Trust & Operations plane¶
Target
This page describes intended behaviour or structure. No implementation is claimed unless a section is explicitly marked Current implementation or Evidence.
Every autonomous action must be observable, steerable, reviewable, governed, auditable and recoverable. This plane owns the rules and the evidence; the other planes enforce the rules at their boundaries and emit the evidence.
Responsibilities¶
| Area | Target behaviour |
|---|---|
| Policy engine (BC-18) | Answers who may run which agent, with which models, against which data, with which tools, in which environment, under which budget; versioned definitions and recorded decisions; enforced at every command, tool and model boundary, not only at an edge |
| Approval policy (BC-20) | Routing, separation of duties, expiry; approval instances are owned by Control; an approval binds an exact artifact/action version |
| Security | Platform security (authn/authz, secrets, encryption, isolation, vulnerabilities, audit) plus AI-specific threats: prompt and tool injection, indirect injection, exfiltration, malicious MCP servers and skills, model supply chain, unsafe generated commands, secret leakage, cross-tenant retrieval, poisoned knowledge; untrusted-content model; short-lived credentials via a secret broker |
| Evaluation (BC-22) | Targets: models, agents, skills, tools, workflows, context and memory strategies, policies. Metrics: task success, tool selection and argument validity, schema success, instruction compliance, patch compilation, test success, human intervention, regression, latency, cost. Model gates before profile assignment; regression on historical tasks before promotion; thresholds chosen empirically, never copied |
| Replay and simulation | Compare agent or model versions on historical tasks; requires run traceability (Control/Data planes) |
| Observability (BC-21) | AI-native tracing (resolve → memory → knowledge → context → LLM call with model/provider/tokens/latency/cost → tool call → approval → verification → result); metrics: task and agent success, cost and latency per task, tool failure rate, fallback rate, intervention rate, sandbox failures, retrieval quality, evaluation score; OpenTelemetry-compatible; raw prompts and content not logged by default |
| FinOps | Attribution by tenant, workspace, project, user, agent, skill, task, model, provider, compute pool; budget policy (predicted cost thresholds trigger approval); estimated / reserved / observed / reconciled / uncertain amounts kept distinct |
| Reliability and SRE | Retries, timeouts, circuit breakers, provider and tool fallback respecting privacy policy, dead-letter handling, checkpoint recovery, rate limiting, backups, DR; numeric RTO/RPO/availability targets only from owner-approved workload evidence |
| Audit and compliance (BC-19) | Append-only audit evidence, classification, retention, right to delete, residency, provider contracts, model license metadata; GDPR, EU AI Act, ISO 27001, SOC 2 as applicability reviews, not claims |
| AgentOps / SkillOps / ModelOps / KnowledgeOps | Lifecycle operations for each asset class; immutable after publication; rollback and deprecation |
Current implementation¶
- MCP governance (
Microsoft.AgentGovernanceviaConnectSoft.Extensions.ModelContextProtocol) with policy paths, fail-closed, sanitization and audit options — opt-in; MCP endpoint unauthenticated by default in the agent host. - OpenTelemetry, a Factory meter (
connectsoft.ai.factory.agent), lifecycle metrics, Serilog, Audit.NET and compliance/redaction libraries exist; run attribution and export coverage unverified. - Evaluator registration (
Microsoft.Extensions.AI.Evaluation) exists; no datasets, suites or gates. - No policy engine, approval policy, secret broker, FinOps ledger, replay or regression harness exists.
- Generic tenant metering/quota exists in
ConnectSoft.Saas.MeteringTemplate; no AI token/pricing mapping.
Existing pages that belong to this plane¶
- Governance, Security & Compliance and its pages; Observability & Feedback and its pages
- Security architecture, observability architecture, resilience, DR and BCP, quality attributes, testing strategy
- Per-platform
security.mdandobservability.mdpages (to be consolidated into security-by-plane and observability-by-plane) - Platform observability foundations, runtime observability
- Workflows: security and compliance, monitoring and observability, platform cost optimization
New pages to be written: FinOps, evaluation.
Later capabilities¶
Folded from the former Governance and Observability & Feedback extension roadmaps (no dates, no commitments). Principles retained: policy is data, not code; new governance domains and ABAC suppliers are additive; required telemetry dimensions are never dropped; single-owner aggregates; tenant-isolated by default; dogfood detectors on the platform's own telemetry first; everything governed and audited.
| Candidate | Purpose | Owner today |
|---|---|---|
| Policy-pack registry and marketplace (GDPR-, SOC 2-, HIPAA-style and AI-safety packs: classification categories, isolation rules, retention/erasure, prompt-safety, model/tool permission policy) | Reusable, versioned, tenant-installable policy bundles | BC-18 with BC-27 for distribution |
| Continuous compliance and control monitoring; attestation and access recertification; evidence archival to immutable storage | Point-in-time reports become continuous control status | BC-19 |
| Threat-intelligence ingestion enriching findings and risk scoring | External feeds as ABAC inputs | BC-19 |
| Privacy-request automation (access/erasure) driven by classification | Data-subject requests across stores and derived indexes | BC-19 with Knowledge & Memory (Q-10) |
| Policy simulation ("what-if" against historical decisions) | Predict impact before publishing a policy | BC-18 |
| Anomaly detection beyond cost; automated root-cause hypotheses on incident open; synthetic probes of generated products; SLO forecasting; adaptive tenant-aware trace sampling | Autonomous observability | BC-21 |
| Experiment service for A/B and canary outcome attribution; feedback routing to the right knowledge partition, cluster or reviewer; feedback-applied loop closure | Measured improvement | BC-22 |
| Dashboard packs (dashboards, alert rules, SLO templates for common SaaS shapes), quality-scoring rubrics and cost baselines as packs | Reusable "definition of good" | BC-21 / BC-27 |
| Policy author, triage, compliance-evidence, approval-assistant, quality-reviewer, SLO-steward, cost-optimizer and self-healing agents | Agents operating the trust loop; the human still decides | Software Factory pack |
Each candidate enters through the normal path: published release, policy decision recorded, evidence attached; none is implied by its presence in this table.
