JSON document
manifest.json
Every service on this estate, including the hosts that stand in for a third party, is deployed and operated by Raidiam for this showcase from one deployment manifest.
The claim that cites this artefact, in the estate's own words.
01 What it proves The claims that rest on this file.
02 Resolved The artefact read as fields.
03 Signed Not carried by this artefact.
04 Raw and source The bytes, and where to fetch them.
- One operator for the whole estate keys.operated-by-raidiam Deployment evidence
- Where it lives
- deploy/manifest.json
- Read on
- No read date recorded against it
The top level of this file, parsed as it was served. Every field of every entry is in layer 04.
- generatedBy
- tools/deploy/manifest.mjs
- pendingSharedVars
- no entries
apex
- host
- agents.showcase.raidiam.io
- note
- The site is served at the www host and the apex redirects to … 255 characters, whole value in layer 04
- redirectTo
- www.agents.showcase.raidiam.io
- service
- null
- wwwHost
- www.agents.showcase.raidiam.io
clips
- bucket
- 576735710880-agents-showcase-films
- distribution
- E3D0QXMUG1K57P
- edge
- https://d21mpkepepycqb.cloudfront.net
environments
- preview
- domain, id, zone
- production
- domain, id, zone
infrastructure, 1 entry
- workloads
- workloads.agents.showcase.raidiam.io · third-party
project
- id
- ba509b06-48e3-4381-afc7-1981ebcd5f70
- name
- agent-trust-showcase
services, 16 entries
- site
- www.agents.showcase.raidiam.io · reference-implementation
- catalogue
- catalogue.agents.showcase.raidiam.io · customer-side
- agent
- agent.agents.showcase.raidiam.io · customer-side
- attester
- attest.agents.showcase.raidiam.io · reference-implementation
- platform-workforce
- workforce.agents.showcase.raidiam.io · reference-implementation
- platform-api
- api.agents.showcase.raidiam.io · reference-implementation
- records
- records.agents.showcase.raidiam.io · reference-implementation
- transfers
- transfers.agents.showcase.raidiam.io · reference-implementation
- portfolios
- portfolios.agents.showcase.raidiam.io · reference-implementation
- commercial-uk
- commercial-uk.agents.showcase.raidiam.io · customer-side
- private-ch
- private-ch.agents.showcase.raidiam.io · customer-side
- platform-edge
- platform-edge.agents.showcase.raidiam.io · reference-implementation
- quillon
- quillon-production-ff3b.up.railway.app · reference-implementation
- larkspur
- larkspur-production.up.railway.app · reference-implementation
- aldercross-officer
- aldercross-officer-production.up.railway.app · reference-implementation
- signals
- signals.agents.showcase.raidiam.io · reference-implementation
sharedVars
- SHOWCASE_ANCHOR_JWKS
- {"keys":[{"alg":"PS256","e":"AQAB","kid":"mrk-55aab6b0491344 … 443 characters, whole value in layer 04
- SHOWCASE_AUTHORITY
- https://authority.directory.showcase.raidiam.io/authority/845f7286-3c74-4d91-9354-af110dbd33c8
- SHOWCASE_DIR_API
- https://matls-api.directory.showcase.raidiam.io
- SHOWCASE_DIR_ISSUER
- https://auth.directory.showcase.raidiam.io
- SHOWCASE_DIR_MTLS_TOKEN
- https://matls-auth.directory.showcase.raidiam.io/token
- SHOWCASE_DIR_UI
- https://web.directory.showcase.raidiam.io
- SHOWCASE_DOMAIN
- agents.showcase.raidiam.io
- SHOWCASE_SCHEME_ANCHOR
- https://federation.directory.showcase.raidiam.io/federation_entity/bad6e107-c3e4-4631-a0f4-82ffe061a2e7
- SHOWCASE_SCHEME_AUTHORITY
- https://authority.directory.showcase.raidiam.io/authority/2ec610f4-6e58-46c3-b833-05c4ab1cabe2
- SHOWCASE_TRUSTMARK_HOST
- https://trustmark.directory.showcase.raidiam.io
- SHOWCASE_TRUST_ANCHOR
- https://federation.directory.showcase.raidiam.io/federation_entity/7b60c9fa-00dd-46d9-80de-cd899ee5a58d
sources, 2 entries
- entry 1
- packages/estate/src/world.ts
- entry 2
- tools/deploy/targets.json
This artefact is a file in the repository this site is built from, not a signed token, so it carries no algorithm and no key id of its own. What stands behind it is the commit it was published in and the deployment that serves it. A signed artefact drawn by this viewer fills this layer.
