Lawie separates sandbox and production workloads at the tenant boundary. Each tenant owns API keys, rate limits, and data partitions.

Sandbox vs production

• Sandbox: Reduced rate limits, mock-friendly datasets, and safe retries.
• Production: Higher limits, compliance controls, and audit retention.

Scopes and access

API keys carry scopes (contracts.read, retrieval.read, runtime.write). Missing scopes return 403 errors.

Recommended flow

1. Validate against sandbox.
2. Promote to production with a new key.
3. Monitor via status webhooks and changelog updates.