Open questions¶
Q-08 (workload, availability and recovery level), Q-09/Q-10 (data policies), Q-12 (acceptable AI quality and release authority), Q-15 (commercial model vs internal budget controls).
Platform design pages (2026-10-09, design plan P7)¶
- Governance narrative: overview · workflows · UI surfaces · security · observability · deployment · later capabilities
-
Governance service design pages: GovernanceHost (host) · PolicyEngineService · ApprovalPolicyService · AuditService · SecretBrokerService
-
Observability narrative (P8): overview · workflows · UI surfaces · security · observability · deployment · later capabilities
- Observability service design pages: ObservabilityHost (host) · DashboardService · SloService · AlertRuleService · QualityScoreService · FeedbackService
Modernization (2026-10-09, design plan M1)¶
Horizon now to next, per the technology radar: OpenTelemetry GenAI semantic conventions; evaluation-driven release (D32); LLM-native observability and replay (trial); trust tiers and prompt-injection defence; workload identity for agents. Exists in ConnectSoft today: Observability libraries in every template; no projections, objectives, evaluation or policy engine. Each platform page of this plane states its horizon in its overview and later-capabilities pages.
Platforms in this plane¶
| Platform | Bounded contexts | Services | Modelled | Pages |
|---|---|---|---|---|
| Governance (PF-12) | BC-18, BC-19, BC-20, BC-40 | 15 | 5 | overview · services · APIs · events |
| Observability (PF-13) | BC-21, BC-22 | 15 | 6 | overview · services · APIs · events |
Bounded contexts¶
| Context | Platform | Authoritative state |
|---|---|---|
| BC-18 Policy | Governance | Policy definitions and recorded decisions |
| BC-19 Audit | Governance | Audit evidence, findings, classification, reports |
| BC-20 Approval Policy | Governance | Routing, separation of duties, expiry rules (instances are BC-03) |
| BC-40 Secret Broker | Governance | Short-lived credential issuance, secret references, rotation and revocation receipts |
| BC-21 Operations | Observability | Telemetry projections, incidents, SLO read models |
| BC-22 Evaluation & Learning | Observability | Suites, results, gates, learning proposals |
Services¶
| Service | Platform | Context | Granularity | Status | Page |
|---|---|---|---|---|---|
| ApprovalPolicyService | Governance | BC-20 | module of host | target | design |
| AuditService | Governance | BC-19 | module of host | target | design |
| ComplianceReportService | Governance | BC-19 | later stage | unmodelled | — |
| DataClassificationService | Governance | BC-19 | module of host | unmodelled | — |
| GovernanceHost | Governance | BC-18 | standalone host | target | design |
| MemoryClassificationService | Governance | BC-19 | module of host | unmodelled | — |
| MemoryPolicyService | Governance | BC-18 | module of host | unmodelled | — |
| MemoryRedactionService | Governance | BC-19 | module of host | unmodelled | — |
| PolicyDefinitionService | Governance | BC-18 | module of host | unmodelled | — |
| PolicyEngineService | Governance | BC-18 | module of host | target | design |
| PolicyEvaluationService | Governance | BC-18 | module of host | unmodelled | — |
| RiskScoringService | Governance | BC-19 | later stage | unmodelled | — |
| SecretBrokerService | Governance | BC-40 | module of host | target | design |
| SecurityFindingService | Governance | BC-19 | later stage | unmodelled | — |
| TenantIsolationPolicyService | Governance | BC-18 | module of host | unmodelled | — |
| AgentTelemetryService | Observability | BC-21 | module of host | unmodelled | — |
| AlertRuleService | Observability | BC-21 | module of host | target | design |
| DashboardService | Observability | BC-21 | module of host | target | design |
| FeedbackService | Observability | BC-22 | module of host | target | design |
| IncidentService | Observability | BC-21 | later stage | unmodelled | — |
| KnowledgeQualityService | Observability | BC-22 | module of host | unmodelled | — |
| LogQueryService | Observability | BC-21 | external / canonical | unmodelled | — |
| MetricAggregationService | Observability | BC-21 | external / canonical | unmodelled | — |
| ObservabilityHost | Observability | BC-21 | standalone host | target | design |
| QualityScoreService | Observability | BC-22 | module of host | target | design |
| RuntimeHealthService | Observability | BC-21 | module of host | unmodelled | — |
| SloService | Observability | BC-21 | module of host | target | design |
| TelemetryCorrelationService | Observability | BC-21 | external / canonical | unmodelled | — |
| TemplateAnalyticsService | Observability | BC-21 | later stage | unmodelled | — |
| TraceService | Observability | BC-21 | external / canonical | unmodelled | — |
Events crossing the plane boundary¶
| Direction | Event | Producer | Consumer | Topic |
|---|---|---|---|---|
| out | ApprovalRuleActivated | ApprovalPolicyService | StudioBff | approval-policy.rules.v1.approval-rule-activated |
| out | ApprovalRouted | ApprovalPolicyService | StudioNotificationService | approval-policy.routing.v1.approval-routed |
| out | ClassificationChanged | AuditService | ContextBuilderService | audit.classification.v1.classification-changed |
| out | ClassificationChanged | AuditService | ArtifactService | audit.classification.v1.classification-changed |
| out | ClassificationChanged | AuditService | KnowledgeIngestionService | audit.classification.v1.classification-changed |