The file as this site holds it, byte for byte.
{
"apex": {
"host": "agents.showcase.raidiam.io",
"note": "The site is served at the www host and the apex redirects to it, because Route 53 cannot alias a name to a host outside AWS. No Railway service is attached to the apex; the redirect is written in the zone by domains.mjs, which refuses a CNAME at the apex.",
"redirectTo": "www.agents.showcase.raidiam.io",
"service": null,
"wwwHost": "www.agents.showcase.raidiam.io"
},
"clips": {
"bucket": "576735710880-agents-showcase-films",
"distribution": "E3D0QXMUG1K57P",
"edge": "https://d21mpkepepycqb.cloudfront.net"
},
"environments": {
"preview": {
"domain": "preview.agents.showcase.raidiam.io",
"id": null,
"zone": {
"awsProfile": "raidiam-showcase-admin",
"id": "Z09501881ZI4D7W1ZC8XS",
"name": "agents.showcase.raidiam.io"
}
},
"production": {
"domain": "agents.showcase.raidiam.io",
"id": "bbb2dc8c-051a-45aa-9944-1c0a162c52a4",
"zone": {
"awsProfile": "raidiam-showcase-admin",
"id": "Z09501881ZI4D7W1ZC8XS",
"name": "agents.showcase.raidiam.io"
}
}
},
"generatedBy": "tools/deploy/manifest.mjs",
"infrastructure": [
{
"fqdn": "workloads.agents.showcase.raidiam.io",
"id": "workloads",
"note": "The SPIRE trust domain root: bundle endpoint and attested node list. The SPIRE server host is infrastructure under the same zone and is not an entity.",
"treatment": "third-party"
}
],
"pendingSharedVars": [],
"project": {
"id": "ba509b06-48e3-4381-afc7-1981ebcd5f70",
"name": "agent-trust-showcase"
},
"services": [
{
"apexRedirect": true,
"app": "apps/site",
"boot": "starts",
"build": null,
"entry": "apps/site/src/index.ts",
"fqdn": "www.agents.showcase.raidiam.io",
"host": {
"label": "www"
},
"name": "site",
"note": "Reads the showcase tenant of Raidiam Connect.",
"pendingVars": [],
"secrets": [
"SHOWCASE_AUDIT_READ_CLIENT_ID",
"SHOWCASE_AUDIT_READ_KEY_PEM"
],
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/site/src/index.ts",
"SERVICE_ORIGIN": "https://www.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation",
"SITE_BASE": "https://www.${domain}"
},
"volume": null
},
{
"apexRedirect": false,
"app": "apps/catalogue",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/catalogue/src/index.ts",
"fqdn": "catalogue.agents.showcase.raidiam.io",
"host": {
"label": "catalogue"
},
"name": "catalogue",
"pendingVars": [],
"secrets": [
"SHOWCASE_DIR_CLIENT_ID",
"SHOWCASE_DIR_SIGNING_KID",
"SHOWCASE_DIR_SIGNING_KEY_PEM",
"SHOWCASE_DIR_TRANSPORT_CERT_PEM",
"SHOWCASE_DIR_TRANSPORT_KEY_PEM",
"SHOWCASE_DIR_CA_PEM",
"SHOWCASE_DIR_SCOPE",
"SHOWCASE_DIR_OPERATOR_SUB",
"SHOWCASE_OPERATOR_TOKEN",
"ATTESTER_OPERATOR_TOKEN",
"AGENT_CATALOGUE_CREDENTIAL",
"CATALOGUE_RELEASE_KEY",
"CATALOGUE_LEAF_KEY"
],
"treatment": "customer-side",
"vars": {
"APP_ENTRY": "apps/catalogue/src/index.ts",
"SERVICE_ORIGIN": "https://catalogue.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "customer-side"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/agent",
"boot": "starts",
"build": null,
"entry": "apps/agent/src/index.ts",
"fqdn": "agent.agents.showcase.raidiam.io",
"host": {
"label": "agent"
},
"name": "agent",
"pendingVars": [],
"secrets": [
"AGENT_TRIGGER_SECRET",
"AGENT_CATALOGUE_CREDENTIAL"
],
"treatment": "customer-side",
"vars": {
"AGENT_TASKS": "read-records,initiate-transfer,initiate-held-transfer",
"APP_ENTRY": "apps/agent/src/index.ts",
