Authorize and verify a target | Griffin

Open the target workflow

Open Applications and select Inventory.
Find the registered target and select Review access.
Confirm the exact normalized URL and scope version shown under Authorization and ownership.

In Authorization basis, describe the current written permission that covers the exact origin and path, such as a signed statement of work.
Optionally add a Supporting reference using a contract, ticket, or approval identifier that reviewers can locate. Do not paste secrets or the protected document itself.
Select the required attestation confirming that current written authorization covers the exact origin and path for observational checks.
Select Record 30-day authorization and confirm the new active record and expiry in authorization history.

Choose DNS TXT or Well-known file as the Proof method.
Select Generate one-shot challenge.
Give the exact record name or file URL and displayed value to your own DNS or web operations team.
Publish the proof before its 15-minute expiry. The challenge can be checked only once.
Select Check published proof and confirm the ownership history reports verified.

Select Evaluate scan preflight.
Review whether the result is Allowed or Denied and resolve every reported requirement.
When preflight is allowed, close the authorization panel and return to Inventory.
Select Activate for the target. Griffin evaluates the safety requirements again before activation and before scanning.
Confirm the target status is active before creating an on-demand or scheduled scan.

Renew creates a new authorization record; it does not rewrite history.
Revoke immediately blocks new requests and stops queued or running work at the next safety check.
Ownership proof is time-bounded and continuity is rechecked. A failed continuity check expires the proof.
Changing or restoring target scope requires fresh written authorization and ownership proof.