Skip to content

Ownership map

Decision

This page records a decision and its status. A Proposed decision is not binding; an Accepted decision is binding on the Factory until amended or superseded.

This map replaces the microservice catalog as the authority for who owns what. The catalog listed 162 target services across 11 platform groups with six names appearing twice. Here each row receives one bounded-context owner (BC ids from the 2026-10-08 packet, re-validated), one plane, and a disposition:

Disposition Meaning
module A module of the owner's host; a separate service only after an extraction decision
merge Folded into the named module; not a separate capability
external Provided by an existing ConnectSoft foundation, template or external system of record; the Factory integrates, it does not own
conditional A separate host only if trust, scaling or multi-consumer need is demonstrated
defer Not part of early scope; kept as a named target

Status is Proposed (user question Q-05) until accepted. Nothing in this map is implemented; the capability matrix in handoffs/2026-10-09-independent-review/estate-current-state.md records what exists.

Bounded contexts (owners)

BC Context Plane Authoritative state
BC-01 Project & Environment Control Project, environment, module/dependency metadata, scope ids
BC-02 Blueprint Software Factory pack Blueprint versions, context maps, domain models, validation reports
BC-03 Run Control Control Run, step, attempt, lease, approval instance and decision, cancellation, recovery journal
BC-04 Asset Publication Control Immutable release manifests and dependency closure for agents, skills, tools, workflows, policies
BC-05 Usage Accounting Control Usage facts, reservations, pricing revisions, reconciliation
BC-06 Execution Agent runtime Attempt execution, adapter checkpoint references, outcomes reported to BC-03
BC-07 Model Access Model & Compute Model profiles, route plans, invocation receipts
BC-08 Tool Execution Capability & Tools Tool descriptors, invocation requests, side-effect receipts, idempotency
BC-09 Context Assembly Knowledge & Memory Context snapshots, budget decisions, provenance
BC-10 Sources & Ingestion Knowledge & Memory Source identity/version, ACL, extraction status, deletion lineage
BC-11 Retrieval & Indexes Knowledge & Memory Retrieval projections, embedding/index revisions, graph projections
BC-12 Artifacts & Lineage Knowledge & Memory Artifact metadata, content references, version chains
BC-13 Promoted Memory Knowledge & Memory Reviewed memory, scope, provenance, expiry
BC-14 Template Catalog Software Factory pack Template/schema versions, capabilities, compatibility matrix
BC-15 Generation Recipe Software Factory pack Recipe, module plan, generated-output provenance; descriptors import into blueprints (ADR-0025)
BC-16 Connections Capability & Tools Tenant-scoped connections, credential references, grants
BC-17 Connectors & Webhooks Capability & Tools Connector descriptors, subscriptions, delivery receipts
BC-18 Policy Trust & Operations Policy definitions and recorded decisions
BC-19 Audit, Risk & Compliance Trust & Operations Audit evidence, findings, classification, reports
BC-20 Approval Policy Trust & Operations Routing, separation of duties, expiry rules
BC-21 Operations Trust & Operations Telemetry projections, incidents, SLO read models
BC-22 Evaluation & Learning Trust & Operations Suites, results, gates, learning proposals
BC-23 Source & Pipelines Execution Repository/PR/pipeline receipts; Azure DevOps or GitHub is the system of record
BC-24 Package & Release Delivery Execution Publication, promotion, rollback evidence
BC-25 Provisioning & Reconciliation Execution Desired deployment, IaC receipts, observed state, drift
BC-26 Execution Capacity Execution Worker pools, placement, quotas, leases
BC-27 Marketplace Catalog & Distribution Capability & Tools Offerings, provenance, compatible releases
BC-28 Marketplace Acquisition & Licensing Capability & Tools Entitlements, acquisition, licensing records
BC-29 Experience Composition Experience Session projections, navigation, command composition
BC-30 Generated Product Domains Generated SaaS pack Each product's own contexts and stores
BC-31 Generated Tenant & Commercial Foundations Generated SaaS pack Product tenants, editions, entitlements, subscriptions
BC-32 Shared Identity & Access Control (inherited) Canonical Identity Platform (ADR-0101)
BC-33 Factory Tenancy & Entitlements Control (inherited) Canonical multitenancy (ADR-0100) plus Factory scope, edition, quota

