Operational layer

You operate. The system enforces.

Alerts, monitoring, key rotation, and incident response keep Gatekeeper sovereign. There is no manual unlock path in the enforcement flow.

Monitoring

Lambda errors and latency alarms
Webhook failures and signature mismatches
Decision write failures (DynamoDB)
Portal read anomalies

Incident response

Freeze mode (OBSERVE) is one config write. No code changes.
Every incident produces evidence, not excuses.
Idempotency conflicts are logged and visible.

Key rotation

Rotate tenant keys on schedule or on suspicion.
Rotate webhook secret and validate signature.
Rotate operator/admin credentials.