| out | ClassificationChanged | AuditService | ModelRouterService | audit.classification.v1.classification-changed |
| out | ClassificationChanged | AuditService | StudioBff | audit.classification.v1.classification-changed |
| out | FindingRaised | AuditService | StudioBff | audit.findings.v1.finding-raised |
| out | FindingRaised | AuditService | StudioNotificationService | audit.findings.v1.finding-raised |
| out | FindingResolved | AuditService | StudioBff | audit.findings.v1.finding-resolved |
| out | PolicyRevisionActivated | PolicyEngineService | RunControlService | policy.bundles.v1.policy-revision-activated |
| out | PolicyRevisionActivated | PolicyEngineService | StudioBff | policy.bundles.v1.policy-revision-activated |
| out | PolicyRevisionRetired | PolicyEngineService | StudioBff | policy.bundles.v1.policy-revision-retired |
| out | SecretReferenceRegistered | SecretBrokerService | StudioBff | secret-broker.references.v1.secret-reference-registered |
| out | SecretRotated | SecretBrokerService | IntegrationService | secret-broker.references.v1.secret-rotated |
| out | SecretRotated | SecretBrokerService | ModelRouterService | secret-broker.references.v1.secret-rotated |
| out | SecretRotated | SecretBrokerService | ComputePoolService | secret-broker.references.v1.secret-rotated |
| out | SecretReferenceRevoked | SecretBrokerService | IntegrationService | secret-broker.references.v1.secret-reference-revoked |
| out | SecretReferenceRevoked | SecretBrokerService | ModelRouterService | secret-broker.references.v1.secret-reference-revoked |
| out | SecretReferenceRevoked | SecretBrokerService | ComputePoolService | secret-broker.references.v1.secret-reference-revoked |
| out | SecretReferenceRevoked | SecretBrokerService | ToolAdapterService | secret-broker.references.v1.secret-reference-revoked |
| out | AlertRuleChanged | AlertRuleService | StudioBff | operations.alerts.v1.alert-rule-changed |
| out | AlertFired | AlertRuleService | StudioRealtimeGateway | operations.alerts.v1.alert-fired |
| out | AlertFired | AlertRuleService | FleetIncidentService | operations.alerts.v1.alert-fired |
| out | AlertFired | AlertRuleService | StudioBff | operations.alerts.v1.alert-fired |
| out | AlertFired | AlertRuleService | StudioNotificationService | operations.alerts.v1.alert-fired |
| out | AlertResolved | AlertRuleService | StudioRealtimeGateway | operations.alerts.v1.alert-resolved |
| out | AlertResolved | AlertRuleService | StudioBff | operations.alerts.v1.alert-resolved |
| out | RunProjectionUpdated | DashboardService | StudioRealtimeGateway | operations.projections.v1.run-projection-updated |
| out | RunProjectionUpdated | DashboardService | StudioBff | operations.projections.v1.run-projection-updated |
| out | OperationsDigestProduced | DashboardService | StudioBff | operations.projections.v1.operations-digest-produced |
| out | FeedbackRecorded | FeedbackService | StudioBff | evaluation.feedback.v1.feedback-recorded |
| out | DatasetPublished | FeedbackService | StudioBff | evaluation.datasets.v1.dataset-published |
| out | LearningProposalRaised | FeedbackService | StudioBff | evaluation.learning.v1.learning-proposal-raised |
| out | LearningProposalRaised | FeedbackService | StudioNotificationService | evaluation.learning.v1.learning-proposal-raised |
| out | LearningProposalDecided | FeedbackService | StudioBff | evaluation.learning.v1.learning-proposal-decided |
| out | LearningProposalDecided | FeedbackService | AgentRegistryService | evaluation.learning.v1.learning-proposal-decided |
| out | EvaluationSuiteActivated | QualityScoreService | StudioBff | evaluation.suites.v1.evaluation-suite-activated |
| out | EvaluationStarted | QualityScoreService | StudioBff | evaluation.runs.v1.evaluation-started |
| out | EvaluationCompleted | QualityScoreService | AgentRegistryService | evaluation.runs.v1.evaluation-completed |
| out | EvaluationCompleted | QualityScoreService | ModelRouterService | evaluation.runs.v1.evaluation-completed |
| out | EvaluationCompleted | QualityScoreService | StudioBff | evaluation.runs.v1.evaluation-completed |
| out | EvaluationFailed | QualityScoreService | StudioBff | evaluation.runs.v1.evaluation-failed |
| out | DriftDetected | QualityScoreService | StudioBff | evaluation.runs.v1.drift-detected |
| out | SloDefined | SloService | StudioBff | operations.slos.v1.slo-defined |
| out | SloBreached | SloService | FleetRolloutService | operations.slos.v1.slo-breached |
| out | SloBreached | SloService | FleetInventoryService | operations.slos.v1.slo-breached |
| out | SloBreached | SloService | StudioBff | operations.slos.v1.slo-breached |
| out | SloRecovered | SloService | FleetInventoryService | operations.slos.v1.slo-recovered |
| out | SloRecovered | SloService | StudioBff | operations.slos.v1.slo-recovered |
| out | ServiceHealthChanged | SloService | StudioBff | operations.health.v1.service-health-changed |
| in | AssetReleaseSubmitted | AgentRegistryService | QualityScoreService | asset-publication.releases.v1.asset-release-submitted |
| in | AssetReleasePublished | AgentRegistryService | PolicyEngineService | asset-publication.releases.v1.asset-release-published |
| in | AssetReleasePublished | AgentRegistryService | AuditService | asset-publication.releases.v1.asset-release-published |
| in | AssetReleaseRevoked | AgentRegistryService | PolicyEngineService | asset-publication.releases.v1.asset-release-revoked |
| in | AssetReleaseRevoked | AgentRegistryService | AuditService | asset-publication.releases.v1.asset-release-revoked |