Catalog rows → owners

Former Control Plane group (35)

Service row Owner Plane Disposition Note
IdentityService BC-32 Control external Identity Service per canonical ADR-0101
AuthorizationService BC-32 Control external Authorization Server issues tokens; backends enforce resource authorization
ServiceIdentityService BC-32 Control external Workload identities via the Identity Platform
ApiTokenService BC-32 Control external Token issuance is the Authorization Server's alone
TenantService BC-33 Control external SaaS Tenants template / Extensions.Saas.*
EditionService BC-33 Control external SaaS ProductsCatalog/Entitlements templates
SubscriptionService BC-33 Control external SaaS Billing template
FeatureFlagService BC-33 Control external Config Platform (canonical) or entitlements
QuotaService BC-05 Control merge Quota enforcement is part of usage accounting; entitlement definitions from BC-33
ProjectService BC-01 Control module
EnvironmentService BC-01 Control module
ModuleCatalogService BC-01 Control merge Project metadata
DependencyService BC-01 Control merge Project metadata
BlueprintService BC-02 Software Factory pack module
BlueprintParserService BC-02 Software Factory pack merge Capability of the blueprint module
BlueprintValidatorService BC-02 Software Factory pack merge Capability of the blueprint module
ContextMapService BC-02 Software Factory pack merge
DomainModelService BC-02 Software Factory pack merge
WorkflowOrchestrator BC-03 Control module Run Control owns transitions; execution in the runtime
WorkflowDefinitionService BC-04 Control merge Workflow definitions are published assets
TaskAssignmentService BC-03 Control merge Lease/dispatch
ProcessStateService BC-03 Control merge Run/step/attempt state
WorkflowReplayService BC-03 Control defer No replay promise (ADR-0014)
AgentRegistryService BC-04 Control module Publication; duplicate Mesh row merges
SkillRegistryService BC-04 Control merge Same registry module
AgentPoolManager BC-26 Execution merge Capacity, not Control
ModelPolicyService BC-07 Model & Compute merge Profile/policy revisions in model access administration
PolicyEngineService BC-18 Trust & Operations module Governance row is the owner; this row merges
ApprovalService BC-03 Control module Approval instances; policy in BC-20
AuditService BC-19 Trust & Operations merge Governance row is the owner
CostUsageService BC-05 Control module
IntegrationService BC-16 Capability & Tools module
ArtifactService BC-12 Knowledge & Memory module
VersioningService BC-12 Knowledge & Memory merge
LineageService BC-12 Knowledge & Memory merge

Former Agent Mesh group (11)

Service row Owner Plane Disposition Note
AgentRuntimeService BC-06 Agent runtime module The runtime worker
AgentRegistryService BC-04 Control merge Runtime keeps a read model (release loading)
SkillRegistryService BC-04 Control merge Same
ModelRouterService BC-07 Model & Compute module In-process pipeline first (GW-04)
ToolAdapterService BC-08 Capability & Tools module Governed executor (GW-05)
AgentTaskService BC-03 Control merge Task = run/step; authority in Run Control
AgentExecutionService BC-06 Agent runtime merge Attempt records
AgentValidationService BC-06 Agent runtime merge Exists in the lifecycle library (validate/correct loop)
AgentCorrectionService BC-06 Agent runtime merge Same
AgentTelemetryService BC-21 Trust & Operations merge Observability projection
AgentPoolManager BC-26 Execution merge

Former Knowledge Platform group (22)

