forked from EduCraft/curriculum-project-hub
102 lines
5.1 KiB
Markdown
102 lines
5.1 KiB
Markdown
# Curriculum Project Hub
|
|
|
|
The shared language for the multi-tenant service that lets customer organizations manage curriculum projects and operate agents through their own Feishu connection.
|
|
|
|
## Language
|
|
|
|
**Organization**:
|
|
The customer tenant root that owns its memberships, projects, teams, external connections, and settings.
|
|
_Avoid_: Account, workspace
|
|
|
|
**Platform Administrator**:
|
|
An internal operator who creates and operates Organizations without becoming a member of them.
|
|
_Avoid_: Organization admin, super member
|
|
|
|
**Organization Administrator**:
|
|
An Organization OWNER or ADMIN who manages only that Organization's members, projects, connections, and settings.
|
|
_Avoid_: Platform admin
|
|
|
|
**Admin Surface**:
|
|
The private web control plane available only to an authenticated user with the corresponding Platform Administrator or Organization Administrator authority.
|
|
_Avoid_: Public management page, member portal
|
|
|
|
**Customer-owned Feishu Application**:
|
|
The Organization-scoped Feishu application used for that Organization's login, bot messages, and directory integration; unrelated Organizations never share it.
|
|
_Avoid_: Global Feishu app, platform bot
|
|
|
|
**Platform-owned Feishu Application**:
|
|
The dedicated Feishu application used only to authenticate Platform Administrators; it is separate from every Customer-owned Feishu Application and grants no Organization or Project authority.
|
|
_Avoid_: Customer-owned Feishu Application, Organization Feishu app
|
|
|
|
**Platform Administrator Bootstrap**:
|
|
The one-time, guarded grant of Platform Administrator authority to a verified Platform Identity when no active Platform Administrator exists.
|
|
_Avoid_: Seed administrator, standing bootstrap account
|
|
|
|
**Platform Administrator Invitation**:
|
|
A short-lived, single-use invitation issued by a Platform Administrator and bound to one expected identity from the Platform-owned Feishu Application.
|
|
_Avoid_: Open administrator enrollment, unbound administrator invitation
|
|
|
|
**Platform Session**:
|
|
A revocable authentication session bound only to a Platform Identity and its active Platform Administrator authority; it carries no Organization membership or Project authority.
|
|
_Avoid_: Organization admin session, customer session
|
|
|
|
**Platform Audit Entry**:
|
|
An immutable, durable record of a platform control-plane decision or action, separate from customer Project and Agent Run audit and mandatory for every platform mutation. Organization Administrators receive only a redacted projection of entries affecting their Organization.
|
|
_Avoid_: Best-effort log, Project audit entry
|
|
|
|
**Emergency Platform Grant**:
|
|
Short-lived Platform Administrator authority issued only by the offline recovery procedure for a declared incident and automatically expired afterward.
|
|
_Avoid_: Standing break-glass account, permanent emergency administrator
|
|
|
|
**Provider Credential Mode**:
|
|
The Organization's choice between a BYOK Provider Connection and a Platform-managed Provider Connection.
|
|
_Avoid_: Global provider setting
|
|
|
|
**BYOK Provider Connection**:
|
|
An Organization-scoped model-provider connection whose key and base URL are supplied and managed by an Organization Administrator.
|
|
_Avoid_: Platform key
|
|
|
|
**Platform-managed Provider Connection**:
|
|
An Organization-scoped model-provider connection whose distinct key and base URL are supplied and managed by a Platform Administrator for that Organization.
|
|
_Avoid_: Shared platform key, BYOK
|
|
|
|
**Platform Capacity Ceiling**:
|
|
A non-overridable upper bound imposed by the platform to protect shared service capacity.
|
|
_Avoid_: Organization quota
|
|
|
|
**Organization Policy Limit**:
|
|
An optional lower bound configured by an Organization Administrator to govern that Organization's own usage.
|
|
_Avoid_: Platform limit
|
|
|
|
**Effective Limit**:
|
|
The lower of the Platform Capacity Ceiling and the Organization Policy Limit; when no Organization Policy Limit exists, the Platform Capacity Ceiling applies.
|
|
_Avoid_: Unlimited default
|
|
|
|
**Organization-fair Scheduling**:
|
|
The policy that allocates available agent execution capacity fairly across Organizations, while preserving first-in-first-out order within each Organization.
|
|
_Avoid_: Global FIFO
|
|
|
|
**Agent Admission Queue**:
|
|
The durable, bounded set of accepted agent run requests waiting for execution capacity.
|
|
_Avoid_: In-memory trigger queue, unlimited backlog
|
|
|
|
**Expired Run Request**:
|
|
An accepted agent run request that reached its maximum queue wait before execution; it is terminal and will never execute automatically.
|
|
_Avoid_: Delayed request, automatic retry
|
|
|
|
**Run Request Initiator**:
|
|
The Organization member whose action created an agent run request.
|
|
_Avoid_: Queue owner, Project owner
|
|
|
|
**Explicit Run Retry**:
|
|
A new agent run request deliberately created after an earlier run failed or timed out.
|
|
_Avoid_: Automatic replay, implicit rerun
|
|
|
|
**Run Budget**:
|
|
The deterministic resource boundary for one agent run, independent of monetary or token usage alerts.
|
|
_Avoid_: Cost budget, unlimited run
|
|
|
|
**Emergency Workload Brake**:
|
|
An audited Platform Administrator control that prevents new agent work for one Organization or the whole platform and may explicitly stop active work during an incident.
|
|
_Avoid_: Organization deletion, service restart
|