Integration Platform — Security¶
Target
This page describes intended behaviour or structure. No implementation is claimed unless a section is explicitly marked Current implementation or Evidence.
Credential custody¶
Connections hold a credential kind and a Key Vault reference; the Secret Broker (BC-40) resolves it into a short-lived scoped credential per use and records the issuance. No Factory table, prompt, event, receipt, manifest or log contains a secret value. Rotation is recorded as a new reference and re-verification; revocation is immediate and propagates to every dependent.
Grants¶
A subject (project, agent release, tool descriptor, knowledge source, MCP server) uses a connection only with a grant, which may narrow the endpoint policy; grants are set by Workspace admins under the grant policy of the policy engine, expire when declared, and are revoked with the project (XL-13). The runtime identity of an agent is its workload identity plus the delegated user scope of the run; a grant to an agent never exceeds the project's scope.
Endpoint policy¶
Allowed hosts, base URL, methods, rate limits and timeouts per connection; adapters refuse calls outside the policy before any credential is used. Sandboxed tools see the same policy through the executor's egress allow-list.
Inbound verification (GW-06)¶
Signature under the connector's scheme, timestamp inside the replay window, deduplication by key, payload size limit, rate limit per ingress; rejections are recorded with their outcome and audited. The ingress is a separate, minimal host built from the API gateway template and deployed only when needed.
Outbound governance¶
Outbound deliveries carry the calling tool's policy decision and approval (external class, D21) and end with a receipt; a connector cannot be called except through the executor or the connector module.
Data classification (D31)¶
Connections, grants and deliveries are confidential; payloads are artifacts under the tenant's retention (90 days for delivery payloads by default) and never logged.
Audit¶
Registration, verification, grants, rotations, revocations, certification, subscriptions, deliveries, replays and ingress rejections are consumed by AuditService.