Payroll and employment
Escriturações, Repasses, and New employment bonds read Dataprev. They ask for a window of at most 30 days, and nothing is asked of the rail before you choose one. An empty answer is the rail answering, not a failure. For New employment bonds, every read spends rail quota.
Dataprev rail
The Console warns you when the client certificate is about to expire, and when it has expired. When the certificate has expired, calls to Dataprev fail. Replace the certificate.
A revocation cannot be undone from the Console. A complete upload of a new certificate and a new OAuth client opens a new custody. Rail calls fail closed while the credentials are revoked. The OAuth client secret is write-only: the Console never shows it again.

