Deterministic, policy-gated
IAM orchestration.
An architectural breakdown of the IAM Orchestrator runtime: zero static admin tokens, an explainable policy gate, asynchronous Kafka event dispatch, and a tamper-evident WORM audit ledger.
End-to-End Pipeline Telemetry Trace
Driven by client-side event script matching live Kafka message dispatch.
Six decoupled services. Single-responsibility trust boundaries.
Services run with least-privilege database roles, communicate asynchronously over Kafka, and execute policy evaluations in-memory via OPA. No service holds static vendor super-admin tokens.
Gatekeeper
Receives natural-language messages from Slack, Jira webhooks, HRIS polling, or direct API. Runs deterministic prompt injection filtering before LLM extraction. Emits validated IntentPacket to Kafka.
Doer Agent
Consumes signed intents from Kafka, verifies HMAC signature, leases 60s JIT credentials from Vault, and executes multi-portal mutations (Okta, Salesforce, GitHub, Zoom, M365). Manages soft/hard phase retention.
Licensing Orchestrator
Inventories subscribed licenses per leaver, coordinates immediate license freeze, calculates period-scoped savings, and manages deferred reclamation windows with cancel-on-reinstate support.
Zero-Trust Audit
Write-Once-Read-Many (WORM) ledger. Cryptographically chains each execution event via SHA-256 hashes. Serves /audit/verify traversal endpoints for automated SOC 2 and ISO 27001 auditor verification.
Admin UI
Operator-facing web dashboard: per-tenant credential rotation, WORM audit log explorer, read-only OPA policy display, role-gated /approvals HITL decision queue, and executive ROI reporting.
Template Admin
Private internal control-plane for birthright JML access templates. Enforces optimistic draft revisions, non-destructive schema digestion, atomic pre-publication validation against live connectors, and append-only history.
Four architectural trust guarantees.
HashiCorp Vault Just-In-Time (JIT) Leasing
No long-lived API tokens or credentials reside in container memory or database tables. The Doer Agent requests a short-lived lease (TTL = 60s) from Vault immediately before calling vendor APIs. Once execution completes, the credential is immediately revoked in a guaranteed finally block. Even a compromised execution container possesses zero permanent vendor access.
Prompt Injection & Schema Hijack Post-Filter
Before any LLM-parsed output reaches policy evaluation, a deterministic regex post-filter (_detect_adversarial_input) inspects the raw payload for known injection markers ("ignore previous instructions", "you are now an admin", JSON-shaped payloads). Suspected inputs clamp confidence to ≤ 0.3, scrub the target identity, and force human-in-the-loop review.
Open Policy Agent (OPA) with Rego Rules
Language models never decide authorization. Every action must satisfy strict, version-controlled Rego rules evaluated in-memory by OPA. Actions are classified into allow, require_hitl, or block. Allowed packets are cryptographically signed with per-tenant HMAC-SHA256 signatures before forwarding to the executor.
Tamper-Evident WORM Audit Chaining
Every intake, metadata lookup, policy evaluation, credential lease, and portal mutation emits an event to the Zero-Trust ledger. Each record stores SHA256(parent_hash + current_event). The /audit/verify endpoint recalculates the chain from genesis to head, immediately detecting any row alteration, insertion, or deletion.
Two production-proven deployment topologies.
Deploy in our managed cloud or completely air-gapped within your own private VPC. Both topologies utilize identical hardened microservices and least-privilege access patterns.
Done-for-You (Fly.io Isolated 6PN Mesh)
Each customer runs on a dedicated, isolated private WireGuard 6PN mesh. Database and message bus ports have zero public IP bindings. Only HTTPS traffic to Gatekeeper and Admin UI is routed through Cloudflare edge proxying with WAF and DDoS mitigation.
- Automated rolling migrations via entrypoint runner
- Zero customer credential sharing across tenants
- Isolated ephemeral worker machines for batch operations
Self-Hosted (Docker Compose / Private VPC)
Run the full 11-container stack entirely inside your own AWS VPC, Google Cloud project, Azure subscription, or on-premise Kubernetes cluster. Complete data sovereignty: zero external outbound calls except to your configured SaaS APIs.
- Digest-pinned immutable container images from GHCR
- Six distinct least-privilege PostgreSQL roles (no shared super-admin)
- Local Prometheus, Grafana, and Loki observability stack included
Ready to test the pipeline on your stack?
Experience our interactive in-browser simulator or apply for a 45-day proof of value deployed directly into your cloud.