Tejus Rachakonda
9acd84b910
Plain-terms companion to integration-architecture.md: Automation Hub as the internal action warehouse, Tool Hub as the smart front desk (progressive disclosure + per-user permission filtering + audit) running as a central service, and where the MCP Gateway (Arcade, per-user OAuth for outside tools) and AI Gateway (config-only model toll booth) plug into existing seams. Source-verified against servicetitan/tool-hub + automation-hub @ master.
2.4 KiB
2.4 KiB
STATUS — "you are here" handoff
Each lane owns its own section. Update yours; don't touch others'. Keep it terse. Last full-repo update: 2026-06-18 (scaffold).
Category 1 — Functional MCP Gateway Capability
- Owner: ztaylor
- Status: in progress (scaffold done; executing per
~/repos/docs/arcade-eval-plan.md) - Last live-state check: —
- Notes: cat-1 lane = this session. Per-user tests via
user_idheaders (real Entra SSO → cat 2).
Category 2 — Delegated Authorization and Identity
- Owner: — (security cluster: Dane / Chandu)
- Status: not started (criteria stub seeded)
- Notes: holds the Entra/Okta SSO login → identity-mapping test (a teammate can be User B).
Category 3 — Tool-Level Access Control and Policy
- Owner: trachakonda
- Status: in progress — B1 (curr-state) + B5 (enforcement/bypass) DONE; B2/B3/B4 + per-user B1 pending dashboard + Contextual Access.
- Last live-state check: 2026-06-18 (apps/arcade #2383 steady; dashboard 200). Noted: otel-collector + jaeger now deployed (cat-5) → trace store for B6.
- Notes: Engine is the enforcement point (ungranted tool rejected there); one gateway = gateway-wide tool list (A==B), not per-user. Bypass: public-isolated for in-cluster worker (ClusterIP); tunnel custom servers = documented boundary. Blocked on dashboard for Contextual Access (input-block/output-redact) + per-user grants.
Category 4 — Connector Coverage and Custom Server Development
- Owner: — (adopt/operate cluster)
- Status: not started (criteria stub seeded)
Category 5 — Auditability and Observability
- Owner: ztaylor
- Status: not started (criteria stub seeded)
- Notes: metrics → Grafana/Mimir (NOT ELK); engine OTLP currently dropped (no collector). See LIVE-POC.
Category 6 — Security and Compliance
- Owner: — (security cluster)
- Status: not started (criteria stub seeded)
Category 7 — Performance and Availability
- Owner: — (platform cluster: Nawaz / SRE)
- Status: not started (criteria stub seeded)
Category 8 — Deployment and Operations
- Owner: — (platform cluster)
- Status: not started (criteria stub seeded)
Category 9 — Developer Experience
- Owner: ztaylor
- Status: not started (criteria stub seeded)
- Notes: stdio loop + Cloudflare-tunnel registration; shared
lib/mcp_serveris the fixture.
Category 10 — Product Fit — Tools Catalog and Multi-Tenancy
- Owner: — (adopt/operate cluster)
- Status: not started (criteria stub seeded)