01
Protected entry
Identity gateway
AVC Platform
The organization-scoped entry point for approved AVC workspaces, evidence, products, and operator applications.
AVC Ecosystem / Platform
One governed system. Several bounded surfaces.
Company Kernel identity
Governed autonomy across every surface.
AVC separates public proof, operator control, protocol gateways and autonomous execution so no interface quietly becomes the authority layer.
02
Operator surface
Company control plane
Mission Control
Goals, jobs, evidence, approvals, incidents, models, cost, and recovery in one human control surface. The current Tauri application is not automatically a public web app.
03
Protocol gateway
MCP application
ServiceOps
A governed ServiceOps MCP gateway for bounded operational proposals, OAuth scopes, tenant context, audit evidence, and recoverable execution.
04
Public proof
Open architecture
Repository & evidence
Inspect implementation status, architecture, governance, security boundaries, and release evidence without signing in.
Trust boundary
Authentication is not authorization.
-
Access
Cloudflare Access authenticates
The upstream identity provider proves which human or service is present.
-
Identity
AVC resolves organizational context
Principal, organization, membership, role, and session are validated.
-
Kernel
Capabilities authorize work
Policy, risk, budget, approval, and evidence gates remain authoritative.
Deployment boundary
Launch links appear only when explicit HTTPS application URLs are configured during the Cloudflare Pages build. Missing configuration remains visibly unavailable.