Architecture#

How the pieces fit: a stateless authority API in front of per-tenant Postgres, a policy/authority engine that evaluates every intent, an interpretation layer (LIM) that turns proposals into structured intent, and per-tenant Ed25519 signing keys that mint the Authority Tokens downstream adapters verify. Everything fails closed and appends to a per-tenant, hash-chained audit log.

• Architecture Overview — runtime boundaries, subsystem composition, and data flow

For the conceptual model behind the architecture, see Concepts; for the trust boundaries specifically, see Tenant Trust Boundary.