Feature Flags
Per-user entitlements that gate access to alpha capabilities.
Feature flags are an alpha capability. They are an entitlement mechanism, not a general-availability switch: a flag grants one user time-limited, revocable access to a gated feature.
Introduced in v0.12.0, feature flags let administrators grant selected users access to capabilities that are not generally available. A flag is scoped to a single user, can carry an expiry, and can be revoked at any time.
Overview
- Per-user — a grant applies to one user, not to a whole tenant
- Time-limited — a flag can expire automatically
- Revocable — an administrator can revoke a flag immediately
- Admin-managed — flags are toggled from an admin UI
Available flags
| Flag | Gates |
|---|---|
textract_extraction | AWS Textract document extraction (see Document Extraction) |
knowledge_graph | Knowledge graph capability (alpha) |
llm_bridge | LLM bridge capability (alpha) |
ci_bridge | CI bridge capability (alpha) |
Flag properties
- Name
user- Type
- uuid
- Description
The user the grant applies to.
- Name
flag- Type
- string
- Description
The capability being gated (for example
textract_extraction).
- Name
expires_at- Type
- timestamp
- Description
Optional expiry. After this time the grant no longer applies.
- Name
revoked- Type
- boolean
- Description
Whether the grant has been revoked. Revocation takes effect immediately.
Administration
Flags are managed through an admin toggle UI. The underlying user_feature_flags table is service-role scoped, so grants can only be created and changed through server-side administrative paths, not through end-user clients. See Security and Hardening.