Resolving locale, route permissions, and workspace projection.
Current scope: Gest
Category: 10_normative | Version: v1.0.0
Owner: DOCUMENT_CUSTODIAN | Review cycle: 90 days
Approval Authority: GOVERNANCE_ADMIN
Read-only Documentation Portal. Editing and mutation endpoints are disabled.
METADATA INCOMPLETE: Document ID, Version, Status, Owner Role, Last Review Date, Next Review Date, Change Log
This document describes the smallest truthful shared shell that Butkhuzi still depends on today.
It is not an aspirational design. It is the current extraction seam.
Current gateway owner:
Current seam:
BUTKHUZI_SERVICE_URL ?? TENDERS_SERVICE_URLCurrent gateway route family:
GET /butkhuzi/normsGET /butkhuzi/suggestGET /butkhuzi/searchPOST /butkhuzi/upsertPOST /butkhuzi/chunks/rebuildVerdict:
Why:
Gateway auth behavior:
Service runtime auth behavior:
svc-tenders shell requireServiceAuth verifies bearer tokenssvc-auth /auth/meEvidence:
Verdict:
Why:
Current expectations:
/auth/meVerdict:
Notes:
Current helper surface adapted into Butkhuzi routes:
parsePositiveIntparseOptionalIntparseOptionalStringparseOptionalUpperrequireServiceAuthAdaptation layer:
Verdict by helper:
requireServiceAuth: must remain sharedWhy:
Real current integration:
Verdict:
Why:
svc-tenders to a future Butkhuzi runtimeThe truthful shared shell for Butkhuzi is small:
That is a good position for later runtime/bootstrap prep.