Rhythm 2.0 Specifications

Appearance

SVC-PFM-INT-extensionsCustomization registry and configuration service

Markdown

SVC-PFM-INT-extensions

Customization registry and configuration service

Markdown
  • DocumentDraft
  • ImplementationPartially observed

KindService contractProduct areaPlatformModuleIntegration access, customer extensions and shared workflow configurationRevision1

Read atservices-platform ad3f6a65react-console baf6dae3

Customization registry and configuration service ​

What the Service Owns ​

This service keeps customization declarations, reusable handlers and scoped bindings. Hosts resolve and invoke those bindings through the shared library; their invocation-writer role permits recording outcomes without transferring ownership of business records.

Operations ​

The operation rows define the callable boundary, its access class, exact permission declarations and planning coverage. Configuration and operational administration are not published as intake captures. Public health and provider callbacks retain their declared access boundaries.

Consistency and Failure ​

An application’s registry replacement and the resulting binding orphaning either commit together or leave the prior declaration intact. Refused registrations retain the earlier registry.

Handler and binding database mutations include their security audit writes; external secret calls cannot be rolled back with those writes. A successful secret mutation can outlive a failed database commit. Deletion requests allow seven days of recovery.

Hosts observe a configuration edit when they next resolve the point. No background correction is provided.

Events and Jobs ​

The declarations distinguish application events, incoming requests, queue work and direct host reads. These are different transport boundaries; registering a declaration does not by itself publish an application event.

Open Questions ​

Secret storage is outside database rollback. The console contracts describe mock previews, and actual handler testing remains less complete than production invocation. No scoped operation calls a language model.

Owns
DOM-PFM-INT-005
Repository
services-platform

Controls

49 controls apply, from the corpus control catalogue.

TC-AVL-001 TC-AVL-004 TC-AVL-005 TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-CHG-001 TC-CHG-002 TC-CHG-003 TC-CHG-004 TC-CHG-005 TC-CHG-006 TC-CRY-001 TC-CRY-002 TC-CRY-003 TC-CRY-004 TC-DAT-001 TC-DAT-002 TC-DAT-003 TC-DAT-004 TC-DAT-006 TC-IAM-001 TC-IAM-002 TC-IAM-004 TC-IAM-005 TC-IAM-006 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-MON-001 TC-PI-001 TC-PI-002 TC-PI-003 TC-PI-004 TC-PI-005 TC-SEC-001 TC-SEC-002 TC-SEC-003 TC-SEC-004 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-TEN-004 TC-VEN-001 TC-VEN-002 TC-VEN-003

Does Not Own

  • Host applications define the business meaning of points, resolve handlers and write invocation outcomes through restricted roles.
  • The query service supplies read-only record facts for rule evaluation.
  • Security controls grants and owns security audit storage.
  • The integrations service delivers external business-event subscriptions.

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software