19 of 19
| Term | Meaning |
|---|---|
| Artifact | Ed25519-signed consent/authorisation object issued by /sign, validated by; short-lived (60 s clamp per Part B) |
| Execution invariant token / guard | HMAC token binding an execution to, and, checked by before provider dispatch (Part C) |
| Consent | Tenant-scoped grant record with lifecycle states; expiry is evaluated at lookup (Part D) |
| Policy | Tenant rule set evaluated by; types include DLP, CONTENT_RULE, BUDGET, ROUTING, DATA_RETENTION and others (Part D) |
| Anchor | Reference attack/intent sentence whose embedding similarity feeds the semantic score (76 loaded, Part E) |
| Head / V9 / V5 / FT-2 / FT-3 | The ensemble gates of the semantic classifier: ensemble head, two union gates, and two fine-tuned encoders (FT-3 on, FT-2 off by default) (Part E) |
| Check-then-release | Streaming enforcement: output is released to the client only after the pending text is checked (Part C) |
| Audit chain | Hash-chained audit log with sequence, head, signed checkpoints, optional witness and external anchors (Part F) |
| Mirror | Secondary store/count reconciliation for the audit chain (Parts F, G) |
| Transparency log | Merkle-tree append-only log with signed tree heads and proofs (Part F) |
| Evidence package / bundle | Exported, sealed set of evidence records (Part F) |
| DSR | Data-subject request (access/erasure) handling (Part F) |
| Definer functions | PostgreSQL SECURITY DEFINER functions owned by qodiqa_definer, used for privileged operations under RLS (Part G) |
| RLS | PostgreSQL row-level security used for tenant isolation (Part G) |
| Control plane | Registry of tenant/provider/agent records, memory or PG-backed (QODIQA_CONTROL_PLANE_BACKEND) (Parts D, G) |
| MCP gateway | HTTP(S)-only Model Context Protocol server client with TLS pinning and SSRF guard (Part C) |
| Kill registry / circuit breaker | Per-process abort and failure-isolation structures for provider calls (Part C) |
| Disposable pair | Check PostgreSQL (:55510) and Redis (:56510) containers used by gates instead of the live 5432/6379 (Parts J, K) |
| Label A–E | Verification labels defined in Section 1 |