| in | ReservationSettled | CostUsageService | DashboardService | usage-accounting.reservations.v1.reservation-settled |
| in | UsageRecorded | CostUsageService | DashboardService | usage-accounting.usage.v1.usage-recorded |
| in | UsageReconciled | CostUsageService | DashboardService | usage-accounting.usage.v1.usage-reconciled |
| in | BudgetUpdated | CostUsageService | AuditService | usage-accounting.budgets.v1.budget-updated |
| in | EnvironmentStateChanged | EnvironmentService | AuditService | projects.environments.v1.environment-state-changed |
| in | SubscriptionChanged | FactoryCommercialService | AuditService | factory-commercial.subscriptions.v1.subscription-changed |
| in | ProjectCreated | ProjectService | AuditService | projects.projects.v1.project-created |
| in | ProjectStateChanged | ProjectService | AuditService | projects.projects.v1.project-state-changed |
| in | MembershipChanged | ProjectService | ApprovalPolicyService | projects.memberships.v1.membership-changed |
| in | MembershipChanged | ProjectService | AuditService | projects.memberships.v1.membership-changed |
| in | DelegationChanged | ProjectService | ApprovalPolicyService | projects.delegations.v1.delegation-changed |
| in | DelegationChanged | ProjectService | AuditService | projects.delegations.v1.delegation-changed |
| in | RunAccepted | RunControlService | DashboardService | run-control.runs.v1.run-accepted |
| in | RunStateChanged | RunControlService | DashboardService | run-control.runs.v1.run-state-changed |
| in | RunCompleted | RunControlService | FeedbackService | run-control.runs.v1.run-completed |
| in | RunCompleted | RunControlService | DashboardService | run-control.runs.v1.run-completed |
| in | RunCompleted | RunControlService | QualityScoreService | run-control.runs.v1.run-completed |
| in | RunFailed | RunControlService | DashboardService | run-control.runs.v1.run-failed |
| in | RunCancelled | RunControlService | SecretBrokerService | run-control.runs.v1.run-cancelled |
| in | AttemptDispatched | RunControlService | DashboardService | run-control.attempts.v1.attempt-dispatched |
| in | AttemptOutcomeRecorded | RunControlService | QualityScoreService | run-control.attempts.v1.attempt-outcome-recorded |
| in | AttemptOutcomeRecorded | RunControlService | DashboardService | run-control.attempts.v1.attempt-outcome-recorded |
| in | LeaseExpired | RunControlService | SecretBrokerService | run-control.leases.v1.lease-expired |
| in | LeaseExpired | RunControlService | DashboardService | run-control.leases.v1.lease-expired |
| in | ApprovalRequested | RunControlService | AuditService | run-control.approvals.v1.approval-requested |
| in | ApprovalDecided | RunControlService | QualityScoreService | run-control.approvals.v1.approval-decided |
| in | ApprovalDecided | RunControlService | AuditService | run-control.approvals.v1.approval-decided |
| in | AttemptStarted | AgentRuntimeService | DashboardService | execution.attempts.v1.attempt-started |
| in | AttemptStarted | AgentRuntimeService | QualityScoreService | execution.attempts.v1.attempt-started |
| in | AttemptPhaseChanged | AgentRuntimeService | DashboardService | execution.attempts.v1.attempt-phase-changed |
| in | AttemptCheckpointed | AgentRuntimeService | DashboardService | execution.attempts.v1.attempt-checkpointed |
| in | AttemptDecisionRequested | AgentRuntimeService | DashboardService | execution.attempts.v1.attempt-decision-requested |
| in | AttemptCancellationObserved | AgentRuntimeService | DashboardService | execution.attempts.v1.attempt-cancellation-observed |
| in | AttemptOutcomeReported | AgentRuntimeService | DashboardService | execution.attempts.v1.attempt-outcome-reported |
| in | AttemptOutcomeReported | AgentRuntimeService | QualityScoreService | execution.attempts.v1.attempt-outcome-reported |
| in | SubAgentDelegated | AgentRuntimeService | DashboardService | execution.attempts.v1.sub-agent-delegated |
| in | ReleaseLoaded | AgentRuntimeService | DashboardService | execution.releases.v1.release-loaded |
| in | ReleaseLoadRejected | AgentRuntimeService | DashboardService | execution.releases.v1.release-load-rejected |
| in | ReleaseLoadRejected | AgentRuntimeService | AuditService | execution.releases.v1.release-load-rejected |
| in | WorkflowDefinitionLoaded | WorkflowEngineService | DashboardService | workflows.definitions.v1.workflow-definition-loaded |
| in | WorkflowRunStarted | WorkflowEngineService | DashboardService | workflows.runs.v1.workflow-run-started |
| in | StepReady | WorkflowEngineService | DashboardService | workflows.runs.v1.step-ready |
| in | StepRunStateChanged | WorkflowEngineService | DashboardService | workflows.runs.v1.step-run-state-changed |
| in | TimerFired | WorkflowEngineService | DashboardService | workflows.runs.v1.timer-fired |
| in | CompensationStarted | WorkflowEngineService | DashboardService | workflows.runs.v1.compensation-started |
| in | CompensationStarted | WorkflowEngineService | AuditService | workflows.runs.v1.compensation-started |
| in | WorkflowRunCompleted | WorkflowEngineService | DashboardService | workflows.runs.v1.workflow-run-completed |
| in | WorkflowRunFailed | WorkflowEngineService | DashboardService | workflows.runs.v1.workflow-run-failed |
| in | WorkflowRunCancelled | WorkflowEngineService | DashboardService | workflows.runs.v1.workflow-run-cancelled |
| in | ComputePoolRegistered | ComputePoolService | DashboardService | compute-pools.pools.v1.compute-pool-registered |
