Governance — workers, grains and sagas¶
Generated from the architecture model
This page is rendered from model/**/*.yaml by tools/docs_model during mkdocs build. Edit the YAML, not this page; hand-written design lives on the linked service, platform and plane pages.
Workers¶
| Worker | Service | Trigger | Output events | Retry | Idempotency key | Concurrency |
|---|---|---|---|---|---|---|
| EvidenceWriter | AuditService | event RunControlService.ApprovalDecided, PolicyEngineService.PolicyDecisionRecorded, ToolAdapterService.ToolInvoked | AuditEntryRecorded | exponential ×10 | sourceEvent + eventId |
1 by TenantId |
| ChainVerifier | AuditService | schedule 0 1 * * * |
AuditChainVerified, FindingRaised | fixed ×3 | tenantId + day |
2 by TenantId |
| RetentionAndRedactionSweeper | AuditService | schedule 0 3 * * * |
— | fixed ×3 | entryId |
2 by TenantId |
| ExportWorker | AuditService | manual on ExportAudit |
AuditEntryRecorded | exponential ×5 | projectId + exportRequestId |
1 by TenantId |
| DecisionRetentionSweeper | PolicyEngineService | schedule 0 2 * * * |
— | fixed ×3 | decisionId |
2 by TenantId |
| ExpirySweeper | SecretBrokerService | schedule */1 * * * * |
CredentialRevoked | fixed ×3 | issuanceId |
4 by TenantId |
| RotationScheduler | SecretBrokerService | schedule 0 5 * * * |
SecretRotated | fixed ×2 | referenceId + day |
2 by TenantId |
- EvidenceWriter (AuditService): Appends consumed events as evidence entries in tenant sequence with the hash chain and mirrors them to the immutable store.
- ChainVerifier (AuditService): Re-computes and verifies each tenant's hash chain since the last signed head, signs the new head and raises a Critical finding on a break.
- RetentionAndRedactionSweeper (AuditService): Redacts personal identifiers in evidence past the project retention window while keeping the chain verifiable; enforces classification retention across stores by emitting lifecycle tasks.
- ExportWorker (AuditService): Produces an export package of a project's evidence with chain proofs in open formats.
- DecisionRetentionSweeper (PolicyEngineService): Moves decisions older than the hot window to the immutable audit store and keeps the 7-year evidence copy.
- ExpirySweeper (SecretBrokerService): Marks expired issuances and revokes at providers that support revocation.
- RotationScheduler (SecretBrokerService): Raises rotation tasks for references past their rotation period and auto-rotates kinds the vault can rotate.
Grains (actors)¶
None modelled
No grains are modelled for this item yet.
Sagas¶
None modelled
No sagas are modelled for this item yet.