Glossary

Term	Definition
API contract	The documented request/response agreement, typically represented by OpenAPI.
Auth Gateway	The authenticated edge service used by Traefik to validate identity and obtain authorization decisions.
Cerbos PDP	The policy decision point that evaluates authorization policy.
Event	A record of a domain action sent asynchronously through the event system.
Gateway	The controlled entry point for inbound HTTP traffic.
Helm chart	A package of parameterized Kubernetes resources.
MCP	Model Context Protocol, a protocol for connecting AI applications to tools and context providers.
Module / service	An independently deployable Labs64.IO capability with a focused responsibility.
Sink	A configured destination for processed AuditFlow events.
Tenant	The logical organization or customer context that scopes data, policy, and event routing.
Trusted header	Identity or tenancy context injected by the gateway after a successful authentication and authorization decision.