Just-in-time privileged access

The Safe-Conduct

The Safe-Conduct hands out privilege the way a gate hands out passes: temporarily. Write down what you need, why, and for how long (with a ticket if your workspace requires one). A named approver who is not you clears it — one approver by default, two if you require it. You then get a time-boxed pass that grants exactly the resources you asked for, revokes itself when the window ends, and records everything it touched in the audit trail: who asked, who approved, what opened, when it closed. If a project is on fire, break-glass requests still work — they just carry an automatic review after the fact. Honest limits, stated plainly: this is not a privileged access management product — no credential vaulting, no recorded sessions, no proxy in front of your SSH. It is a documented, expiring grant on top of Palace roles, not a standing admin key with a polite label.

In plain English — Need admin rights for an hour? Write down why, get a named approver to clear it, and receive a pass that expires by itself — leaving a full paper trail behind you.

• ▸ Justification required on every request
• ▸ Named approval — never self-approve
• ▸ Pass expires itself; no standing admin keys
• ▸ Scoped to named resources, not whole roles
• ▸ Break-glass with automatic after-review
• ▸ Full ask / approve / open / close audit trail

Auto-provisioned on every new zone. Read the The Safe-Conduct docs, including use cases and API examples. Manage it from the dashboard after you create an account.