| in | ComputePoolRegistered | ComputePoolService | AuditService | compute-pools.pools.v1.compute-pool-registered |
| in | ComputePoolStateChanged | ComputePoolService | DashboardService | compute-pools.pools.v1.compute-pool-state-changed |
| in | ComputePoolStateChanged | ComputePoolService | AuditService | compute-pools.pools.v1.compute-pool-state-changed |
| in | ModelWarmed | ComputePoolService | DashboardService | compute-pools.cache.v1.model-warmed |
| in | ModelEvicted | ComputePoolService | DashboardService | compute-pools.cache.v1.model-evicted |
| in | PlacementDecided | ComputePoolService | DashboardService | compute-pools.placement.v1.placement-decided |
| in | PlacementDecided | ComputePoolService | AuditService | compute-pools.placement.v1.placement-decided |
| in | ModelProfileActivated | ModelRouterService | DashboardService | model-access.profiles.v1.model-profile-activated |
| in | ModelProfileActivated | ModelRouterService | AuditService | model-access.profiles.v1.model-profile-activated |
| in | ModelProfileRetired | ModelRouterService | AuditService | model-access.profiles.v1.model-profile-retired |
| in | DeploymentStateChanged | ModelRouterService | DashboardService | model-access.deployments.v1.deployment-state-changed |
| in | DeploymentStateChanged | ModelRouterService | AuditService | model-access.deployments.v1.deployment-state-changed |
| in | CapabilityEvidenceRecorded | ModelRouterService | DashboardService | model-access.deployments.v1.capability-evidence-recorded |
| in | RoutePlanResolved | ModelRouterService | DashboardService | model-access.routing.v1.route-plan-resolved |
| in | ModelInvoked | ModelRouterService | DashboardService | model-access.invocations.v1.model-invoked |
| in | ModelInvoked | ModelRouterService | QualityScoreService | model-access.invocations.v1.model-invoked |
| in | ModelInvoked | ModelRouterService | AgentTelemetryService | model-access.invocations.v1.model-invoked |
| in | ModelFallbackUsed | ModelRouterService | DashboardService | model-access.invocations.v1.model-fallback-used |
| in | ModelFallbackUsed | ModelRouterService | AuditService | model-access.invocations.v1.model-fallback-used |
| in | ArtifactStored | ArtifactService | DashboardService | artifacts.artifacts.v1.artifact-stored |
| in | ArtifactValidated | ArtifactService | FeedbackService | artifacts.artifacts.v1.artifact-validated |
| in | ArtifactValidated | ArtifactService | QualityScoreService | artifacts.artifacts.v1.artifact-validated |
| in | ArtifactDeleted | ArtifactService | AuditService | artifacts.artifacts.v1.artifact-deleted |
| in | ArtifactDeleted | ArtifactService | DashboardService | artifacts.artifacts.v1.artifact-deleted |
| in | ContextAssembled | ContextBuilderService | DashboardService | context-assembly.snapshots.v1.context-assembled |
| in | ContextAssembled | ContextBuilderService | QualityScoreService | context-assembly.snapshots.v1.context-assembled |
| in | MemoryObserved | MemoryPromotionService | DashboardService | memory.items.v1.memory-observed |
| in | MemoryClassified | MemoryPromotionService | DashboardService | memory.items.v1.memory-classified |
| in | MemoryPromoted | MemoryPromotionService | AuditService | memory.items.v1.memory-promoted |
| in | MemoryArchived | MemoryPromotionService | DashboardService | memory.items.v1.memory-archived |
| in | SkillCandidateProposed | MemoryPromotionService | FeedbackService | memory.items.v1.skill-candidate-proposed |
| in | SkillCandidateProposed | MemoryPromotionService | AuditService | memory.items.v1.skill-candidate-proposed |
| in | SourceRegistered | KnowledgeIngestionService | AuditService | ingestion.sources.v1.source-registered |
| in | SourceStateChanged | KnowledgeIngestionService | DashboardService | ingestion.sources.v1.source-state-changed |
| in | SourceDeleted | KnowledgeIngestionService | AuditService | ingestion.sources.v1.source-deleted |
| in | SourceSnapshotTaken | KnowledgeIngestionService | DashboardService | ingestion.snapshots.v1.source-snapshot-taken |
| in | ChunksPublished | KnowledgeIngestionService | DashboardService | ingestion.snapshots.v1.chunks-published |
| in | SnapshotFailed | KnowledgeIngestionService | DashboardService | ingestion.snapshots.v1.snapshot-failed |
| in | RepositoryIndexed | RepositoryIntelligenceService | DashboardService | repo-intelligence.indexes.v1.repository-indexed |
| in | RepositoryIndexFailed | RepositoryIntelligenceService | DashboardService | repo-intelligence.indexes.v1.repository-index-failed |
| in | IndexRevisionReady | VectorMemoryService | DashboardService | retrieval.indexes.v1.index-revision-ready |
| in | IndexRevisionRetired | VectorMemoryService | DashboardService | retrieval.indexes.v1.index-revision-retired |
| in | IndexDegraded | VectorMemoryService | DashboardService | retrieval.indexes.v1.index-degraded |
| in | GraphFactsUpdated | VectorMemoryService | DashboardService | retrieval.graph.v1.graph-facts-updated |
| in | RetrievalExecuted | VectorMemoryService | DashboardService | retrieval.queries.v1.retrieval-executed |
| in | RetrievalExecuted | VectorMemoryService | QualityScoreService | retrieval.queries.v1.retrieval-executed |
| in | McpServerRegistered | McpServerRegistryService | AuditService | tool-execution.mcp-servers.v1.mcp-server-registered |
| in | McpServerStateChanged | McpServerRegistryService | DashboardService | tool-execution.mcp-servers.v1.mcp-server-state-changed |
| in | McpServerStateChanged | McpServerRegistryService | AuditService | tool-execution.mcp-servers.v1.mcp-server-state-changed |
