AW-020

Type: Connector disposition

Subject: dbt Cloud (Slack app)

Decision requested: Approve the proposed disposition for dbt Cloud (Slack app) across its 2 assessed actions

Inherent / residual: Moderate / Low

Control owner: Slack Workspace Admin + dbt Cloud Account Admin

Context: 2 assessed actions. No Claude runtime control on this path. Administrative actions proposed: Permit x1, Permit with restrictions x1. Class: Slack workspace application (third-party data path - no Claude involvement). Control point: Slack app approval (Slack admin) + source system configuration + vendor contract. Control owner: Slack Workspace Admin + dbt Cloud Account Admin.

Risks: R-28 [Critical inherent / High residual] Slack functions as a laundering layer around Claude tool permissions | R-31 [Critical inherent / High residual] Slack is the aggregation point for the enterprise data estate | R-33 [High inherent / High residual] Data-platform output delivered into Slack channels

Open verification: V-23 [Moderate] Failure notification verbosity, and what any webhook augmentation attaches to error threads.

Ruling:

Amendment or condition: