Store State
Data Classes
Section titled “Data Classes”| State | Store | Operational implication |
|---|---|---|
| Product, policy, authority, Session, Delegation, admin-audit, and audit evidence | Postgres | Primary durable backup and restore target. |
| Invalidation, revocation, lifecycle, audit delivery, consumer coordination | Redis Streams | Preserve when possible; recover propagation from durable state and outboxes. |
| Undelivered STS/Gateway audit events | Replay volumes | Restore before discarding Redis state so evidence can drain. |
| Provider, application, workload, signing, HMAC, and encryption secrets | Secret backend and runtime secret files | Restore with matching key material; ciphertext alone is insufficient. |
Ownership Boundaries
Section titled “Ownership Boundaries”The API owns product and policy data. STS owns issuance behavior and Authority records. Coordinator owns Sessions and Delegations. Audit owns append-only evidence ingestion. Shared Postgres does not make one service’s tables a supported API for another client.
Some schema names retain protocol history, including agent_services, agent_invocations, and delegation_edges. Public surfaces expose Sessions, invocations, and Delegations. Integrations must use public names and APIs rather than retained table names.
Integrity Guarantees
Section titled “Integrity Guarantees”- Production migrations move forward and are recorded in
schema_migrations. - Policy versions are immutable.
- Zone-scoped reads use fail-closed row-level security.
- The Audit database role cannot update or delete evidence rows.
- Outboxes couple a state change to eventual event publication.
- Secret envelopes bind encrypted values to key fingerprints and purposes.
Restore Order
Section titled “Restore Order”- Restore Postgres and the runtime/secret-backend keys needed to decrypt it.
- Restore STS and Gateway audit replay volumes.
- Restore Redis streams and pending entries when available, or allow durable publishers and snapshots to rebuild propagation state.
- Reconnect audit exports and verify retention watermarks.
- Run readiness, Diagnostics, a policy simulation, a protected request, and an Audit trace.
Use Back Up and Retain Data for procedures. Do not use direct SQL as a management or migration shortcut.