Governance — events¶

Generated from the architecture model

This page is rendered from model/**/*.yaml by tools/docs_model during mkdocs build. Edit the YAML, not this page; hand-written design lives on the linked service, platform and plane pages.

Topics follow context.area.vN.event-name (ADR-0012 port, ADR-0014 envelope). The context segment is the producing bounded context's slug.

Event	Producer	Topic	Scope	Consumers
ApprovalRuleActivated	ApprovalPolicyService	`approval-policy.rules.v1.approval-rule-activated`	integration	2
ApprovalRouted	ApprovalPolicyService	`approval-policy.routing.v1.approval-routed`	integration	3
ApprovalDecisionValidated	ApprovalPolicyService	`approval-policy.routing.v1.approval-decision-validated`	integration	2
AuditEntryRecorded	AuditService	`audit.evidence.v1.audit-entry-recorded`	integration	1
AuditChainVerified	AuditService	`audit.evidence.v1.audit-chain-verified`	integration	1
ClassificationChanged	AuditService	`audit.classification.v1.classification-changed`	integration	5
FindingRaised	AuditService	`audit.findings.v1.finding-raised`	integration	4
FindingResolved	AuditService	`audit.findings.v1.finding-resolved`	integration	2
PolicyRevisionActivated	PolicyEngineService	`policy.bundles.v1.policy-revision-activated`	integration	5
PolicyRevisionRetired	PolicyEngineService	`policy.bundles.v1.policy-revision-retired`	integration	2
PolicyDecisionRecorded	PolicyEngineService	`policy.decisions.v1.policy-decision-recorded`	integration	2
SecretReferenceRegistered	SecretBrokerService	`secret-broker.references.v1.secret-reference-registered`	integration	2
SecretRotated	SecretBrokerService	`secret-broker.references.v1.secret-rotated`	integration	4
SecretReferenceRevoked	SecretBrokerService	`secret-broker.references.v1.secret-reference-revoked`	integration	5
CredentialIssued	SecretBrokerService	`secret-broker.issuances.v1.credential-issued`	integration	2
CredentialRevoked	SecretBrokerService	`secret-broker.issuances.v1.credential-revoked`	integration	1

ApprovalRuleActivated¶

A rule revision is in force.


Producer	ApprovalPolicyService (BC-20 Approval Policy)
Scope / version	integration / v1
Topic	`approval-policy.rules.v1.approval-rule-activated`
Aggregate	ApprovalRule
Consumers	`StudioBff`, `AuditService`

Field	Type	Required
`ruleId`	`string`	yes
`tenantId`	`string`	yes
`scope`	`string`	yes
`actionClass`	`string`	yes
`policyRevision`	`string`	yes

ApprovalRouted¶

A request was routed to eligible approvers (or found none).


Producer	ApprovalPolicyService (BC-20 Approval Policy)
Scope / version	integration / v1
Topic	`approval-policy.routing.v1.approval-routed`
Aggregate	RoutingEvaluation
Consumers	`StudioNotificationService`, `DashboardService`, `AuditService`

Field	Type	Required
`evaluationId`	`guid`	yes
`approvalId`	`guid`	yes
`tenantId`	`string`	yes
`outcome`	`enum:RoutingOutcome`	yes
`expiresAt`	`datetime`	yes

ApprovalDecisionValidated¶

A decision was validated or found invalid.


Producer	ApprovalPolicyService (BC-20 Approval Policy)
Scope / version	integration / v1
Topic	`approval-policy.routing.v1.approval-decision-validated`
Aggregate	RoutingEvaluation
Consumers	`AuditService`, `DashboardService`

Field	Type	Required
`evaluationId`	`guid`	yes
`approvalId`	`guid`	yes
`tenantId`	`string`	yes
`deciderId`	`string`	yes
`outcome`	`enum:RoutingOutcome`	yes
`breakGlass`	`bool`	yes

AuditEntryRecorded¶

Evidence appended to the chain.


Producer	AuditService (BC-19 Audit)
Scope / version	integration / v1
Topic	`audit.evidence.v1.audit-entry-recorded`
Aggregate	AuditEntry
Consumers	`DashboardService`

Field	Type	Required
`entryId`	`guid`	yes
`tenantId`	`string`	yes
`sequence`	`long`	yes
`kind`	`enum:EvidenceKind`	yes
`action`	`string`	yes
`runId`	`guid`	no

AuditChainVerified¶

The tenant chain was verified and its head signed.