| in | McpCapabilitiesDiscovered | McpServerRegistryService | DashboardService | tool-execution.mcp-servers.v1.mcp-capabilities-discovered |
| in | ToolDescriptorActivated | ToolAdapterService | DashboardService | tool-execution.descriptors.v1.tool-descriptor-activated |
| in | ToolDescriptorActivated | ToolAdapterService | AuditService | tool-execution.descriptors.v1.tool-descriptor-activated |
| in | ToolDescriptorRetired | ToolAdapterService | AuditService | tool-execution.descriptors.v1.tool-descriptor-retired |
| in | ToolInvoked | ToolAdapterService | AuditService | tool-execution.invocations.v1.tool-invoked |
| in | ToolInvoked | ToolAdapterService | DashboardService | tool-execution.invocations.v1.tool-invoked |
| in | ToolInvoked | ToolAdapterService | QualityScoreService | tool-execution.invocations.v1.tool-invoked |
| in | ToolInvoked | ToolAdapterService | AgentTelemetryService | tool-execution.invocations.v1.tool-invoked |
| in | ToolInvocationDenied | ToolAdapterService | AuditService | tool-execution.invocations.v1.tool-invocation-denied |
| in | ToolInvocationDenied | ToolAdapterService | DashboardService | tool-execution.invocations.v1.tool-invocation-denied |
| in | ToolEffectUncertain | ToolAdapterService | AlertRuleService | tool-execution.invocations.v1.tool-effect-uncertain |
| in | ToolEffectUncertain | ToolAdapterService | AuditService | tool-execution.invocations.v1.tool-effect-uncertain |
| in | ToolEffectUncertain | ToolAdapterService | DashboardService | tool-execution.invocations.v1.tool-effect-uncertain |
| in | SandboxLeased | ToolAdapterService | DashboardService | tool-execution.sandboxes.v1.sandbox-leased |
| in | SandboxReleased | ToolAdapterService | SecretBrokerService | tool-execution.sandboxes.v1.sandbox-released |
| in | SandboxReleased | ToolAdapterService | DashboardService | tool-execution.sandboxes.v1.sandbox-released |
| in | ConnectorActivated | ConnectorRegistryService | AuditService | connectors.connectors.v1.connector-activated |
| in | ConnectorSubscriptionChanged | ConnectorRegistryService | AuditService | connectors.subscriptions.v1.connector-subscription-changed |
| in | DeliveryReceived | ConnectorRegistryService | DashboardService | connectors.deliveries.v1.delivery-received |
| in | DeliveryDispatched | ConnectorRegistryService | DashboardService | connectors.deliveries.v1.delivery-dispatched |
| in | DeliveryDispatched | ConnectorRegistryService | AuditService | connectors.deliveries.v1.delivery-dispatched |
| in | DeliveryFailed | ConnectorRegistryService | AlertRuleService | connectors.deliveries.v1.delivery-failed |
| in | DeliveryFailed | ConnectorRegistryService | DashboardService | connectors.deliveries.v1.delivery-failed |
| in | DeliveryFailed | ConnectorRegistryService | AuditService | connectors.deliveries.v1.delivery-failed |
| in | DeliveryReplayed | ConnectorRegistryService | AuditService | connectors.deliveries.v1.delivery-replayed |
| in | ConnectionRegistered | IntegrationService | AuditService | connections.connections.v1.connection-registered |
| in | ConnectionStateChanged | IntegrationService | DashboardService | connections.connections.v1.connection-state-changed |
| in | ConnectionStateChanged | IntegrationService | AuditService | connections.connections.v1.connection-state-changed |
| in | ConnectionGrantChanged | IntegrationService | AuditService | connections.grants.v1.connection-grant-changed |
| in | CredentialRotated | IntegrationService | AuditService | connections.connections.v1.credential-rotated |
| in | CredentialRotated | IntegrationService | DashboardService | connections.connections.v1.credential-rotated |
| in | InboundDeliveryVerified | WebhookGatewayService | DashboardService | connectors.ingress.v1.inbound-delivery-verified |
| in | InboundDeliveryRejected | WebhookGatewayService | AuditService | connectors.ingress.v1.inbound-delivery-rejected |
| in | InboundDeliveryRejected | WebhookGatewayService | DashboardService | connectors.ingress.v1.inbound-delivery-rejected |
| in | PricingPlanChanged | LicenseService | AuditService | licensing.pricing.v1.pricing-plan-changed |
| in | EntitlementGranted | LicenseService | AuditService | licensing.entitlements.v1.entitlement-granted |
| in | EntitlementStateChanged | LicenseService | AuditService | licensing.entitlements.v1.entitlement-state-changed |
| in | PublisherCertified | LicenseService | AuditService | licensing.publishers.v1.publisher-certified |
| in | ListingPublished | MarketplaceCatalogService | AuditService | marketplace.listings.v1.listing-published |
| in | ListingStateChanged | MarketplaceCatalogService | AuditService | marketplace.listings.v1.listing-state-changed |
| in | ListingInstalled | MarketplaceCatalogService | AuditService | marketplace.installations.v1.listing-installed |
| in | ListingRemoved | MarketplaceCatalogService | AuditService | marketplace.installations.v1.listing-removed |
| in | PromotionRequested | EnvironmentPromotionService | AuditService | releases.promotions.v1.promotion-requested |
| in | PromotionRequested | EnvironmentPromotionService | DashboardService | releases.promotions.v1.promotion-requested |
| in | PromotionApproved | EnvironmentPromotionService | AuditService | releases.promotions.v1.promotion-approved |
| in | PromotionCompleted | EnvironmentPromotionService | AuditService | releases.promotions.v1.promotion-completed |
| in | PromotionCompleted | EnvironmentPromotionService | DashboardService | releases.promotions.v1.promotion-completed |
