Flow Philosophy
Integration is designed as a strict, auditable sequence where every gate is explicit and policy-denied paths terminate before side effects.
Node-to-Node Logic
- Accept inbound identity token.
- Parse and normalize token attributes.
- Resolve operational context including orbit band.
- Verify credential integrity and scope.
- Run policy and orbit compatibility checks.
- Execute authorized service action.
Sequence Diagrams
Primary sequence: client → parser/context resolver → credential verifier → policy engine → service gateway, with telemetry and failure observers attached throughout.
Credential Flow
Credential verification includes HMAC signature validation, expiration checks, token binding, and requested-permission scope gating.
Packet Flow
Traffic is carried via IntegrationPacket envelopes with route and auth context fields that preserve FAAO and orbit-aware semantics.
Orbit-Aware Flow
Orbit constraints (requiredOrbit/compatibleOrbits) are evaluated before permission-specific allow logic to keep mission corridors safe.
Failure Flow
Any parse/auth/policy failure returns a structured denial reason, emits telemetry, and avoids downstream mutation.