Inside the API Backend

One authority boundary joins member requests, retrieval, agent callbacks, policy, and durable state

Inside the API Backend One authority boundary joins member requests, retrieval, agent callbacks, policy, and durable state Member API · authenticated routes · Architecture component Member API authenticated routes Principal Resolver · forwarded envelope · TRUSTED API BACKEND Principal Resolver forwarded envelope Search Service · ranked projections · TRUSTED API BACKEND Search Service ranked projections Agent Bridge · runtime callbacks · TRUSTED API BACKEND Agent Bridge runtime callbacks Guardrails + Policy · ACL, budgets, approval · TRUSTED API BACKEND · shared chokepoint Guardrails + Policy ACL, budgets, approval shared chokepoint Model Gateway · route + normalize · TRUSTED API BACKEND Model Gateway route + normalize Retrieval · authorized query · TRUSTED API BACKEND Retrieval authorized query Tool Registry · typed execution · TRUSTED API BACKEND Tool Registry typed execution Journal + Audit · durable evidence · TRUSTED API BACKEND Journal + Audit durable evidence PostgreSQL · system of record · Architecture component PostgreSQL system of record identity search chat turn current authority query intent effect intent admitted model call authorized scope bounded tool call record outcome commit TRUSTED API BACKEND Legend Frontend Backend Database Cloud Security

Two Entry Paths

  • • Search returns ranked source projections
  • • Chat enters the agent bridge
  • • Both reuse the same retrieval and authority rules

One Policy Chokepoint

  • • Current identity and permissions are rechecked
  • • Budgets, approvals, and capability ceilings apply
  • • No runtime or tool bypass exists

Durable Truth

  • • PostgreSQL owns conversations, indexes, definitions, and audit
  • • Journal projection drives reconnect and recovery