QBO Controls
Production QuickBooks app posture, approval-ready write intents, and commission identity review.
Environment
production
https://quickbooks.api.intuit.com
Realm
123146084369034
backend-held token
OAuth
healthy
com.intuit.quickbooks.accounting
Webhook
configured
verifier in Key Vault
Key Vault names only
Secret contract
| OAuth client | quickbooks-leafenterprise-finance-oauth |
| Realm token | quickbooks-leafenterprise-finance-token-<realmId> |
| Webhook verifier | quickbooks-leafenterprise-finance-webhook-verifier |
Write intents
No execution from browser payloads
Approval gate
| Intent | Entity | Operation | Status | Approval | Fingerprint |
|---|---|---|---|---|---|
| qbo-intent-202606-001 | Invoice | create | approval_ready | pending_operator_approval | 5ef2b5f4b2a3 |
| qbo-intent-202606-002 | Customer | update | blocked | blocked_before_quickbooks_write | a10c87296f0d |
Identity review
Manual review before payout or QBO mutation
PM/payment ID controls
| QBO doc | Client | Product | PM/payment | Reason | Action |
|---|---|---|---|---|---|
| INV-100 | Spirit / Polaris Health | CVS | PM-1 | same_business_multiple_payment_ids; prior_payout_detected | manual_review |
| INV-102 | Different Group | CVS | PM-2 | same_payment_id_multiple_businesses | manual_review |