Orchestrate

The Orchestrate layer executes actions, monitors SLAs, and emits compliance-grade audit records.

Responsibilities

• Workflow runtime (Temporal, Step Functions, Airflow)
• Pre/post-conditions, compensations, rollbacks
• Unified metrics (latency, tokens, cost, success)
• Append-only audit and lineage graph

Action record (YAML)

action_id: <uuid>
trace_id: <trace>
effect: email.sent
pre:
  quota_ok: true
post:
  status: queued
  id: msg-987
sla:
  p95_ms: 220
signature: ed25519:…

Risk controls

• Per-tenant rate limits and spend guards
• Human-in-the-loop for sensitive effects
• Secrets via vault references only