Producer	AuditService (BC-19 Audit)
Scope / version	integration / v1
Topic	`audit.evidence.v1.audit-chain-verified`
Aggregate	AuditEntry
Consumers	`DashboardService`

Field	Type	Required
`tenantId`	`string`	yes
`headSequence`	`long`	yes
`valid`	`bool`	yes

ClassificationChanged¶

A label changed; retention


Producer	AuditService (BC-19 Audit)
Scope / version	integration / v1
Topic	`audit.classification.v1.classification-changed`
Aggregate	ClassificationLabel
Consumers	`ContextBuilderService`, `ArtifactService`, `KnowledgeIngestionService`, `ModelRouterService`, `StudioBff`

Field	Type	Required
`labelId`	`guid`	yes
`tenantId`	`string`	yes
`resourceType`	`string`	yes
`resourceId`	`string`	no
`dataClass`	`enum:DataClass`	yes
`retentionDays`	`int`	yes

FindingRaised¶

A finding was raised from evidence.


Producer	AuditService (BC-19 Audit)
Scope / version	integration / v1
Topic	`audit.findings.v1.finding-raised`
Aggregate	Finding
Consumers	`AlertRuleService`, `StudioBff`, `StudioNotificationService`, `DashboardService`

Field	Type	Required
`findingId`	`guid`	yes
`tenantId`	`string`	yes
`severity`	`enum:FindingSeverity`	yes
`category`	`string`	yes

FindingResolved¶

A finding was resolved or its risk accepted.


Producer	AuditService (BC-19 Audit)
Scope / version	integration / v1
Topic	`audit.findings.v1.finding-resolved`
Aggregate	Finding
Consumers	`StudioBff`, `DashboardService`

Field	Type	Required
`findingId`	`guid`	yes
`tenantId`	`string`	yes
`state`	`string`	yes

PolicyRevisionActivated¶

A bundle revision is active for its scope; new runs pin it.


Producer	PolicyEngineService (BC-18 Policy)
Scope / version	integration / v1
Topic	`policy.bundles.v1.policy-revision-activated`
Aggregate	PolicyBundle
Consumers	`ApprovalPolicyService`, `RunControlService`, `StudioBff`, `AuditService`, `DashboardService`

Field	Type	Required
`revision`	`string`	yes
`tenantId`	`string`	yes
`scope`	`enum:PolicyScope`	yes
`scopeId`	`string`	yes
`rulesHash`	`hash`	yes

PolicyRevisionRetired¶

A revision is no longer active; pinned runs finish on it.


Producer	PolicyEngineService (BC-18 Policy)
Scope / version	integration / v1
Topic	`policy.bundles.v1.policy-revision-retired`
Aggregate	PolicyBundle
Consumers	`StudioBff`, `AuditService`

Field	Type	Required
`revision`	`string`	yes
`tenantId`	`string`	yes
`scope`	`enum:PolicyScope`	yes

PolicyDecisionRecorded¶

A decision was evaluated and recorded.


Producer	PolicyEngineService (BC-18 Policy)
Scope / version	integration / v1
Topic	`policy.decisions.v1.policy-decision-recorded`
Aggregate	PolicyDecision
Consumers	`AuditService`, `DashboardService`

Field	Type	Required
`decisionId`	`guid`	yes
`tenantId`	`string`	yes
`runId`	`guid`	no
`domain`	`enum:PolicyDomain`	yes
`action`	`string`	yes
`actionClass`	`string`	yes
`effect`	`enum:PolicyEffect`	yes
`policyRevision`	`string`	yes

SecretReferenceRegistered¶

A reference exists.


Producer	SecretBrokerService (BC-40 Secret Broker)
Scope / version	integration / v1
Topic	`secret-broker.references.v1.secret-reference-registered`
Aggregate	SecretReference
Consumers	`AuditService`, `StudioBff`

Field	Type	Required
`referenceId`	`string`	yes
`tenantId`	`string`	yes
`kind`	`enum:SecretKind`	yes
`ownerKind`	`string`	yes
`ownerId`	`string`	yes

SecretRotated¶

A reference moved to a new vault version; old issuances revoked.


Producer	SecretBrokerService (BC-40 Secret Broker)
Scope / version	integration / v1
Topic	`secret-broker.references.v1.secret-rotated`
Aggregate	SecretReference
Consumers	`IntegrationService`, `ModelRouterService`, `ComputePoolService`, `AuditService`

Field	Type	Required
`referenceId`	`string`	yes
`tenantId`	`string`	yes
`rotatedAt`	`datetime`	yes

SecretReferenceRevoked¶

A reference and its issuances were revoked.


Producer	SecretBrokerService (BC-40 Secret Broker)
Scope / version	integration / v1
Topic	`secret-broker.references.v1.secret-reference-revoked`
Aggregate	SecretReference
Consumers	`IntegrationService`, `ModelRouterService`, `ComputePoolService`, `ToolAdapterService`, `AuditService`

Field	Type	Required
`referenceId`	`string`	yes
`tenantId`	`string`	yes
`reason`	`string`	yes

CredentialIssued¶

A short-lived credential was issued (metadata only).


