Skip to content

Flow — Off-board a tenant or product and export its data

Generated from the architecture model

This page is rendered from model/**/*.yaml by tools/docs_model during mkdocs build. Edit the YAML, not this page; hand-written design lives on the linked service, platform and plane pages.
Persona Noa (WorkspaceAdmin)
Experience requirements FUX-05, FUX-11
Steps 4

A workspace admin requests an off-boarding; the export is handed over and acknowledged before deletion runs within the window, with evidence at every step.

flowchart TD
    s1["1. offboardings<br/>customer tenant or whole product?"] --> s2
    s2["2. approval-card"] --> s3
    s3["3. governance-orders<br/>export delivered and acknowledged?"] --> s4
    s4["4. audit"]
    s1 -. "whole-product off-boarding is production class: approval required" .-> x1_1["adverse 1.1"]
    s2 -. "approval expired: order Cancelled, request again" .-> x2_1["adverse 2.1"]
    s3 -. "export overdue: reminder and escalation" .-> x3_1["adverse 3.1"]
    s3 -. "owner never acknowledges deletion tasks: Overdue, alert, evidence" .-> x3_2["adverse 3.2"]
    s4 -. "audit evidence redacted, never purged" .-> x4_1["adverse 4.1"]
Hold "Alt" / "Option" to enable pan & zoom

Steps

# Screen Decision point Reads Commands Adverse branches
1 offboardings — Off-boardings customer tenant or whole product? GetOffboarding, GetGovernanceOrder RequestOffboarding, AcknowledgeHandover whole-product off-boarding is production class: approval required
2 approval-card — Approval card — ListApprovals, GetRun, ListRunArtifacts DecideApproval approval expired: order Cancelled, request again
3 governance-orders — Governance orders export delivered and acknowledged? GetGovernanceOrder IssueGovernanceOrder export overdue: reminder and escalation; owner never acknowledges deletion tasks: Overdue, alert, evidence
4 audit — Audit search — SearchAudit ExportAudit audit evidence redacted, never purged

Acceptance

Every step is exercised keyboard-only at 1440×900 and 390×844, in light and dark, in en and he (RTL); every adverse branch renders its state from the states catalog with words, never colour alone; a command's outcome is the server's response, never a toast.