TARNBROOKFINANCIAL GROUP
Connect: not read

Request sample-refused

Two decisions, in order, taken by two different owners. The catalogue decides whether the software should exist. Only then is it issued an identity in Raidiam Connect, and Connect refuses any role the organisation does not hold and publishes what was granted.

Customer side Decision one, taken here, by the catalogue

refused A refusal here is the catalogue exercising its own control. Nothing crossed the boundary and Connect was never asked.

  • software.catalogue_id: the identifier is lower case letters, digits and hyphens, 2 to 64 characters
  • software.version: a semantic version
  • software.purpose: a purpose of 20 to 400 characters
  • software.release_record: an https URL of the signed release record
  • software.digest: the artefact digest as sha256 and 64 hex characters

The handover

The registration record as handed over. Everything under requested_envelope is a request. Raw JSON

{
  "request": {
    "id": "sample-refused",
    "submitted_by": "Tarnbrook Financial Group change desk",
    "submitted_at": "2026-09-09T09:00:00Z",
    "change_reference": "CHG-0001"
  },
  "software": {
    "catalogue_id": "Bad Id",
    "name": "Records Assistant",
    "version": "latest",
    "purpose": "too short",
    "release_record": "http://insecure.example/record",
    "digest": "not-a-digest"
  },
  "ownership": {
    "organisation": "TARNBROOK-GROUP",
    "unit": "Tarnbrook Financial Group",
    "accountable_owner": "Tarnbrook Financial Group, accountable owner on the registration request"
  },
  "runtime": {
    "platform": "workforce",
    "hosting": "hosted",
    "attester": ""
  },
  "requested_envelope": {
    "roles": [
      "tarnbrook.agent.member",
      "tarnbrook.auth.assertion",
      "tarnbrook.records.reader",
      "tarnbrook.transfer.initiator",
      "aldercross.accredited.agent"
    ]
  },
  "evidence": {
    "repository": "https://source.agents.showcase.raidiam.io/records-assistant",
    "sbom": "https://catalogue.agents.showcase.raidiam.io/sbom/records-assistant-1.4.0.spdx.json"
  }
}

Raidiam product Decision two, taken by Raidiam Connect

Not reached: the catalogue refused the request first.