Service row Owner Plane Disposition Note
KnowledgeGraphService BC-11 Knowledge & Memory defer No graph service exists; graph domains are a later capability
MetadataIndexService BC-11 Knowledge & Memory merge
VectorMemoryService BC-11 Knowledge & Memory module Retrieval under ADR-0013
ArtifactMemoryService BC-12 Knowledge & Memory merge
ContextBuilderService BC-09 Knowledge & Memory module Context engineering
EmbeddingService BC-10 Knowledge & Memory merge Ingestion step; model adapters from BC-07
CodebaseKnowledgeService BC-10 Knowledge & Memory merge A source type, not a service
DocumentationKnowledgeService BC-10 Knowledge & Memory merge Same
TemplateKnowledgeService BC-10 Knowledge & Memory merge Same
LibraryKnowledgeService BC-10 Knowledge & Memory merge Same
PromptMemoryService BC-13 Knowledge & Memory defer Memory classes come after governed promotion exists
DecisionMemoryService BC-13 Knowledge & Memory defer
RuntimeMemoryService BC-13 Knowledge & Memory defer Working memory is run state (BC-03/06)
PatternCatalogService BC-13 Knowledge & Memory defer
KnowledgeIngestionService BC-10 Knowledge & Memory module
KnowledgeQualityService BC-22 Trust & Operations merge Evaluation
MemoryPolicyService BC-18 Trust & Operations merge Policy
MemoryClassificationService BC-19 Trust & Operations merge Classification
MemoryRedactionService BC-19 Trust & Operations merge Redaction/compliance libraries exist
KnowledgeReplayService BC-11 Knowledge & Memory defer
KnowledgeSearchService BC-11 Knowledge & Memory merge Unified retrieval
KnowledgeStudioBff BC-29 Experience merge Studio composition

Former Template & Library group (16)

Service row Owner Plane Disposition Note
TemplateRegistryService BC-14 Software Factory pack module One catalog module with pinned manifest
TemplateVersionService BC-14 Software Factory pack merge
TemplateParameterService BC-14 Software Factory pack merge
TemplateCompatibilityService BC-14 Software Factory pack merge
ScaffoldEngineService BC-15 Software Factory pack defer Optional after ADR-0025; the recipe path scaffolds with dotnet new in the sandbox
TemplateValidationService BC-15 Software Factory pack merge
TemplatePublishingService BC-24 Execution external Existing Azure Pipelines / Artifacts publishing
TemplateUpgradeService BC-14 Software Factory pack defer
TemplateAnalyticsService BC-21 Trust & Operations defer
LibraryRegistryService BC-14 Software Factory pack merge
LibraryVersionService BC-14 Software Factory pack merge
DependencyAnalyzerService BC-14 Software Factory pack merge
CompatibilityMatrixService BC-14 Software Factory pack merge
PackagePublisherService BC-24 Execution external Existing CI; duplicate of DevOps PackagePublishingService
PackageUpgradeAdvisorService BC-14 Software Factory pack defer
ApiClientCatalogService BC-14 Software Factory pack merge

Former Marketplace group (11)

Service row Owner Plane Disposition Note
MarketplaceCatalogService, MarketplaceSearchService, AssetPublishingService, AssetVersionService, AssetCompatibilityService, AssetInstallationService, DependencyResolutionService BC-27 Capability & Tools defer Distribution of already-qualified releases; publication itself is BC-04
LicenseService, PricingService, PublisherPortalService, ReviewRatingService BC-28 Capability & Tools defer Commercial readiness questions Q-14/Q-15

Former DevOps / GitOps group (14)

Service row Owner Plane Disposition Note
RepositoryService, BranchService, CommitService, PullRequestService BC-23 Execution external Azure DevOps / GitHub are the system of record; the Factory keeps receipts via connectors (BC-17)
PipelineGeneratorService BC-15 Software Factory pack merge Pipeline files are generated artifacts
PipelineExecutionService, BuildResultService BC-23 Execution module Receipts and results
ReleaseService, EnvironmentPromotionService BC-24 Execution module
PackagePublishingService BC-24 Execution external Existing CI
ContainerImageService BC-24 Execution merge
IaCProvisioningService BC-25 Execution module Single provisioning owner
GitOpsSyncService, DeploymentManifestService BC-25 Execution merge

