# Curriculum Project Hub

The shared language for the multi-tenant service that lets customer organizations manage curriculum projects and operate agents through their own Feishu connection.

## Language

**Organization**:
The customer tenant root that owns its memberships, projects, teams, external connections, and settings.
_Avoid_: Account, workspace

**Platform Administrator**:
An internal operator who creates and operates Organizations without becoming a member of them.
_Avoid_: Organization admin, super member

**Organization Administrator**:
An Organization OWNER or ADMIN who manages only that Organization's members, projects, connections, and settings.
_Avoid_: Platform admin

**Admin Surface**:
The private web control plane available only to an authenticated user with the corresponding Platform Administrator or Organization Administrator authority.
_Avoid_: Public management page, member portal

**Customer-owned Feishu Application**:
The Organization-scoped Feishu application used for that Organization's login, bot messages, and directory integration; unrelated Organizations never share it.
_Avoid_: Global Feishu app, platform bot

**Platform-owned Feishu Application**:
The dedicated Feishu application used only to authenticate Platform Administrators; it is separate from every Customer-owned Feishu Application and grants no Organization or Project authority.
_Avoid_: Customer-owned Feishu Application, Organization Feishu app

**Platform Administrator Bootstrap**:
The one-time, guarded grant of Platform Administrator authority to a verified Platform Identity when no active Platform Administrator exists.
_Avoid_: Seed administrator, standing bootstrap account

**Platform Administrator Invitation**:
A short-lived, single-use invitation issued by a Platform Administrator and bound to one expected identity from the Platform-owned Feishu Application.
_Avoid_: Open administrator enrollment, unbound administrator invitation

**Platform Session**:
A revocable authentication session bound only to a Platform Identity and its active Platform Administrator authority; it carries no Organization membership or Project authority.
_Avoid_: Organization admin session, customer session

**Platform Audit Entry**:
An immutable, durable record of a platform control-plane decision or action, separate from customer Project and Agent Run audit and mandatory for every platform mutation. Organization Administrators receive only a redacted projection of entries affecting their Organization.
_Avoid_: Best-effort log, Project audit entry

**Emergency Platform Grant**:
Short-lived Platform Administrator authority issued only by the offline recovery procedure for a declared incident and automatically expired afterward.
_Avoid_: Standing break-glass account, permanent emergency administrator

**Provider Credential Mode**:
The Organization's choice between a BYOK Provider Connection and a Platform-managed Provider Connection.
_Avoid_: Global provider setting

**BYOK Provider Connection**:
An Organization-scoped model-provider connection whose key and base URL are supplied and managed by an Organization Administrator.
_Avoid_: Platform key

**Platform-managed Provider Connection**:
An Organization-scoped model-provider connection whose distinct key and base URL are supplied and managed by a Platform Administrator for that Organization.
_Avoid_: Shared platform key, BYOK

**Platform Capacity Ceiling**:
A non-overridable upper bound imposed by the platform to protect shared service capacity.
_Avoid_: Organization quota

**Organization Policy Limit**:
An optional lower bound configured by an Organization Administrator to govern that Organization's own usage.
_Avoid_: Platform limit

**Effective Limit**:
The lower of the Platform Capacity Ceiling and the Organization Policy Limit; when no Organization Policy Limit exists, the Platform Capacity Ceiling applies.
_Avoid_: Unlimited default

**Organization-fair Scheduling**:
The policy that allocates available agent execution capacity fairly across Organizations, while preserving first-in-first-out order within each Organization.
_Avoid_: Global FIFO

**Agent Admission Queue**:
The durable, bounded set of accepted agent run requests waiting for execution capacity.
_Avoid_: In-memory trigger queue, unlimited backlog

**Expired Run Request**:
An accepted agent run request that reached its maximum queue wait before execution; it is terminal and will never execute automatically.
_Avoid_: Delayed request, automatic retry

**Run Request Initiator**:
The Organization member whose action created an agent run request.
_Avoid_: Queue owner, Project owner

**Explicit Run Retry**:
A new agent run request deliberately created after an earlier run failed or timed out.
_Avoid_: Automatic replay, implicit rerun

**Run Budget**:
The deterministic resource boundary for one agent run, independent of monetary or token usage alerts.
_Avoid_: Cost budget, unlimited run

**Emergency Workload Brake**:
An audited Platform Administrator control that prevents new agent work for one Organization or the whole platform and may explicitly stop active work during an incident.
_Avoid_: Organization deletion, service restart