Skip to content

Design Documents

The architecture pages in this site are the narrative reference. Behind them are the original engineering design documents — deeper, decision-level records of why each subsystem is built the way it is, with measurements, trade-offs, and threat models. They are included here in full so that all project knowledge lives in one place.

Note

These are engineering documents. Some contain source-path references (code/...) that are links within the repository rather than this site.

Security, identity & tenancy

Document Covers
Distributed Identity, Trust & Data-Rights identity-bearing certs, regional-CA issuance, federated trust bundles, mutual TLS binding
Tenant Isolation (Glocal) destination namespacing, role-based authorization, message-flow walkthrough, threat model, config/ops reference

Routing, messaging & performance

Document Covers
Dynamic Cost-Aware Routing shipped — link-state push, Dijkstra path selection, source-route enforcement, self-organizing link inference
Optimal Global Routing Plan the design/roadmap; phases A/C/D are now implemented (see the architecture page above), B/E/F remain
Coordinator Decentralization Plan region-first autonomy + elected/sharded coordinators; decomposes the single static global by duty, confines consensus to liveness verdict + global optimization
Broker & Data-Plane Performance every broker/data-path performance change with measured effect and the config lever
Region Federation same-host region federation, identity-vs-IP self-detection
Network Link Metrics + Auto-Tuning per-edge RTT/jitter/throughput/backlog, the auto-tuner control loop, the link cost model

Health, metrics & capability

Document Covers
Health, State & Inventory the Felix-health-check migration, grace/sticky windows, mesh rollup
Metrics & Measurements Unification one Micrometer model across controller + all plugins + clients, mesh aggregation
Capability Inventory @CrescoAction self-description → fabric-wide capability catalog

Exhaustive action reference

Document Covers
Cresco Tools Reference the full auto-generated per-tool detail for all actions (the Plugin Actions page is the distilled version)