5 production blockers·Worker secret rotation not tracked
Posture →System Health
Operational Status
Control-plane readiness. The execution worker runs in a separate trusted environment and reports back via authenticated ingestion.
Production posture
5 blockers before hosted deployment
5 block2 warn
warn
Worker uses shared-secret auth only
Shared secret over TLS is acceptable for v1. For v2+, require HMAC-signed requests with timestamp and nonce to prevent replay. See docs/SIGNING.md. Set BYJL_WORKER_REQUIRE_SIGNED=1 once the worker implements the signing protocol.
block
Worker secret rotation not tracked
Set BYJL_WORKER_SECRET_ROTATED_AT to the ISO timestamp of the last rotation. Rotate on a 90-day cadence. Accept previous secret for a 24-hour rollover window.
warn
Worker ingress not narrowed
If the execution worker has a stable egress identity, restrict POST /api/results at the edge (Cloudflare IP Access Rules, mTLS, or equivalent). Set BYJL_WORKER_INGRESS_NARROWED=1 once narrowed. Skip if the worker roams.
block
Operator session auth not configured
Mutating operator routes should require a verified identity header from the edge (Cf-Access-Authenticated-User-Email, or equivalent). Set BYJL_SESSION_AUTH_CONFIGURED=1 once Cloudflare Access is enforcing on /api/* mutations and the identity is recorded on AuditEvent.actor.
block
Access gating not acknowledged
The control plane has no in-app auth. Cloudflare Access (or equivalent) must sit in front of it. Confirm by setting BYJL_ACCESS_GATING_ACKNOWLEDGED=1.
block
Audit backup not configured
Audit history is the control plane's legal record. Export daily to R2/S3 with 90-day retention minimum, documented restore procedure, and integrity checks on the export. Set BYJL_AUDIT_BACKUP_CONFIGURED=1 once the backup job runs and a restore has been rehearsed.
block
Failure alerting not configured
Page on: failed_last_24h > 0, worker offline > 1h, POST /api/results auth failures > 5/h, audit write errors, queue backlog > 10 pending_run. Set BYJL_ALERTING_CONFIGURED=1 once paging/notification is wired.
Control plane
Dashboard & orchestration
Runtime
Next.js · production
Data store
Cloudflare D1
Access gating
Not configured
Worker credential
Shared secret configured
Last audit event
Apr 22, 2026, 02:15 p.m.
23 hours ago
Audit retention
Append-only, full history
Execution plane
Trusted worker
Worker has not reported in the last 15 minutes. Jobs will remain in pending_run until it comes online, or may be resolved via manual override if enabled.
Worker status
standby
Last activity
Apr 19, 2026, 01:05 p.m.
96 h ago
Credential source
~/.openclaw/secure/google/
Ingest endpoint
POST /api/results
Bearer auth against BYJL_WORKER_SHARED_SECRET
Queue health
1
Pending run
1
In flight
0
Failed (24h)
4 days ago
Last execution
Recent failures
J&J Moving Company
retry 2: backing off until operator intervention
Apr 19, 2026, 01:05 p.m.
job 4_failed
J&J Moving Company
retry 1: same media_ref resolution error
Apr 19, 2026, 01:03 p.m.
job 4_failed
J&J Moving Company
media_ref missing: draft references long-distance image that could not be resolved from R2
Apr 19, 2026, 01:01 p.m.
job 4_failed
Integration access
J&J Moving Company
Verified Apr 21, 2026, 12:00 a.m.
GBP · connectedGSC · pendingGA4 · pending
ByJonathanLevy Media
Verified Apr 21, 2026, 12:00 a.m.
GBP · connectedGSC · connectedGA4 · connected