A Value, a Claim, a Decision

A Value, a Claim, a Decision A data-flow diagram generated by Archify. 01 / What you hold 02 / What you can prove 03 / What you may do .env file · before Keyspout: a value · 01 / What you hold · not Keyspout .env file before Keyspout: a value not Keyspout No claim · before Keyspout: no check · 02 / What you can prove · not Keyspout No claim before Keyspout: no check not Keyspout Account-wide · before Keyspout: runner · 03 / What you may do · not Keyspout Account-wide before Keyspout: runner not Keyspout Shared encrypted secret · with Keyspout: sealed · 01 / What you hold · Keyspout Shared encrypted secret with Keyspout: sealed Keyspout Signed claim · with Keyspout: this agent · 02 / What you can prove · Keyspout Signed claim with Keyspout: this agent Keyspout One record · with Keyspout: one task only · 03 / What you may do · Keyspout One record with Keyspout: one task only Keyspout a value, no claim value only so access is account-wide unowned permission agent signs with its private key identity so policy can name the agent authorization Legend primary data policy / PII data flow