTEM STATUS: ● SECURITY CONTROLS ACTIVE
Suspicious Activity:NORMAL
Security Headers (CSP, HSTS)
Zod Input Validation
Rate Limiting (Sliding Window)
RBAC Authorization Engine
AI Tool Restrictions
Human Approval Enforcement
PII Data Masking
Security Audit Logging
EXPLICIT TOOL PERMISSIONS MATRIX (AI AGENT VS MERCHANT)
Human-in-the-Loop Enforced| TOOL PERMISSION | AI AGENT EXECUTION | MERCHANT OWNER EXECUTION | SECURITY STATUS |
|---|---|---|---|
| READ_ANALYTICS | ✅ ALLOWED | ✅ ALLOWED | Read-only / Analysis tool |
| READ_CUSTOMERS | ✅ ALLOWED | ✅ ALLOWED | Read-only / Analysis tool |
| CALCULATE_REVENUE | ✅ ALLOWED | ✅ ALLOWED | Read-only / Analysis tool |
| GENERATE_CAMPAIGN | ✅ ALLOWED | ✅ ALLOWED | Read-only / Analysis tool |
| SIMULATE_REVENUE | ✅ ALLOWED | ✅ ALLOWED | Read-only / Analysis tool |
| APPROVE_CAMPAIGN | ❌ BLOCKED FOR AI | ✅ ALLOWED | High-risk business action requiring merchant signature |
| EXECUTE_CAMPAIGN | ❌ BLOCKED FOR AI | ✅ ALLOWED | High-risk business action requiring merchant signature |
SECURITY AUDIT LOG STREAM
3 Events LoggedSEC-LOG-901•AUTHENTICATION
2026-08-24 11:42:10HttpOnly SameSite secure session created for OWNER merchant
Role: OWNERPASS
SEC-LOG-902•AI_GUARDRAIL
2026-08-24 11:42:15AI Agent attempted EXECUTE_CAMPAIGN. Blocked by AI Guardrail allowlist.
Role: SYSTEM_AGENTBLOCKED
SEC-LOG-903•TENANT_ISOLATION
2026-08-24 11:42:20Client-supplied tenantId ignored. Resolved TENANT-RAZOR-MERCHANT-8820 from session.
Role: ANALYSTPASS