Spaces:

sangamdas
/

privacy-finality-reference

Runtime error

App Files Files Community

privacy-finality-reference / docs /ARCHITECTURE.md

sangamdas

Add runnable Privacy Finality execution-finality demo

09f1b1f about 2 months ago

preview code

Raw History Blame Contribute Delete

1.12 kB

# Architecture

```text
AI / application
     |
     v
Candidate Act
     |
     v
NON-EFFECTIVE
     |
     v
Protected Enforcement Domain
     |
     +--> Identity Vault ------> subject/resource binding + VI commitment
     +--> Relationship Vault --> resource ownership predicate
     +--> Purpose Vault -------> allowed operation / minimum data scope
     +--> Jurisdiction Vault --> destination predicate
     +--> Data Vault ----------> only approved attribute subset
     +--> Crypto/Policy state -> policy epoch / revocation inputs
     |
     v
Signed act-bound Validation Permit
     + workload proof-of-possession
     |
     v
Finality Sink
     |
     +--> exact act re-hash
     +--> signature / PoP verify
     +--> purpose / attrs / recipient / destination / epoch / nonce / sink verify
     +--> atomic replay consumption + effect record
     |
     v
FIRST USABLE EFFECT (modeled locally)
```

The application never receives the raw Virtual Identity secret. It receives only the minimum permitted data grant plus a signed permit that is useless without the bound workload key and exact Candidate Act.

	# Architecture

	```text
	AI / application
	\|
	v
	Candidate Act
	\|
	v
	NON-EFFECTIVE
	\|
	v
	Protected Enforcement Domain
	\|
	+--> Identity Vault ------> subject/resource binding + VI commitment
	+--> Relationship Vault --> resource ownership predicate
	+--> Purpose Vault -------> allowed operation / minimum data scope
	+--> Jurisdiction Vault --> destination predicate
	+--> Data Vault ----------> only approved attribute subset
	+--> Crypto/Policy state -> policy epoch / revocation inputs
	\|
	v
	Signed act-bound Validation Permit
	+ workload proof-of-possession
	\|
	v
	Finality Sink
	\|
	+--> exact act re-hash
	+--> signature / PoP verify
	+--> purpose / attrs / recipient / destination / epoch / nonce / sink verify
	+--> atomic replay consumption + effect record
	\|
	v
	FIRST USABLE EFFECT (modeled locally)
	```

	The application never receives the raw Virtual Identity secret. It receives only the minimum permitted data grant plus a signed permit that is useless without the bound workload key and exact Candidate Act.