Security
Data access model
Table update metadata, BigQuery job statistics, and dbt artifacts. Not order lines, PII payloads, or arbitrary SELECT results.
Steps
1. Warehouse
Service account should be read-scoped for monitoring metadata.
2. dbt
Artifacts/webhooks contain run status — treat secrets carefully.
3. App data
Workspace settings, alert destinations, and incident history live in Vectornosis systems.