Workflow Engine¶

Path: services/decision/workflow-engine/ · Type: Worker (Temporal)

The Workflow Engine orchestrates the access-review lifecycle using Temporal durable workflows. It handles reviewer notification, SLA enforcement, escalation, decision capture, and audit trail generation.

Architecture¶

graph LR
    K1[verity.reviews.created] --> WE[Workflow Engine]
    WE --> TS[Temporal Server]
    WE -->|email| SMTP[SMTP Server]
    WE -->|webhook| Teams[Microsoft Teams]
    WE -->|webhook| Slack[Slack]
    WE --> K2[verity.audit.all]
    WE --> RM[Remediation Service]

AccessReviewWorkflow¶

The core workflow is AccessReviewWorkflow — a Temporal durable workflow that manages a single review packet from creation to completion.

stateDiagram-v2
    [*] --> LoadReview
    LoadReview --> NotifyApprover
    NotifyApprover --> WaitForDecision
    WaitForDecision --> DecisionReceived: submit_decision signal
    WaitForDecision --> Escalate: SLA timeout
    Escalate --> NotifyEscalation
    NotifyEscalation --> WaitForDecision
    DecisionReceived --> CheckDecision
    CheckDecision --> ExecuteRevocation: decision = REVOKE
    CheckDecision --> WriteAudit: decision = APPROVE
    ExecuteRevocation --> WriteAudit
    WriteAudit --> [*]

Activities¶

Each step in the workflow is implemented as a Temporal activity with automatic retry:

Signal-Based Decision Input¶

Reviewer decisions are submitted via the submit_decision Temporal signal:

@workflow.signal
async def submit_decision(self, decision: ReviewDecision) -> None:
    self.decision = decision

The ReviewDecision payload:

Notification Channels¶

The workflow supports three notification channels, configured independently:

Notifications include:

• Principal name and email
• Asset name, type, and sensitivity
• Current decay score and risk level
• SLA deadline
• Direct link to the review in the Dashboard UI

SLA Enforcement¶

The workflow enforces review SLAs using Temporal timers:

flowchart TD
    A[Review created] --> B[Start SLA timer]
    B --> C{Decision received before timeout?}
    C -->|Yes| D[Process decision]
    C -->|No| E[Escalate to next reviewer]
    E --> F[Reset SLA timer]
    F --> C

After maximum escalations (configurable, default: 3), the review is flagged as ESCALATION_EXHAUSTED and an alert is sent to the platform admin.

Audit Records¶

Every workflow state transition produces an audit record published to verity.audit.all:

Configuration¶

Observability¶