oz0 tenant test-approvals
For: Operators and developers looking up a command.
Test approvals are off by default. While they are on, a small share of the tool approvals a queue is asked (--rate, 0.001 to 0.1, 0.02 by default) draws a test card for the same agent and function, shown a few minutes later in the same queue: the console's and the CLI's list, to the people who may decide it, never to API keys, apps acting for a person, people limited to their own jobs, notifications, webhooks or chat channels.
Its arguments come from a catalogue of values plainly wrong to an attentive reader (an outside drop address, an absurd amount, an outside host, a system path), shaped by the function's input schema; nothing of a real call is copied. A test card is never run: deciding it records the decision and tells the person it was a test. A yes counts as a miss, a no (or an edit that removes every wrong value) as a catch.
Catch rates show per team and per agent through works-council mode.
Tell your people that test approvals exist before you turn them on. Where a works council or employee representatives exist, their agreement may be needed first; record it with --decision-ref. --team limits the queues to named teams' (repeatable); without it every queue, the tenant's included, may get test cards.
Every change takes a reason (--reason or $OZ0_REASON); turning test approvals on, a higher rate or more queues loosens, and waits for a second admin where the tenant has four eyes on. Readers of governance settings may read the setting; admins change it.
Usage
oz0 tenant test-approvals <tenant> [flags]
Flags
| Flag | Type | Default | Description |
|---|---|---|---|
--decision-ref | string | the decision or case the change follows, such as a case number (at most 200 characters) | |
--json | bool | print JSON instead of a table | |
--off | bool | turn test approvals off | |
--on | bool | turn test approvals on (a loosening: a reason, and a second admin under four eyes) | |
--rate | float | the share of approvals asked that draws a test card, 0.001 to 0.1 (0: the default, 0.02) | |
--reason | string | why, required for every governance change (at most 500 characters; default $OZ0_REASON); the audit log keeps it | |
--team | stringArray | a team whose queue may get test cards; repeatable; --team all for every queue |
Inherited flags
| Flag | Type | Default | Description |
|---|---|---|---|
--context | string | $OZ0_CONTEXT or <config dir>/orchestrator-zero/context.json | CLI context file written by server init |
--log-level | string | info | log level: debug, info, warn or error |
See all oz0 commands and the global flags.