About this demonstration

What this application is

Tarnbrook Agent Control is a reference enterprise control plane powered by Raidiam Connect. It stands in for a catalogue or workflow the enterprise already runs: the system where an enterprise approves software for deployment, governs the identities it gives that software, and watches what is running.

It is written and operated by Raidiam for this showcase. Tarnbrook Financial Group, Quillon Software, Larkspur Partners and Aldercross are not real businesses. The agents, the releases and the identities are a working estate built to be observable, not a customer's data.

Raidiam Connect is the product. This application is what a customer's side of it looks like, and it exists so that what Connect does can be watched from outside it.

Reading the screens

Every runtime component on this estate that Raidiam does not sell carries a label. Only a Raidiam product is filled in the product colour, and painting a customer's system in it would say Raidiam sells that system.

• Raidiam product Raidiam product.
• Customer side Customer side, stands in for a system the enterprise already runs.
• Reference implementation Reference implementation, built to demonstrate integration.
• Open standard Open standard, an external protocol or mechanism.
• Third party Third party, software nobody at Raidiam wrote, operated here by Raidiam: SPIRE, or an operating system key store.

What a colour means

Green means a source was asked and the answer was checked. Nothing on these screens is green because a declaration said so; where a value is declared and nobody read it, the interface says Declared and stays grey.

Unknown is not Withdrawn. Withdrawn means a source answered and is deliberately publishing nothing. Unknown means the source did not answer, or answered with something that could not be checked. A read that failed is not a decision anybody took, and no screen here prints one as the other.

A figure that reads "Not read" is a figure nobody has taken. It is not a zero, because a zero says somebody looked and found none.

What is a decision and what is only a listing

Five objects, and conflating any two of them is the commonest mistake made about this system:

Catalogue entry

Software that could become an agent. A listing. It confers nothing.

Governed identity

The recognised agent and its authority. It exists because somebody decided it does.

Running instance

One execution of that agent. Stopping one leaves the identity alone.

Trust evidence

Why Tarnbrook should accept it now. Read live, or not read.

Access decision

What a platform lets it do, which is narrower than what was requested.

What writes, and what does not

The operator credential is configured on this deployment. A control that writes is enabled only for a request that presents it, and every write is read back.

Reading is open on every screen. No screen here needs a credential to be read.