Control plane: credential and record

Control plane: credential and record An architecture diagram generated by Archify. Workload · requests credential · Architecture component Workload requests credential Issuer · mints 300s token · Architecture component Issuer mints 300s token Token store · char[] wiped on expiry · Architecture component Token store char[] wiped on expiry Validator · constant-time + strict TTL · Architecture component Validator constant-time + strict TTL Purge · sweeps expired material · Architecture component Purge sweeps expired material Appender · HMAC-sealed entries · Architecture component Appender HMAC-sealed entries daglog · hash-chained EDN lines · Architecture component daglog hash-chained EDN lines Verifier · reports break at :at · Architecture component Verifier reports break at :at Legend Backend Database Security External

Ephemeral trust, evident record

  • • Credentials die in 300s with memory wiped, never revoked
  • • Log verifies its own tampering at the exact sequence