Skip to main content

E1307. Approval identity required

Severity: ERROR. Class: HITLIdentityRequired (subclass of RuntimeError).

What happened

No [identity].email in ~/.controlzero/config.yaml, no CONTROLZERO_REQUESTOR_EMAIL env var, no explicit user_email= constructor arg. The SDK refuses approval traffic.

Why it matters

Approvals need a human identity. The API key is a machine credential; it doesn't tell us who triggered the request.

How to fix

Run controlzero install --email <your-email>. For CI (non-TTY), set CONTROLZERO_REQUESTOR_EMAIL=<team-lead-email> in the runner env. For Lambda / serverless, pass user_email= to the Client constructor.

Catching this error

except RuntimeError catches this. Setup error.

See also