# Authentication

Runtime keys (sk_live_ / sk_test_) are scoped to your organisation and rotatable at any time with a 24-hour grace window. The X-Subchain-Actor header names the agent acting under the key; both land in the record.

> Runtime keys cannot approve

> Approvals: console only, by a named governor