Former Runtime Cloud group (9)

Service row Owner Plane Disposition Note
RuntimeEnvironmentService BC-25 Execution module
DeploymentService BC-25 Execution merge
ServiceCatalogRuntimeService BC-25 Execution merge Observed-state projection
RuntimeConfigurationService — Execution external Config Platform (canonical documentation)
SecretBindingService BC-16 Capability & Tools merge Secret broker / connections
TenantRuntimeIsolationService BC-31 / BC-33 Generated SaaS pack external Canonical ADR-0100 modes
RuntimeHealthService BC-21 Trust & Operations merge
RuntimeScalingService BC-26 Execution merge
RuntimeDriftDetectionService BC-25 Execution merge

Former Observability & Feedback group (11)

Service row Owner Plane Disposition Note
TraceService, LogQueryService, MetricAggregationService, TelemetryCorrelationService BC-21 Trust & Operations external OpenTelemetry backends; the Factory owns projections and attribution
DashboardService, AlertRuleService, SloService BC-21 Trust & Operations module Operations read models
IncidentService BC-21 Trust & Operations defer
FeedbackService, QualityScoreService BC-22 Trust & Operations module Evaluation and learning
CostTelemetryService BC-05 Control merge Usage accounting is the source; FinOps views project it

Former Governance / Security / Compliance group (11)

Service row Owner Plane Disposition Note
PolicyEngineService BC-18 Trust & Operations module The policy owner
PolicyDefinitionService, PolicyEvaluationService, TenantIsolationPolicyService BC-18 Trust & Operations merge One policy module
ApprovalService BC-20 Trust & Operations module Approval policy; instances are BC-03
AuditService BC-19 Trust & Operations module
ComplianceReportService, SecurityFindingService, RiskScoringService BC-19 Trust & Operations defer
SecretGovernanceService BC-16 Capability & Tools merge Secret broker
DataClassificationService BC-19 Trust & Operations module Classification feeds retention, redaction and routing

Former Integration Platform group (14)

Service row Owner Plane Disposition Note
AzureDevOpsIntegrationService, GitHubIntegrationService BC-17 Capability & Tools module Connectors
OpenAIIntegrationService, AzureOpenAIIntegrationService, OllamaIntegrationService BC-07 Model & Compute external Existing ConnectSoft.Extensions.AI adapters; not services
McpConnectorService BC-08 Capability & Tools external ConnectSoft.Extensions.ModelContextProtocol
CloudProviderAdapterService BC-17 Capability & Tools merge
EmailIntegrationService, SmsIntegrationService, PaymentIntegrationService, CrmIntegrationService, SupportIntegrationService BC-17 Capability & Tools external Existing client libraries (ConnectSoft.Sms.*, ConnectSoft.*.ApiClient) behind connector descriptors
VendorApiClientRegistryService BC-17 Capability & Tools merge
WebhookGatewayService BC-17 Capability & Tools conditional GW-06 inbound ingress only for required scenarios

Former Factory Studio group (8)

Service row Owner Plane Disposition Note
StudioBff BC-29 Experience conditional Cohost first (GW-02)
StudioNotificationService BC-29 Experience merge
StudioRealtimeGateway BC-29 Experience conditional
ReviewCenterService BC-03 Control merge Review Center projects approval instances; authority stays in Run Control
DashboardAggregationService BC-29 Experience merge
ArtifactPreviewService BC-12 Knowledge & Memory merge Projection of artifacts
KnowledgeExplorerBff BC-29 Experience merge
AgentFlowVisualizationService BC-29 Experience merge

Generated SaaS group (0 rows)

Intentionally empty: generated services use the product's namespace and templates (BC-30/BC-31).

Totals

Disposition Rows
module 34
merge 69
external 30
conditional 3
defer 26
Total 162

Modules group into a small number of hosts initially: a Control plane API, a runtime worker, and the existing foundations. Extraction of any module into its own service requires a documented trigger, owner, migration, event compatibility, authorization changes and rollback (packet DH-02/DH-03).