Platform governance
Governance rules bound what an extension may read, produce, modify, or disclose. They are independent from the partner's commercial status and remain applicable to every execution.
Why governance is contractual
An extension operates at the intersection of several systems, each of which may be the source of truth for part of the business domain. Without explicit rules, a synchronization or webhook could turn an external observation into an arbitrary platform mutation.
Ormuz therefore treats authority, access, data protection, and risk as contract dimensions, not as implicit good-conduct conventions.
Quatre plans distincts
| Plane | Question | Example |
|---|---|---|
| Business authority | Who has the right to establish this fact or transition? | A PSP establishes an external payment movement; Ormuz does not fabricate it. |
| Platform access | Does this execution have the right to read or write the object concerned? | A node that searches for a credit exposure on its own must declare read access. |
| Data protection | How must the value be classified, persisted, and revealed? | A bearer token is secret and must not appear in generic audit data. |
| Execution risk | What is the maximum consequence level of a Tool? | An email sent externally remains high even when its content is ordinary. |
These planes combine without replacing one another. Data can be highly confidential while coming from a Tool low ; a mutation may be high while carrying only data. normal.
Default principles
- No generic access: an extension receives only the objects and capabilities required by its context.
- No authority by reputation: certification or partnership grants no implicit business power.
- Fail closed : ambiguous authority or classification must not be automatically loosened.
- Visible consent: when a process explicitly supplies a complete object to a node, that binding materializes functional consent for this input.
- Declared opaque access: an active read or write that is not visible in bindings requires an explicit permission.
- Durable provenance: origin, external identity, and mappings help reconstruct where information came from without creating a second authority system.