"SERVICE_ORIGIN": "https://agent.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "customer-side"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/attester",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/attester/src/index.ts",
"fqdn": "attest.agents.showcase.raidiam.io",
"host": {
"label": "attest"
},
"name": "attester",
"pendingVars": [],
"secrets": [
"ATTESTER_KEY",
"ATTESTER_FED_KEY",
"ATTESTER_OPERATOR_TOKEN"
],
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/attester/src/index.ts",
"SERVICE_ORIGIN": "https://attest.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/reference-op",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/reference-op/src/index.ts",
"fqdn": "workforce.agents.showcase.raidiam.io",
"host": {
"label": "workforce"
},
"name": "platform-workforce",
"pendingVars": [],
"secrets": [
"OP_KEYS",
"WORKFORCE_FED_KEY",
"OP_ACCOUNTS_JSON"
],
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/reference-op/src/index.ts",
"OP_PLATFORM_ID": "workforce",
"SERVICE_ORIGIN": "https://workforce.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/reference-op",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/reference-op/src/index.ts",
"fqdn": "api.agents.showcase.raidiam.io",
"host": {
"label": "api"
},
"name": "platform-api",
"pendingVars": [],
"secrets": [
"OP_KEYS",
"API_FED_KEY",
"OP_SET_KEY",
"OP_ACCOUNTS_JSON"
],
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/reference-op/src/index.ts",
"OP_ANCHOR_PIN_DIR": "/app/packages/estate/pins",
"OP_PLATFORM_ID": "api",
"SERVICE_ORIGIN": "https://api.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/records",
"boot": "starts",
"build": null,
"entry": "apps/records/src/index.ts",
"fqdn": "records.agents.showcase.raidiam.io",
"host": {
"label": "records"
},
"name": "records",
"pendingVars": [],
"secrets": [
"RECORDS_FEDERATION_KEY",
"RECORDS_FEDERATION_KID"
],
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/records/src/index.ts",
"RECORDS_RESOURCE_ID": "records",
"SERVICE_ORIGIN": "https://records.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/transfers",
"boot": "starts",
"build": null,
"entry": "apps/transfers/src/index.ts",
"fqdn": "transfers.agents.showcase.raidiam.io",
"host": {
"label": "transfers"
},
"name": "transfers",
"pendingVars": [],
"secrets": [
"TRANSFERS_FEDERATION_KEY",
"TRANSFERS_FEDERATION_KID"
],
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/transfers/src/index.ts",
"SERVICE_ORIGIN": "https://transfers.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/records",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/records/src/index.ts",
"fqdn": "portfolios.agents.showcase.raidiam.io",
"host": {
"label": "portfolios"
},
"name": "portfolios",
"pendingVars": [],
"secrets": [
"PORTFOLIOS_FEDERATION_KEY",
"PORTFOLIOS_FEDERATION_KID"
],
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/records/src/index.ts",
"RECORDS_RESOURCE_ID": "portfolios",
"SERVICE_ORIGIN": "https://portfolios.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation"
}
},
{
"apexRedirect": false,
"app": "apps/external-directory",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/external-directory/src/index.ts",
"fqdn": "commercial-uk.agents.showcase.raidiam.io",
"host": {
"label": "commercial-uk"
},
"name": "commercial-uk",
"pendingVars": [],
"secrets": [
"COMMERCIAL_UK_ROOT_KEY",
"COMMERCIAL_UK_ROOT_KEY_KID",
"COMMERCIAL_UK_AGENT_KEY",
"COMMERCIAL_UK_AGENT_KEY_KID"
],
"standsInFor": "a division of the enterprise that runs its own federation intermediate",
"treatment": "customer-side",
"vars": {
