Skip to content

Reference

Information-oriented documentation: precise descriptions of the machinery. Nothing here teaches or advises — it states what exists, completely, so you can look things up.

APIs and schemas

  • App CRD — the single source of truth: every spec and status field.
  • Data gateway API — the sole data path: request model, scope decisions, error codes, access-log queries.
  • Evidence & estate API — the evidence index and estate endpoints.
  • Estate portal & revoked scopes — the OIDC-gated estate action surface, the Backstage portal that consumes it, and the GitOps revoked-scopes policy baseline.
  • Inference gateway — the builder's model endpoint: auth, routes, tier behavior.

Enforcement surfaces

The admission baseline and the generated network perimeter are described where they are decided rather than catalogued here — see ADR-0006 for the single admission engine and ADR-0007 for the per-namespace perimeter. The policy sources are deploy/policies/kyverno/ and deploy/policies/cilium/.

Project

  • Glossary — the vocabulary, defined once.