Platform terms
- Identity
The recognised person, application, or agent established independently from any single application.
- Custody
The party that holds the protected business material and the key services. Custody is decided per deployment profile.
- Delegation
A recorded, reviewable, revocable grant of narrowly-attenuated authority from one actor to another.
- Relying service
A resource server or business surface that evaluates authorization at request time. It retains final deny in every profile.
- Deployment profile
One of managed, customer-controlled, or isolated: a named target shape for where business data and keys live and who operates them.
- Final deny
The resource service retains the last word on any action. No claim can override the local deny. This invariant survives every deployment profile.
Status labels
Every public claim carries one of these six labels. The label is part of the claim, not a footnote.
- Implemented
- Implemented in a Federated Trust service path with current evidence. The named deployment and evidence scope still matter.
- Limited / pilot
- Code or contracts exist, but integration, operational, or assurance gates still prevent general availability.
- Designed
- An approved target shape or contract that is not represented as generally available. A validated deployment package is still required.
- Planned
- A stated engineering target that is not represented as implemented, generally available, or deployed today.
- Independently validated
- Implemented and assessed independently for a named scope and evidence date. This label does not extend beyond that evidence.
- Governing reference
- Authoritative material used to guide design and review. This status is not a certification or a universal conformance claim.