5.1 KiB
Curriculum Project Hub
The shared language for the multi-tenant service that lets customer organizations manage curriculum projects and operate agents through their own Feishu connection.
Language
Organization: The customer tenant root that owns its memberships, projects, teams, external connections, and settings. Avoid: Account, workspace
Platform Administrator: An internal operator who creates and operates Organizations without becoming a member of them. Avoid: Organization admin, super member
Organization Administrator: An Organization OWNER or ADMIN who manages only that Organization's members, projects, connections, and settings. Avoid: Platform admin
Admin Surface: The private web control plane available only to an authenticated user with the corresponding Platform Administrator or Organization Administrator authority. Avoid: Public management page, member portal
Customer-owned Feishu Application: The Organization-scoped Feishu application used for that Organization's login, bot messages, and directory integration; unrelated Organizations never share it. Avoid: Global Feishu app, platform bot
Platform-owned Feishu Application: The dedicated Feishu application used only to authenticate Platform Administrators; it is separate from every Customer-owned Feishu Application and grants no Organization or Project authority. Avoid: Customer-owned Feishu Application, Organization Feishu app
Platform Administrator Bootstrap: The one-time, guarded grant of Platform Administrator authority to a verified Platform Identity when no active Platform Administrator exists. Avoid: Seed administrator, standing bootstrap account
Platform Administrator Invitation: A short-lived, single-use invitation issued by a Platform Administrator and bound to one expected identity from the Platform-owned Feishu Application. Avoid: Open administrator enrollment, unbound administrator invitation
Platform Session: A revocable authentication session bound only to a Platform Identity and its active Platform Administrator authority; it carries no Organization membership or Project authority. Avoid: Organization admin session, customer session
Platform Audit Entry: An immutable, durable record of a platform control-plane decision or action, separate from customer Project and Agent Run audit and mandatory for every platform mutation. Organization Administrators receive only a redacted projection of entries affecting their Organization. Avoid: Best-effort log, Project audit entry
Emergency Platform Grant: Short-lived Platform Administrator authority issued only by the offline recovery procedure for a declared incident and automatically expired afterward. Avoid: Standing break-glass account, permanent emergency administrator
Provider Credential Mode: The Organization's choice between a BYOK Provider Connection and a Platform-managed Provider Connection. Avoid: Global provider setting
BYOK Provider Connection: An Organization-scoped model-provider connection whose key and base URL are supplied and managed by an Organization Administrator. Avoid: Platform key
Platform-managed Provider Connection: An Organization-scoped model-provider connection whose distinct key and base URL are supplied and managed by a Platform Administrator for that Organization. Avoid: Shared platform key, BYOK
Platform Capacity Ceiling: A non-overridable upper bound imposed by the platform to protect shared service capacity. Avoid: Organization quota
Organization Policy Limit: An optional lower bound configured by an Organization Administrator to govern that Organization's own usage. Avoid: Platform limit
Effective Limit: The lower of the Platform Capacity Ceiling and the Organization Policy Limit; when no Organization Policy Limit exists, the Platform Capacity Ceiling applies. Avoid: Unlimited default
Organization-fair Scheduling: The policy that allocates available agent execution capacity fairly across Organizations, while preserving first-in-first-out order within each Organization. Avoid: Global FIFO
Agent Admission Queue: The durable, bounded set of accepted agent run requests waiting for execution capacity. Avoid: In-memory trigger queue, unlimited backlog
Expired Run Request: An accepted agent run request that reached its maximum queue wait before execution; it is terminal and will never execute automatically. Avoid: Delayed request, automatic retry
Run Request Initiator: The Organization member whose action created an agent run request. Avoid: Queue owner, Project owner
Explicit Run Retry: A new agent run request deliberately created after an earlier run failed or timed out. Avoid: Automatic replay, implicit rerun
Run Budget: The deterministic resource boundary for one agent run, independent of monetary or token usage alerts. Avoid: Cost budget, unlimited run
Emergency Workload Brake: An audited Platform Administrator control that prevents new agent work for one Organization or the whole platform and may explicitly stop active work during an incident. Avoid: Organization deletion, service restart