Producer	SecretBrokerService (BC-40 Secret Broker)
Scope / version	integration / v1
Topic	`secret-broker.issuances.v1.credential-issued`
Aggregate	Issuance
Consumers	`AuditService`, `DashboardService`

Field	Type	Required
`issuanceId`	`guid`	yes
`tenantId`	`string`	yes
`referenceId`	`string`	yes
`purpose`	`string`	yes
`runId`	`guid`	no
`expiresAt`	`datetime`	yes

CredentialRevoked¶

An issuance was revoked before expiry.


Producer	SecretBrokerService (BC-40 Secret Broker)
Scope / version	integration / v1
Topic	`secret-broker.issuances.v1.credential-revoked`
Aggregate	Issuance
Consumers	`AuditService`

Field	Type	Required
`issuanceId`	`guid`	yes
`tenantId`	`string`	yes
`reason`	`string`	yes

Commands¶

Command	Service	Handled by	Result events
`Route`	ApprovalPolicyService	RoutingEvaluation	ApprovalRouted
`ValidateDecision`	ApprovalPolicyService	RoutingEvaluation	ApprovalDecisionValidated
`Record`	AuditService	AuditEntry	AuditEntryRecorded
`SetClassification`	AuditService	ClassificationLabel	ClassificationChanged
`ResolveFinding`	AuditService	Finding	FindingResolved
`ActivateRevision`	PolicyEngineService	PolicyBundle	PolicyRevisionActivated, PolicyRevisionRetired
`Decide`	PolicyEngineService	PolicyDecision	PolicyDecisionRecorded
`Issue`	SecretBrokerService	Issuance	CredentialIssued
`Revoke`	SecretBrokerService	Issuance	CredentialRevoked
`RotateSecret`	SecretBrokerService	SecretReference	SecretRotated
`RevokeSecretReference`	SecretBrokerService	SecretReference	SecretReferenceRevoked

Consumed from other services¶

Consumer	Event	Producer	Handler	Purpose
ApprovalPolicyService	PolicyRevisionActivated	PolicyEngineService	`LoadApprovalRules`	Approval rules are part of the policy bundle revision.
ApprovalPolicyService	MembershipChanged	ProjectService	`InvalidateEligibilityCache`	Re-evaluate eligibility when roles change.
ApprovalPolicyService	DelegationChanged	ProjectService	`InvalidateEligibilityCache`	Delegations change who may approve (D18).
AuditService	ApprovalRequested	RunControlService	`RecordEvidence`	Approval requests as evidence.
AuditService	ApprovalDecided	RunControlService	`RecordEvidence`	Approval decisions as evidence.
AuditService	ProjectStateChanged	ProjectService	`RecordEvidence`	Project lifecycle
AuditService	MembershipChanged	ProjectService	`RecordEvidence`	Access changes.
AuditService	DelegationChanged	ProjectService	`RecordEvidence`	Delegations (D18).
AuditService	AssetReleasePublished	AgentRegistryService	`RecordEvidence`	Publications.
AuditService	AssetReleaseRevoked	AgentRegistryService	`RecordEvidence`	Revocations.
AuditService	PolicyDecisionRecorded	PolicyEngineService	`RecordEvidence`	Policy decisions.
AuditService	ApprovalDecisionValidated	ApprovalPolicyService	`RecordEvidence`	Decision validity incl. break-glass.
AuditService	ToolInvoked	ToolAdapterService	`RecordEvidence`	Tool effects.
AuditService	ToolEffectUncertain	ToolAdapterService	`RaiseUncertainFinding`	Unresolved uncertain effects become findings after the operator window.
AuditService	CredentialIssued	SecretBrokerService	`RecordEvidence`	Credential issuances.
AuditService	SourceDeleted	KnowledgeIngestionService	`RecordEvidence`	Data lifecycle.
AuditService	ArtifactDeleted	ArtifactService	`RecordEvidence`	Data lifecycle.
AuditService	MemoryPromoted	MemoryPromotionService	`RecordEvidence`	Promotions.
AuditService	ConnectionStateChanged	IntegrationService	`RecordEvidence`	Connection lifecycle incl. revocation.
PolicyEngineService	AssetReleasePublished	AgentRegistryService	`ActivatePolicyBundle`	Activate Published policy assets after tightening validation.
PolicyEngineService	AssetReleaseRevoked	AgentRegistryService	`RetirePolicyBundle`	Retire revoked policy revisions.
SecretBrokerService	RunCancelled	RunControlService	`RevokeRunIssuances`	Revoke live issuances of a cancelled run.
SecretBrokerService	LeaseExpired	RunControlService	`RevokeLeaseIssuances`	Revoke issuances bound to an expired lease.
SecretBrokerService	SandboxReleased	ToolAdapterService	`RevokeSandboxIssuances`	Revoke sandbox tokens when the sandbox is released.