HOW EVERY REQUEST IS GOVERNED · MAPS TO OAGL
Identity & Policy.
Every request that reaches the Gateway carries an identity, and every identity is evaluated against active policy before anything executes. This isn't middleware bolted in front of the platform — it's the layer every other engineering surface is built on top of.
Back to Engineering → Gateway & Verbs →
Identity, for Humans and Agents Alike.
Human identity. Standard authentication, tied to role- and attribute-based access — nothing unusual here, but nothing skips it either.
Non-human identity. Every agent, service, and integration has its own verified identity, distinct from any human user or shared service account. An agent's identity persists across every action it takes, so provenance never traces back to "the system" — it traces back to the specific agent, every time.
Tenant identity. In multi-tenant deployments, every identity is bound to a tenant boundary. Nothing crosses that boundary implicitly.
Policy, Evaluated in Real Time.
Policy at NexGenomics isn't a document translated into access-control lists by hand. It's written as code, versioned, and evaluated live against every request — access requests, verb invocations, and data reads alike.
Policy-as-code. Rules are executable, not descriptive. There's no gap between what the policy says and what the system actually enforces, because they're the same artifact.
Evaluated per request, not cached. A policy change takes effect on the next request, not on the next deployment cycle.
Every decision logged. Every policy evaluation — allow or deny — is recorded, whether or not the request ultimately executed. Denied requests are evidence too.
Why This Layer Comes First.
Data structuring and agent execution both depend on identity and policy being correct before anything else happens. That's why, architecturally, this is the layer everything else in the Fabric sits on — not a compliance concern addressed after the interesting engineering work is done, but the foundation the interesting engineering work depends on.
See the Full Governance Model → Back to Engineering →
Governed to Go.
Stop rebuilding trust. Start building value.