Diagrams

Diagrams

C4 Context

See docs/diagrams/c4-context.md.

C4 Container

See docs/diagrams/c4-container.md. The current container diagram marks the Approval Router as an implemented JSON/SQLite-backed lifecycle service with repository routing, signed OIDC/JWKS validation, repository RBAC, console actions, console break-glass creation, approval audit details, provider request specs, and live provider delivery evidence. It also marks the Agent and MCP Trust Registry as a JSON/SQLite implementation for governed agent identities, MCP trust decisions, predefined agent profiles, MCP capability classifications, and console registry views. The metadata store now includes JSON/SQLite evidence, session, decision, approval, registry, repository inventory, policy rollout metadata, integration inventory, backup/restore operations, and retention planning. The console security boundary is exposed as read-only OIDC/RBAC/CORS readiness metadata. The Go enforcement plane remains planned.

Agent and MCP Registry

See docs/diagrams/agent-mcp-registry.svg for the dedicated registry view that separates profiles, registered identities, trust records, classifications, storage modes, runtime decisions, console views, and evidence consumers.

Runtime Components

See docs/diagrams/c4-component-runtime.md.

Runtime Decision Flow

See docs/diagrams/runtime-decision-flow.md.

Evidence Lifecycle

See docs/diagrams/evidence-lifecycle.md.

SVG Images

Repository diagram images:

• docs/diagrams/architecture-context.svg
• docs/diagrams/c4-container.svg
• docs/diagrams/runtime-flow.svg
• docs/diagrams/evidence-hub.svg
• docs/diagrams/policy-lifecycle.svg
• docs/diagrams/developer-journey.svg
• docs/diagrams/agent-orchestration.svg