Container Registry and Software Supply Chain Platform · View 04 of 33 · 2 · Structure
The layering rule
- Dependencies point downward only; the evidence plane never calls the enforcement plane
- Evidence reaches the edge by subscription to Kafka, so the arrow points down to the data layer, not up to the consumer
- Intelligence sits above evidence because it reads the evidence API; it is a client, not a peer
Deliberately omitted
- Replica counts and technology versions — see the container view
- Every interface — see the integration catalogue
Risk
- The platform layer is a shared dependency for all seven layers above it; a Keycloak outage degrades push but not verification
- Verification depends on trust roots, not on the key service — that is deliberate, and it is what keeps act 6's key-service failure survivable
