AI Administrator Security and Data Flow

AI ADMINISTRATOR · SECURITY

Data moves only where you direct it.

Fusion Toolkit is the local policy and execution boundary. Your model provider is optional, selected by you, and never receives credentials or data from the Toolkit automatically.

Control and data flow

Out: you → Codex or Claude → typed local CLI → Oracle
Kept: plan and audit, written locally
Back: Oracle response → bounded, redacted result → you and the model

Stays in your environment

  • Oracle and licence credentials
  • Encrypted profiles and canonical mutation plans
  • Restrictive append-only audit JSONL
  • Raw attachments, SQL files, and unredacted ERP responses

May reach your model provider

  • Prompts you submit
  • Selected, bounded, redacted CLI results you choose to share
  • Metadata governed by your provider account and terms

Fusion Toolkit supplies no hosted model, provider account, API key, or model subscription.

Controls at every boundary

  • Target identity: immutable environment and canonical HTTPS Oracle origin; profile credentials cannot follow redirects or travel off-origin.
  • Least privilege: preflight checks only the harmless prerequisites needed for the workflow. Oracle remains the final authorisation boundary.
  • Untrusted ERP text: descriptions, comments, names, and report cells are data, even when they resemble instructions.
  • Human-only writes: no flag, stdin, environment variable, remembered response, or non-interactive process can confirm a mutation.
  • One execution: ambiguous mutation timeouts are never automatically retried without workflow-specific idempotency proof.
  • Recovery: plans expire, are single-use and tamper-evident, state is re-read before writing, and the business outcome is verified without a compensating second mutation.

Telemetry and retention

Nothing is transmitted to Hufflelab automatically. Local audit retention is configurable. Audit export is local and redacted; optional metrics export is content-free and opt-in. Review your model provider’s retention, regional processing, and training settings before supplying business data.

Return to AI Administrator · Review compatibility · Start your free 30 days

Scroll to Top