Skip to content

Enterprise Control Plane

The Enterprise Control Plane consists of an authenticated app-ui and an independently authenticated app-api. Cloudflare Access protects the hosted UI; the backend still verifies every operational request itself.

api.engineeringruntime.com is only a static, read-only OpenAPI reference. It has no live backend, authorization action, Try/Execute feature, or dependency on Cloud Run. The app-api deployment URL is company/deployment configuration and is not published in public documentation.

Current bounded surface

  • administrator login produces a one-hour app session JWT;
  • platform administrators publish independent immutable policy and configuration versions;
  • each publish creates a signed atomic combined generation;
  • administrators create a show-once Portal key for each Runtime, inspect its binding/state, replace it, or revoke it;
  • registered Runtime installations appear in Fleet through authenticated heartbeat;
  • providers come from the selected released Runtime specification;
  • capabilities come from the deployment's pinned company registry;
  • the hosted Audit view contains clearly labeled sanitized examples only.

Runtime Portal keys are stored by app-api as peppered verifiers, not plaintext. They authenticate only registration, heartbeat and governance sync. They never deliver audit data. The Ed25519 policy/config signing private key is a separate deployment secret; Runtime pins only its public key during registration.

The low-cost demo uses ephemeral SQLite and maximum one app-api instance. A container replacement loses portal users, Runtime registrations, key verifiers and published records. This is disclosed demo behavior, not durable Enterprise storage. Customer production deployments require an agreed durable store.

SSO, RBAC, signing-key rotation, rollout cohorts, durable SaaS audit storage and an OpenTelemetry query integration are later Control Plane work.

Operational examples on this site were verified against Runtime 0.9.8. After bootstrap, the version-exact files in Runtime Home win.