Governance — microservices¶
Generated from the architecture model
This page is rendered from model/**/*.yaml by tools/docs_model during mkdocs build. Edit the YAML, not this page; hand-written design lives on the linked service, platform and plane pages.
Every logical service keeps its own design page and model entry; deployment granularity says how it is shipped at first (decision D23). Modules of a host are deployed inside that host until an extraction decision is recorded.
flowchart TB
subgraph GovernanceHost["GovernanceHost (host)"]
ApprovalPolicyService["ApprovalPolicyService"]
AuditService["AuditService"]
DataClassificationService["DataClassificationService"]
MemoryClassificationService["MemoryClassificationService"]
MemoryPolicyService["MemoryPolicyService"]
MemoryRedactionService["MemoryRedactionService"]
PolicyDefinitionService["PolicyDefinitionService"]
PolicyEngineService["PolicyEngineService"]
PolicyEvaluationService["PolicyEvaluationService"]
SecretBrokerService["SecretBrokerService"]
TenantIsolationPolicyService["TenantIsolationPolicyService"]
end
ComplianceReportService["ComplianceReportService (later)"]:::later
RiskScoringService["RiskScoringService (later)"]:::later
SecurityFindingService["SecurityFindingService (later)"]:::later
classDef later stroke-dasharray: 4 4;| Service | Context | Granularity | Host | Status | Page |
|---|---|---|---|---|---|
| ApprovalPolicyService | BC-20 | module of host | GovernanceHost | target | design |
| AuditService | BC-19 | module of host | GovernanceHost | target | design |
| ComplianceReportService | BC-19 | later stage | — | unmodelled | — |
| DataClassificationService | BC-19 | module of host | GovernanceHost | unmodelled | — |
| GovernanceHost | BC-18 | standalone host | — | target | design |
| MemoryClassificationService | BC-19 | module of host | GovernanceHost | unmodelled | — |
| MemoryPolicyService | BC-18 | module of host | GovernanceHost | unmodelled | — |
| MemoryRedactionService | BC-19 | module of host | GovernanceHost | unmodelled | — |
| PolicyDefinitionService | BC-18 | module of host | GovernanceHost | unmodelled | — |
| PolicyEngineService | BC-18 | module of host | GovernanceHost | target | design |
| PolicyEvaluationService | BC-18 | module of host | GovernanceHost | unmodelled | — |
| RiskScoringService | BC-19 | later stage | — | unmodelled | — |
| SecretBrokerService | BC-40 | module of host | GovernanceHost | target | design |
| SecurityFindingService | BC-19 | later stage | — | unmodelled | — |
| TenantIsolationPolicyService | BC-18 | module of host | GovernanceHost | unmodelled | — |
ApprovalPolicyService¶
Approval rules (roles, separation of duties, quorum, expiry, break-glass) and routing and decision validation; instances stay in BC-03 (BC-20).
| Bounded context | BC-20 Approval Policy |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Governance / Security / Compliance (module) |
| Status | target |
| Modelled | 2 aggregates · 3 REST + 2 gRPC · 3 events · 0 workers · 2 tables |
| Design page | planes/trust-operations/governance/services/approval-policy-service/index.md |
AuditService¶
Append-only hash-chained evidence, classification registry with retention and redaction rules, findings and exports (BC-19).
| Bounded context | BC-19 Audit |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Governance / Security / Compliance (module) |
| Status | target |
| Modelled | 3 aggregates · 6 REST + 3 gRPC · 5 events · 4 workers · 5 tables |
| Design page | planes/trust-operations/governance/services/audit-service/index.md |
ComplianceReportService¶
ComplianceReportService (Governance / Security / Compliance group of the June-2026 catalog).
| Bounded context | BC-19 Audit |
| Granularity | later stage |
| Former catalog group | Governance / Security / Compliance (defer) |
| Status | unmodelled |
| Design page | not written yet |
DataClassificationService¶
Classification feeds retention, redaction and routing; merged into AuditService.
| Bounded context | BC-19 Audit |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Governance / Security / Compliance (merge) |
| Status | unmodelled |
| Design page | not written yet |
GovernanceHost¶
Policy, approval policy, audit, classification and secret broker host.
| Bounded context | BC-18 Policy |
| Granularity | standalone host |
| Former catalog group | (host added 2026-10-09) (module) |
| Status | target |
| Modelled | 0 aggregates · 2 REST + 0 gRPC · 0 events · 0 workers · 0 tables |
| Design page | planes/trust-operations/governance/services/governance-host/index.md |
MemoryClassificationService¶
Classification registry; merged into AuditService.
| Bounded context | BC-19 Audit |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Knowledge Platform (merge) |
| Status | unmodelled |
| Design page | not written yet |
MemoryPolicyService¶
Memory promotion policy is a policy domain; merged into PolicyEngineService.
| Bounded context | BC-18 Policy |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Knowledge Platform (merge) |
| Status | unmodelled |
| Design page | not written yet |
MemoryRedactionService¶
Redaction rules (Compliance library); merged into AuditService.
| Bounded context | BC-19 Audit |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Knowledge Platform (merge) |
| Status | unmodelled |
| Design page | not written yet |
PolicyDefinitionService¶
Definitions are Published policy assets projected by the engine; merged into PolicyEngineService.
| Bounded context | BC-18 Policy |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Governance / Security / Compliance (merge) |
| Status | unmodelled |
| Design page | not written yet |
PolicyEngineService¶
Central policy: Published bundles per scope that may only tighten, deterministic recorded decisions with effects allow, deny, require-approval, prohibited (BC-18).
| Bounded context | BC-18 Policy |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Control Plane (module) |
| Status | target |
| Modelled | 2 aggregates · 5 REST + 3 gRPC · 3 events · 1 workers · 3 tables |
| Design page | planes/trust-operations/governance/services/policy-engine-service/index.md |
PolicyEvaluationService¶
Evaluation is the engine; merged into PolicyEngineService.
| Bounded context | BC-18 Policy |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Governance / Security / Compliance (merge) |
| Status | unmodelled |
| Design page | not written yet |
RiskScoringService¶
RiskScoringService (Governance / Security / Compliance group of the June-2026 catalog).
| Bounded context | BC-19 Audit |
| Granularity | later stage |
| Former catalog group | Governance / Security / Compliance (defer) |
| Status | unmodelled |
| Design page | not written yet |
SecretBrokerService¶
Short-lived credential issuance against secret references; rotation and revocation receipts.
| Bounded context | BC-40 Secret Broker |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | (added 2026-10-09) (module) |
| Status | target |
| Modelled | 2 aggregates · 5 REST + 3 gRPC · 5 events · 2 workers · 3 tables |
| Design page | planes/trust-operations/governance/services/secret-broker-service/index.md |
SecurityFindingService¶
SecurityFindingService (Governance / Security / Compliance group of the June-2026 catalog).
| Bounded context | BC-19 Audit |
| Granularity | later stage |
| Former catalog group | Governance / Security / Compliance (defer) |
| Status | unmodelled |
| Design page | not written yet |
TenantIsolationPolicyService¶
Tenant isolation rules are a policy domain; merged into PolicyEngineService.
| Bounded context | BC-18 Policy |
| Granularity | module of host · host GovernanceHost |
| Former catalog group | Governance / Security / Compliance (merge) |
| Status | unmodelled |
| Design page | not written yet |