Connector catalog

Connector truth begins with the permissions and versions it can preserve.

Every entry declares status, object coverage, access behavior, ACL fidelity, identity mapping, freshness, deletion, residency, limitations, and certification.

Build a conforming connector Read the fidelity model

System of record

Oracle ERP reference

Demonstration

Objects: Vendor master, payment instruction, change event
Read/write: Read-only reference adapter
ACL model: Role and field mapping simulated
Identity mapping: Stable user and service-account IDs
Change detection: Polling + change-event contract
Version + freshness: Record version + observed timestamp
Deletion: Tombstone semantics defined
Residency: No production processing
Known limitation: Not a production connector
Certification: Uncertified

Content system

Microsoft 365

Planned

Objects: Files, sites, messages, ACL metadata
Read/write: Read-only planned
ACL model: Nested groups, links, labels require parity tests
Identity mapping: Entra ID mapping planned
Change detection: Graph change notifications planned
Version + freshness: Provider-dependent
Deletion: Revocation, tombstone, and proof-only states
Residency: Customer policy dependent
Known limitation: No current availability claim
Certification: Not tested

Identity

Okta

Planned

Objects: Users, groups, applications, lifecycle state
Read/write: Read-only planned
ACL model: Identity source, not content authorization
Identity mapping: Native identifiers + SCIM mapping
Change detection: Event hook + bounded polling
Version + freshness: Event and profile timestamps
Deletion: Deactivation retained as versioned event
Residency: Customer policy dependent
Known limitation: Revocation SLO not measured
Certification: Not tested

Operational workflow

ServiceNow

Planned

Objects: Requests, changes, approvals, incidents, CMDB references
Read/write: Read-only planned
ACL model: Role, table, row, and domain separation
Identity mapping: Source user to principal mapping
Change detection: Webhook + incremental query
Version + freshness: Record update sequence
Deletion: Source deletion and retention policy
Residency: Customer policy dependent
Known limitation: Complex ACL parity not demonstrated
Certification: Not tested

Decision control

DecisionHypervisor adapter

Reference integration

Objects: Bundle references, Decision Objects, execution outcomes
Read/write: Bundle-reference handoff
ACL model: No evidence widening across boundary
Identity mapping: Signed workload identity
Change detection: Signed decision and outcome events
Version + freshness: Artifact digest + schema version
Deletion: Evidence retention remains in ECG policy
Residency: Deployment dependent
Known limitation: Architecture contract, not production claim
Certification: Reference only