GMP Control · Policy, Approval Gates, Provenance & Observability

Architectural Separation & Safety Locks

GMP Control operates as a strictly isolated governance layer separate from public storefront rendering:

• Dedicated private control domain: control.gmp.eg
• Draft-first execution lock: external dispatches, pricing updates, and ERP postings require explicit owner approval
• End-to-end data provenance metadata and immutable audit logging across all APIs

Zero-Trust RBAC & Security Baseline

Control plane access requires authenticated enterprise credentials, least-privilege RBAC scopes, and active session verification.

Workforce Operations Access (GMP Work)

Team members accessing daily shift logs and operational tasks should proceed through the GMP Work portal.