Every inbound connector is read-only and scoped to catalog and log views. The platform never holds write credentials to a source.
Outbound writes are limited to tags, labels and tickets. The platform tells other systems what is true; it never changes their data.
Standard formats where they exist: OpenLineage for run lineage, the source's own metadata API otherwise. No proprietary agent on a database host.
The anti-silo test
Anything the catalog knows is retrievable through GraphQL, exportable in bulk, and emitted as an event. If a team can only get an answer by opening the UI, the integration is incomplete.
Enterprise search indexes asset profiles, so discovery does not require knowing the catalog exists.
Risks
Source API rate limits are the binding constraint on harvest freshness, not platform throughput (view 22).
Bidirectional quality integration means a change in the DQ platform's result schema breaks ingestion. Contract tests against golden payloads are in the pipeline (view 17).
