Least privilege
Limit credentials to the objects and actions in scope.
Define objects, ownership, direction, latency, permissions, retries, and exceptions before the first production write.
Custom integrations start with a bounded workflow and the interfaces available in the source system. Soberan documents identity, ownership, reads, writes, events or polling, reconciliation, and human approval boundaries before production activation.
01
Resolve customers, products, suppliers, and locations.
Represent orders, movements, cases, or obligations.
Trigger work and synchronize lifecycle.
Commit outcomes after policy and idempotency checks.
02
Start with a workflow and owner, not every endpoint.
Document objects, fields, IDs, ownership, auth, cadence, and errors.
Prove completeness, freshness, and reconciliation.
Start with low-risk actions, approvals, monitoring, and rollback.
03
Limit credentials to the objects and actions in scope.
Use external IDs to prevent duplicates during retries.
Log source, destination, timestamps, status, and errors.
Keep spending and sensitive actions behind explicit approval.
04
05
Often yes when it exposes an API, webhook, database view, or reliable structured export.
Only when the business decision requires it. Many workflows work better at controlled intervals.
After reads, identity, permissions, idempotency, tests, reconciliation, approvals, and rollback are validated.