"APP_ENTRY": "apps/external-directory/src/index.ts",
"PARTNER_KIND": "commercial-uk",
"SERVICE_ORIGIN": "https://commercial-uk.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "customer-side"
}
},
{
"apexRedirect": false,
"app": "apps/external-directory",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/external-directory/src/index.ts",
"fqdn": "private-ch.agents.showcase.raidiam.io",
"host": {
"label": "private-ch"
},
"name": "private-ch",
"pendingVars": [],
"secrets": [
"PRIVATE_CH_ROOT_KEY",
"PRIVATE_CH_ROOT_KEY_KID",
"PRIVATE_CH_AGENT_KEY",
"PRIVATE_CH_AGENT_KEY_KID"
],
"standsInFor": "a division of the enterprise that runs its own federation intermediate",
"treatment": "customer-side",
"vars": {
"APP_ENTRY": "apps/external-directory/src/index.ts",
"PARTNER_KIND": "private-ch",
"SERVICE_ORIGIN": "https://private-ch.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "customer-side"
}
},
{
"apexRedirect": false,
"app": null,
"boot": "refuses-without-secrets",
"build": {
"context": "services/platform-edge",
"dockerfile": "services/platform-edge/Dockerfile"
},
"entry": null,
"fqdn": "platform-edge.agents.showcase.raidiam.io",
"host": {
"label": "platform-edge"
},
"name": "platform-edge",
"pendingVars": [],
"secrets": [
"OIDFED_SIGNING_KEY",
"OIDFED_SIGNING_KID",
"OIDFED_TRUST_ANCHOR_JWKS"
],
"treatment": "reference-implementation",
"vars": {
"OIDFED_AUTHORITY_HINTS": "https://authority.directory.showcase.raidiam.io/authority/845f7286-3c74-4d91-9354-af110dbd33c8",
"OIDFED_BEHIND_PROXY": "true",
"OIDFED_CACHE_TTL_MAX": "60",
"OIDFED_ENTITY_ID": "https://platform-edge.${domain}/gateway",
"OIDFED_METADATA": "{\"oauth_resource\":{\"resource\":\"https://platform-edge.${domain}/gateway\",\"resource_name\":\"Tarnbrook platform edge\",\"authorization_servers\":[\"https://api.${domain}\",\"https://larkspur.${domain}/gateway\"],\"authorization_details_types_supported\":[\"records.read\",\"records.annotate\"],\"bearer_methods_supported\":[\"header\"],\"dpop_bound_access_tokens_required\":true}}",
"OIDFED_REFRESH_INTERVAL": "60",
"OIDFED_RESOURCE_IDENTIFIER": "https://platform-edge.${domain}/gateway",
"OIDFED_SERVE_STALE_FOR": "900",
"OIDFED_SIGNING_ALG": "PS256",
"OIDFED_TRUST_ANCHOR_ID": "https://federation.directory.showcase.raidiam.io/federation_entity/7b60c9fa-00dd-46d9-80de-cd899ee5a58d",
"OIDFED_UPSTREAM": "records.${domain}:443",
"RAILWAY_DOCKERFILE_PATH": "Dockerfile",
"SERVICE_ORIGIN": "https://platform-edge.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": null
},
{
"apexRedirect": false,
"app": "apps/external-directory",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/external-directory/src/index.ts",
"fqdn": "quillon-production-ff3b.up.railway.app",
"host": {
"railway": "quillon"
},
"name": "quillon",
"pendingVars": [],
"secrets": [
"QUILLON_ROOT_KEY",
"QUILLON_ROOT_KEY_KID",
"QUILLON_AGENT_KEY",
"PARTNER_RELEASE_KEY",
"PARTNER_OPERATOR_CREDENTIAL",
"PARTNER_CLIENT_ID",
"PARTNER_CLIENT_KID",
"PARTNER_CLIENT_KEY",
"PARTNER_CLIENT_TRANSPORT_PEM",
"PARTNER_CLIENT_TRANSPORT_KEY_PEM",
"PARTNER_CLIENT_SUB",
"PARTNER_DIR_CA_PEM",
"PARTNER_DIR_SCOPE"
],
"standsInFor": "a third party, a software publisher",
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/external-directory/src/index.ts",
"PARTNER_KIND": "quillon",
"SERVICE_ORIGIN": "https://quillon-production-ff3b.up.railway.app",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/external-directory",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/external-directory/src/index.ts",