| in | PromotionFailed | EnvironmentPromotionService | AuditService | releases.promotions.v1.promotion-failed |
| in | PromotionFailed | EnvironmentPromotionService | AlertRuleService | releases.promotions.v1.promotion-failed |
| in | PromotionFailed | EnvironmentPromotionService | DashboardService | releases.promotions.v1.promotion-failed |
| in | RollbackCompleted | EnvironmentPromotionService | AuditService | releases.promotions.v1.rollback-completed |
| in | RollbackCompleted | EnvironmentPromotionService | AlertRuleService | releases.promotions.v1.rollback-completed |
| in | ChangeProposalOpened | PipelineExecutionService | AuditService | pipelines.proposals.v1.change-proposal-opened |
| in | ChangeProposalOpened | PipelineExecutionService | DashboardService | pipelines.proposals.v1.change-proposal-opened |
| in | ChangeProposalStateChanged | PipelineExecutionService | DashboardService | pipelines.proposals.v1.change-proposal-state-changed |
| in | ChangeProposalMerged | PipelineExecutionService | AuditService | pipelines.proposals.v1.change-proposal-merged |
| in | ChangeProposalMerged | PipelineExecutionService | FeedbackService | pipelines.proposals.v1.change-proposal-merged |
| in | PipelineRunStarted | PipelineExecutionService | DashboardService | pipelines.runs.v1.pipeline-run-started |
| in | PipelineRunCompleted | PipelineExecutionService | DashboardService | pipelines.runs.v1.pipeline-run-completed |
| in | PipelineRunCompleted | PipelineExecutionService | AuditService | pipelines.runs.v1.pipeline-run-completed |
| in | PipelineRunCompleted | PipelineExecutionService | QualityScoreService | pipelines.runs.v1.pipeline-run-completed |
| in | ReleaseCreated | ReleaseService | AuditService | releases.products.v1.release-created |
| in | ReleaseCreated | ReleaseService | DashboardService | releases.products.v1.release-created |
| in | ReleaseReady | ReleaseService | AuditService | releases.products.v1.release-ready |
| in | ReleaseWithdrawn | ReleaseService | AuditService | releases.products.v1.release-withdrawn |
| in | SpecificationDeclared | IaCProvisioningService | AuditService | provisioning.specifications.v1.specification-declared |
| in | ProvisioningPlanned | IaCProvisioningService | AuditService | provisioning.runs.v1.provisioning-planned |
| in | ProvisioningApplied | IaCProvisioningService | AuditService | provisioning.runs.v1.provisioning-applied |
| in | ProvisioningApplied | IaCProvisioningService | DashboardService | provisioning.runs.v1.provisioning-applied |
| in | ProvisioningFailed | IaCProvisioningService | AuditService | provisioning.runs.v1.provisioning-failed |
| in | ProvisioningFailed | IaCProvisioningService | AlertRuleService | provisioning.runs.v1.provisioning-failed |
| in | WorkerPoolStateChanged | ExecutionCapacityService | SloService | capacity.pools.v1.worker-pool-state-changed |
| in | WorkerPoolStateChanged | ExecutionCapacityService | AlertRuleService | capacity.pools.v1.worker-pool-state-changed |
| in | QuotaChanged | ExecutionCapacityService | AuditService | capacity.quotas.v1.quota-changed |
| in | QuotaExceeded | ExecutionCapacityService | DashboardService | capacity.quotas.v1.quota-exceeded |
| in | CapacityLeaseGranted | ExecutionCapacityService | DashboardService | capacity.leases.v1.capacity-lease-granted |
| in | CapacityLeaseReleased | ExecutionCapacityService | DashboardService | capacity.leases.v1.capacity-lease-released |
| in | ObservedStateChanged | RuntimeEnvironmentService | SloService | provisioning.inventory.v1.observed-state-changed |
| in | ObservedStateChanged | RuntimeEnvironmentService | DashboardService | provisioning.inventory.v1.observed-state-changed |
| in | RuntimeDriftDetected | RuntimeEnvironmentService | AlertRuleService | provisioning.inventory.v1.runtime-drift-detected |
| in | RuntimeDriftDetected | RuntimeEnvironmentService | AuditService | provisioning.inventory.v1.runtime-drift-detected |
| in | RuntimeDriftDetected | RuntimeEnvironmentService | DashboardService | provisioning.inventory.v1.runtime-drift-detected |
| in | ReconciliationProposed | RuntimeEnvironmentService | AuditService | provisioning.inventory.v1.reconciliation-proposed |
| in | ReconciliationDecided | RuntimeEnvironmentService | AuditService | provisioning.inventory.v1.reconciliation-decided |
| in | IncidentOpened | FleetIncidentService | AuditService | fleet-operations.incidents.v1.incident-opened |
| in | IncidentOpened | FleetIncidentService | DashboardService | fleet-operations.incidents.v1.incident-opened |
| in | IncidentOpened | FleetIncidentService | AlertRuleService | fleet-operations.incidents.v1.incident-opened |
| in | IncidentStateChanged | FleetIncidentService | AuditService | fleet-operations.incidents.v1.incident-state-changed |
| in | IncidentStateChanged | FleetIncidentService | DashboardService | fleet-operations.incidents.v1.incident-state-changed |
| in | IncidentResolved | FleetIncidentService | AuditService | fleet-operations.incidents.v1.incident-resolved |
| in | IncidentResolved | FleetIncidentService | SloService | fleet-operations.incidents.v1.incident-resolved |
| in | IncidentResolved | FleetIncidentService | FeedbackService | fleet-operations.incidents.v1.incident-resolved |
| in | OnCallChanged | FleetIncidentService | AuditService | fleet-operations.on-call.v1.on-call-changed |
| in | OffboardingRequested | FleetIncidentService | AuditService | fleet-operations.offboarding.v1.offboarding-requested |
| in | OffboardingCompleted | FleetIncidentService | AuditService | fleet-operations.offboarding.v1.offboarding-completed |
