Flow: Authentication and Identity Propagation
User authentication, gateway validation, workload identity, subject assertion, and service verification.
Flow: Authorization Decision
How the gateway and composite PDP combine OpenFGA, OPA, delegation, trust, and obligations into a fail-closed decision.
Flow: Data Access and Download
Discovery, entitlement, composite authorization, carried obligations, data filtering, delivery, and audit.
Flow: Dataset Onboarding and Discovery
Registering metadata, provisioning storage, ingesting content, publishing discovery, and recovering partial onboarding.
Flow: File Upload and Processing
Multipart upload, object ownership, asynchronous processing, download, cleanup, and recovery.
Flow: Marketplace Purchase and Entitlement
Product authoring, order/payment state, callback verification, grant creation, projection, and recovery.
Flow: Policy Lifecycle
Grant creation, validation, durable publication, OpenFGA and OPA inputs, activation, expiry, revocation, and reconciliation.
Flow: Agent Delegation and Tool Execution
Agent registration, delegation, session assembly, token exchange, MCP controls, authorization, human approval, audit, and revocation.
Flow: Audit Event Production and Consumption
How services produce durable activity facts, how the Audit Service consumes them, and how failures are recovered.