Dry run

With Record emails, webhooks and API calls without sending them on, every automated run is still written to the case as a dry run, so playbooks can be rehearsed end to end, and the sidebar shows an amber notice. Turn it off when the sender domain and webhooks are live.

Outbound webhooks

The signing secret every webhook step uses. Receivers verify the X-SML-Signature header (sha256=<hex HMAC of the raw JSON body>) with it. Any long random string.

API adapters

The named integrations an API step can call, with each one’s parameters. Two ship: echo (returns what it was given, for rehearsal) and http_request. New ones are added in code.

Template placeholders

The fields any string in a step’s action or an email template can use, such as {{deceased.name}}, {{executor.email}} and {{case.reference}}. The preview on a step shows them filled from the case.