| in | ProductOnboarded | FleetInventoryService | AuditService | fleet-inventory.products.v1.product-onboarded |
| in | ProductOnboarded | FleetInventoryService | SloService | fleet-inventory.products.v1.product-onboarded |
| in | ProductInstanceStateChanged | FleetInventoryService | DashboardService | fleet-inventory.products.v1.product-instance-state-changed |
| in | ProductObjectiveDefined | FleetInventoryService | SloService | fleet-inventory.objectives.v1.product-objective-defined |
| in | ProductObjectiveDefined | FleetInventoryService | AuditService | fleet-inventory.objectives.v1.product-objective-defined |
| in | RolloutPlanned | FleetRolloutService | AuditService | fleet-rollouts.rollouts.v1.rollout-planned |
| in | RolloutWaveCompleted | FleetRolloutService | DashboardService | fleet-rollouts.rollouts.v1.rollout-wave-completed |
| in | RolloutHalted | FleetRolloutService | AlertRuleService | fleet-rollouts.rollouts.v1.rollout-halted |
| in | RolloutHalted | FleetRolloutService | AuditService | fleet-rollouts.rollouts.v1.rollout-halted |
| in | RolloutCompleted | FleetRolloutService | AuditService | fleet-rollouts.rollouts.v1.rollout-completed |
| in | RolloutCompleted | FleetRolloutService | DashboardService | fleet-rollouts.rollouts.v1.rollout-completed |
| in | TopicRegistered | EnvelopeRegistryService | AuditService | data-foundations.topics.v1.topic-registered |
| in | SchemaVersionPublished | EnvelopeRegistryService | AuditService | data-foundations.topics.v1.schema-version-published |
| in | TopicDeprecated | EnvelopeRegistryService | AuditService | data-foundations.topics.v1.topic-deprecated |
| in | EnvelopeProfileActivated | EnvelopeRegistryService | AuditService | data-foundations.envelopes.v1.envelope-profile-activated |
| in | StoreProfileActivated | StoreProfileService | AuditService | data-foundations.stores.v1.store-profile-activated |
| in | StoreBindingChanged | StoreProfileService | AuditService | data-foundations.stores.v1.store-binding-changed |
| in | RetentionRuleChanged | RetentionResidencyService | AuditService | data-foundations.retention.v1.retention-rule-changed |
| in | RetentionRuleChanged | RetentionResidencyService | ObservabilityHost | data-foundations.retention.v1.retention-rule-changed |
| in | ResidencyRuleChanged | RetentionResidencyService | AuditService | data-foundations.residency.v1.residency-rule-changed |
| in | DeletionOrderIssued | RetentionResidencyService | GovernanceHost | data-foundations.orders.v1.deletion-order-issued |
| in | DeletionOrderIssued | RetentionResidencyService | ObservabilityHost | data-foundations.orders.v1.deletion-order-issued |
| in | DeletionOrderCompleted | RetentionResidencyService | AuditService | data-foundations.orders.v1.deletion-order-completed |
| in | ExportCompleted | RetentionResidencyService | AuditService | data-foundations.orders.v1.export-completed |
| in | LegalHoldChanged | RetentionResidencyService | AuditService | data-foundations.orders.v1.legal-hold-changed |
| in | LegalHoldChanged | RetentionResidencyService | ObservabilityHost | data-foundations.orders.v1.legal-hold-changed |
| in | StudioSessionStarted | StudioBff | AuditService | studio.sessions.v1.studio-session-started |
| in | StudioSessionStarted | StudioBff | DashboardService | studio.sessions.v1.studio-session-started |
| in | BlueprintValidated | BlueprintService | AuditService | blueprints.versions.v1.blueprint-validated |
| in | BlueprintSubmitted | BlueprintService | AuditService | blueprints.versions.v1.blueprint-submitted |
| in | BlueprintPublished | BlueprintService | AuditService | blueprints.versions.v1.blueprint-published |
| in | BlueprintPublished | BlueprintService | DashboardService | blueprints.versions.v1.blueprint-published |
| in | RecipeValidated | GenerationRecipeService | AuditService | generation.recipes.v1.recipe-validated |
| in | RecipeApproved | GenerationRecipeService | AuditService | generation.recipes.v1.recipe-approved |
| in | GenerationCompleted | GenerationRecipeService | AuditService | generation.recipes.v1.generation-completed |
| in | GenerationCompleted | GenerationRecipeService | DashboardService | generation.recipes.v1.generation-completed |
| in | GeneratedOutputRecorded | GenerationRecipeService | AuditService | generation.outputs.v1.generated-output-recorded |
| in | TemplateVersionDiscovered | TemplateRegistryService | AuditService | template-catalog.templates.v1.template-version-discovered |
| in | TemplateVersionPublished | TemplateRegistryService | AuditService | template-catalog.templates.v1.template-version-published |
| in | ProductTenantProvisioned | GeneratedSaasFoundations | AuditService | product-tenancy.tenants.v1.product-tenant-provisioned |
| in | ProductTenantStateChanged | GeneratedSaasFoundations | AuditService | product-tenancy.tenants.v1.product-tenant-state-changed |
| in | ProductSubscriptionChanged | GeneratedSaasFoundations | AuditService | product-tenancy.subscriptions.v1.product-subscription-changed |
| in | ProductDescriptorPublished | GeneratedProductHost | AuditService | product-domains.descriptor.v1.product-descriptor-published |
| in | OperationsHandoverAcknowledged | GeneratedProductHost | AuditService | product-domains.operations.v1.operations-handover-acknowledged |
Gateways¶
No gateway role is anchored in this plane.
Model coverage¶
| Count | |
|---|---|
| Services in the registry | 30 |
| Modelled (YAML exists) | 11 |
| With a design page | 11 |
| Unmodelled | 19 |