Operations

Role-aware actions

Visibility hints only — the API still enforces permissions. Actor identity unavailable.

• View documents
• Review metadata · hidden
• Export data · hidden
• Reprocess documents · hidden
• Oracle preview · hidden
• Oracle send · hidden
• View audit history
• Manage settings · hidden

Queued / not processed

—

Processing

—

Completed

—

Failed (retryable via job)

—

Review required

—

Unknown / unavailable

Shown only when a job/document status is missing

No failed documents in the current workspace scope.

No recent metadata review audit rows in scope.

Exports & Oracle (workspace-scoped limits)

• Recent exports: No global export-audit list API — counts not displayed.
• Oracle outcomes: Document-scoped GET …/integration-audit only — open Integrations with a document id.

Oracle operational safety

• Preview generated ≠ send requested or succeeded.
• Dry-run sends are audited as simulated — not Fusion deliveries.
• Live send remains unconfigured (HTTP 501) unless a Fusion client is approved separately.
• Unknown / timeout outcomes must be reconciled in integration history before any retry (no automatic retries).
• Idempotency: not implemented — see risk register R1 (proposal only).