oz0 tenant four-eyes
Usage and flags for oz0 tenant four-eyes.
For: Operators and developers looking up a command.
With four eyes on (loosening), every change that loosens a governance setting of the tenant (a shorter retention, a lifted legal hold, a released kill switch, a lower risk class, wider data or model rules, the AI label off, a tool rule removed or relaxed, works-council mode off, wider egress or CORS origins, and four eyes off itself) waits as a change request until another admin approves it (oz0 change); the admin who proposed it never approves it.
A tightening applies at once. It is off by default; turning it on is refused while the tenant has a single admin. Every governance change, either way, takes --reason. Without a mode it shows the setting.
Usage
oz0 tenant four-eyes <tenant> [off|loosening] [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--decision-ref | string | the decision or case the change follows, such as a case number (at most 200 characters) | |
--json | bool | print JSON instead of a table | |
--reason | string | why, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.