"fqdn": "larkspur-production.up.railway.app",
"host": {
"railway": "larkspur"
},
"name": "larkspur",
"pendingVars": [],
"secrets": [
"LARKSPUR_ROOT_KEY",
"LARKSPUR_ROOT_KEY_KID",
"LARKSPUR_AGENT_KEY",
"LARKSPUR_AGENT_KEY_KID",
"PARTNER_GATEWAY_KEYS"
],
"standsInFor": "a third party, an independent partner",
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/external-directory/src/index.ts",
"PARTNER_KIND": "larkspur",
"SERVICE_ORIGIN": "https://larkspur-production.up.railway.app",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/aldercross-officer",
"boot": "starts",
"build": null,
"entry": "apps/aldercross-officer/src/index.ts",
"fqdn": "aldercross-officer-production.up.railway.app",
"host": {
"railway": "aldercross-officer"
},
"name": "aldercross-officer",
"pendingVars": [],
"secrets": [
"OFFICER_DIR_CLIENT_ID",
"OFFICER_DIR_SIGNING_KID",
"OFFICER_DIR_SIGNING_KEY_PEM",
"OFFICER_DIR_TRANSPORT_CERT_PEM",
"OFFICER_DIR_TRANSPORT_KEY_PEM",
"OFFICER_DIR_SUB",
"SHOWCASE_DIR_CA_PEM",
"SHOWCASE_DIR_SCOPE",
"OFFICER_OPERATOR_TOKEN"
],
"standsInFor": "a third party, the scheme's case management tool",
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/aldercross-officer/src/index.ts",
"SERVICE_ORIGIN": "https://aldercross-officer-production.up.railway.app",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
},
{
"apexRedirect": false,
"app": "apps/signals",
"boot": "refuses-without-secrets",
"build": null,
"entry": "apps/signals/src/index.ts",
"fqdn": "signals.agents.showcase.raidiam.io",
"host": {
"label": "signals"
},
"name": "signals",
"pendingVars": [],
"secrets": [
"SUBSCRIBER_JWKS",
"SIGNALS_WEBHOOK_SECRET"
],
"treatment": "reference-implementation",
"vars": {
"APP_ENTRY": "apps/signals/src/index.ts",
"SERVICE_ORIGIN": "https://signals.agents.showcase.raidiam.io",
"SHOWCASE_TREATMENT": "reference-implementation"
},
"volume": "/app/data"
}
],
"sharedVars": {
"SHOWCASE_ANCHOR_JWKS": "{\"keys\":[{\"alg\":\"PS256\",\"e\":\"AQAB\",\"kid\":\"mrk-55aab6b0491344c287efea752aa8d5c9\",\"kty\":\"RSA\",\"n\":\"6jhrF9FcoG0WPX9yR54hq2T_naAO2lsRuXim2HNYfa5zohBWwLrYtJIM5i47ZJYHv7e4l01iANs0yJDH_p29p2I2FLytnQNp2501uMjnHrX9K0NDgiU2GziiBBixcRvqJzTQNcJOSis2JlueVal6_02ubGsEeDW8ef5Ln6FTtn3Xwpj21Q0EgFr9Mcu79T9ZZMbfPBp5RHXxTygGWqtdCQqZ3BR702gKSvTHXlpwfQIDjdER6pRvjk6O85tb4ZjmAHYHfIQUYG1KJlYaGTfBQQSaSdoBJiaDx2FIRD13ySzWCvLZ9Jb_ukUgp67YN9keVtK2rRk4HqF9cijWO5cCIw\"}]}",
"SHOWCASE_AUTHORITY": "https://authority.directory.showcase.raidiam.io/authority/845f7286-3c74-4d91-9354-af110dbd33c8",
"SHOWCASE_DIR_API": "https://matls-api.directory.showcase.raidiam.io",
"SHOWCASE_DIR_ISSUER": "https://auth.directory.showcase.raidiam.io",
"SHOWCASE_DIR_MTLS_TOKEN": "https://matls-auth.directory.showcase.raidiam.io/token",
"SHOWCASE_DIR_UI": "https://web.directory.showcase.raidiam.io",
"SHOWCASE_DOMAIN": "agents.showcase.raidiam.io",
"SHOWCASE_SCHEME_ANCHOR": "https://federation.directory.showcase.raidiam.io/federation_entity/bad6e107-c3e4-4631-a0f4-82ffe061a2e7",
"SHOWCASE_SCHEME_AUTHORITY": "https://authority.directory.showcase.raidiam.io/authority/2ec610f4-6e58-46c3-b833-05c4ab1cabe2",
"SHOWCASE_TRUSTMARK_HOST": "https://trustmark.directory.showcase.raidiam.io",
"SHOWCASE_TRUST_ANCHOR": "https://federation.directory.showcase.raidiam.io/federation_entity/7b60c9fa-00dd-46d9-80de-cd899ee5a58d"
},
"sources": [
"packages/estate/src/world.ts",
"tools/deploy/targets.json"
]
}
Fetch it yourself: deploy/manifest.json