System Architecture

The complete Field Project system — every particle, every connection, every boundary in a single governed view.

I — The Canonical Pipeline

Every event traverses this path. No step may be skipped, no particle may be bypassed.

BosonFermionHiggsHadronPhotonNeutrino
FIG 1.1WEBHOOKAPICRONAACANONICALEventEnvelope+ CorrelationId+ HMAC202GATE

Boson

Ingress & Canonicalization

Receives

External events (webhook · API · cron)

Outputs

Signed EventEnvelope (HMAC + CorrelationId)

Returns 202 immediately — never blocks on downstream processing.

Must Never

Decide routing policy, execute side effects, hold workflow state

EventEnvelope + CorrelationId + HMAC
FIG 1.2EventEnvelopeRULEEVALUATE→ HiggsDENYALLOWActionPlanordered[]FILTERdry-run

Fermion

Decisioning & Orchestration

Receives

EventEnvelope from Boson

Outputs

ActionPlan (ordered[]) → Photon · state → Hadron · records → Neutrino

Consults Higgs for policy evaluation. Supports dry-run as a first-class concept.

Must Never

Own tenant policy, embed connector logic, hold durable workflow state

FIG 1.3TENANT CONFIGALLOWLISTPOLICY ENGINEREDACTIONCLASSIFICATIONB5 LAYERSallow | deny | filter

Higgs

Governance Brain

Receives

Policy query from Fermion

Outputs

PolicyDecision (allow | deny | filter) + redaction transforms

5 governance layers: tenant config → allowlist → policy engine → redaction → classification.

Must Never

Execute side effects, store raw secrets, become a workflow engine

Fermion ←→ Higgs : policy query · allow | deny | filter
ActionPlan (ordered[]) + PolicyDecisionFermion dispatches to Hadron, Photon, Neutrino

Hadron

Durability & State Machines

Receives

Workflow state from Fermion

Outputs

Durable state + job receipts + replay cursors + DLQ entries

State machine: pending → dispatched → executing → succeeded/failed. Exponential backoff retry.

Must Never

Implement business policy, execute connectors, make routing decisions

FIG 1.4SUCCEEDEDEXECUTINGPENDINGRETRYexp. backoffDLQidempotency_key
Persisted state + idempotency guaranteeActions dispatched through Photon
FIG 1.5VAULTHTTP/RESTgRPCLLM ProviderMessage QueueSaaS Platformcredentialstransient | permanent | rate-limited

Photon

Connectors & Egress

Receives

Action dispatch from Fermion

Outputs

ConnectorResult (success | failure + error classification + latency)

5 connector types: HTTP/REST · gRPC · LLM Provider · Message Queue · SaaS Platform.

Must Never

Decide policy, evaluate tenant entitlements, hold workflow state

FIG 1.6event inevent out(unchanged)APPEND-ONLY LEDGERtrace_id: span[]cost: $lat: msC

Neutrino

Audit, Observability & Explainability

Receives

Audit records from Photon + decision records from Fermion

Outputs

Immutable audit ledger + trace views + cost/latency metrics

Append-only. Observes but never modifies — events pass through unchanged.

Must Never

Influence execution outcomes, block the critical path, mutate events

Photon → Neutrino : audit records · ConnectorResult + latency + cost
II — Field Operators

Four specialized operators that act on events without entering the canonical path. They type, compose, schedule, and sandbox.

FIG 2.1RAW PAYLOADPRTICKETINVOICELLMReqCustomPARSE+ TYPE

Quark

Domain Objects

Parses raw event payloads into typed domain events (PR, Ticket, Invoice, LLMRequest). Provides shared vocabulary for pipeline matching. Purely interpretation and typing.

Boson(typing payloads)Fermion(typed matching)
FIG 2.2COMPENSATEFAN-OUTFAN-INv2.1 (serializable)if conditionSTARTJOINEND

Gluon

Workflow Composition

Workflow graph / DSL with fan-out, fan-in, conditional branching, and compensation logic. Workflows are declared, serializable, and versioned data, not embedded code.

Fermion(workflow composition)Hadron(state management)
FIG 2.3CRONDELAYSLAPOLL→ EventEnvelope(re-enters field)t → ∞

Graviton

Time & Scheduling

Cron triggers, delays, SLA timers, polling schedules. All time-derived events re-enter the field through the canonical path as EventEnvelopes.

Boson(scheduled triggers)Hadron(timer state)
FIG 2.4SANDBOXCPU: boundedMEM: boundedNET: denieddeterministicexecution onlylifecycle:spawn → exec → decay

Muon

Sandbox Execution

Safe execution of user-defined transforms and logic within strict sandbox boundaries. Resource-limited, no network access by default, deterministic execution.

Photon(sandboxed execution)
III — Connection Index
BosonFermionSigned EventEnvelope (HMAC)
FermionHiggsPolicy query — allowed?
FermionHadronPersist workflow state
FermionPhotonDispatch Actions from ActionPlan
PhotonNeutrinoEmit audit records
FermionNeutrinoDecision + outcome records
QuarkBoson, Fermiontyping payloads · typed matching
GluonFermion, Hadronworkflow composition · state management
GravitonBoson, Hadronscheduled triggers · timer state
MuonPhotonsandboxed execution

6 CORE + 4 OPERATORS = 10 PARTICLES