CreateComplianceEnrollment

ComplianceEnrollment holds a tenant's Anthropic Compliance API enrollment: the Access Key the server-side directory sync authenticates with, and the switch that pauses the sync without discarding the key.

This is a credential, not an integration that produces scannable projects, so it is its own resource rather than an Installation platform type. The compliancedirsyncer housekeeping job reads it on its own cadence; nothing about it reaches the scan scheduler.

One per tenant. The sync reconciles a whole namespace against one directory, so a second enrollment in the same namespace would treat every user the first one synced as departed and delete their entries. A unique index on tenant_meta.namespace enforces this in storage.

ComplianceEnrollment holds a tenant's Anthropic Compliance API enrollment: the Access Key the server-side directory sync authenticates with, and the switch that pauses the sync without discarding the key.

This is a credential, not an integration that produces scannable projects, so it is its own resource rather than an Installation platform type. The compliancedirsyncer housekeeping job reads it on its own cadence; nothing about it reaches the scan scheduler.

One per tenant. The sync reconciles a whole namespace against one directory, so a second enrollment in the same namespace would treat every user the first one synced as departed and delete their entries. A unique index on tenant_meta.namespace enforces this in storage.