Frix Ops

What Frix Ops does

Frix Ops provides narrowly scoped tools for inspecting authorized hosts, checking service and workload health, reading policy-allowed logs and files, preparing mutation plans, applying explicitly approved plans, and reviewing audit history.

Security model

Access requires OAuth authentication. Authorization is scoped by authenticated identity, tenant, and allowed hosts. Cross-tenant access is denied. Frix Ops does not expose a generic shell, arbitrary sudo, or unrestricted systemctl interface.

State-changing operations use a plan → approve → apply workflow and produce audit records.