Luzione control plane

One platform. Three clear places to work.

Luzione App handles human work, this API enforces business rules, and Sultan OS observes, evaluates, and improves the intelligence layer.

Open Luzione App Open Sultan OS
Configuration required
Fail-closed safety active

The API is withholding authority until its database, authentication, signing, and RLS checks pass.

View machine-readable health →
Live posture

What is verified now

Server-side database readback
RLS-sensitive tables39/48Readback unavailable or incomplete
Security violations70Authority remains withheld
Service identityReadyApp and OS must authenticate as bounded service actors
Internal projectionsActiveP113 only · idempotent · no external effects
Connected surfaces

Where each kind of work belongs

01
Work

Luzione App

People, pipeline, commercial cases, proposals, tasks, approvals, orders, and customer care.

Human-readable operating plane →
02
Rules

Luzione API

Identity, policy, canonical objects, commands, events, workflows, reliability, and audit.

Deterministic authority boundary · current
03
Observe

Sultan OS

Runs, tools, model routing, evaluations, evidence, learning, memory, simulations, and feedback.

Machine and operator plane →
Governed flow

How Sultan crosses the boundary

External effects off
  1. 1Read

    Retrieve only tenant-authorized records and source evidence.

  2. 2Recommend

    Sultan produces a typed proposal, citation, and confidence record.

  3. 3Approve

    A person or policy supplies explicit authority for the bounded action.

  4. 4Execute + verify

    The API applies an idempotent command, records a receipt, and reads the result back.

Steps 1–2 are the active foundation. A bounded form of step 4 is active for the internal P113 catalog projection; customer sends, Shopify writes, payments, and other external effects remain locked.

API contract

Available surfaces

Explore platform areas →
MethodPathAccessPurpose
GET/api/v1/healthzPublic aggregateDeployment, configuration, and RLS readiness without sensitive detail.
GET/api/v1/sultan/runtime-statusPublic aggregateLive cognition, learning, model routing, connector, Shopify, and proposal evidence.
GET/api/v1/catalogPublic contractCanonical objects, ownership boundaries, and active platform areas.
GET · POST/api/v1/catalog/shopify/projectionsService authenticatedRead or atomically reconcile the tenant-scoped P113 quote catalog projection.
GET/api/v1/platform-guaranteesService authenticatedCommand, event, workflow, retry, and recovery guarantees.
GET/api/v1/security/rls-readinessService authenticatedDetailed RLS readback and optional active denial probes.
GET/api/v1/autonomy/constitutionService authenticatedVersioned effect classes, immutable guardrails, and registered capability policy.
POST/api/v1/autonomy/evaluateService authenticated · no effectFail-closed action-plan evaluation; client authority claims are rejected.
POST/api/v1/autonomy/identity/evaluateService authenticated · no effectEvaluate provenance-aware identity and wish candidates without declaring consciousness or promoting identity.
POST/api/v1/autonomy/petitions/evaluateService authenticated · no effectRecord Sultan's constitutional voice for guardian review without self-enactment or self-voting.
Build map

Authority areas

Foundation means the contract exists; it does not imply production write authority.

Objects

foundation

Canonical business identity, relationships, versions and state machines.

Account · Contact · Lead · Opportunity

Commands & Events

foundation

Typed intent, atomic receipts, universal events, inbox/outbox and delivery chronology.

LifecycleCommand · CommandReceipt · UniversalEventEnvelope · OutboxMessage

Workflows

foundation

Durable flow state, checkpoints, waits, timers, human tasks, compensation and safe continuation.

WorkflowDefinition · WorkflowInstance · WorkflowCheckpoint · HumanTask

Integrations

foundation

Provider adapters, OAuth, webhooks, synchronization, mappings, acknowledgement and readback.

ProviderConnection · WebhookSubscription · SyncJob · DataMapping

Data

foundation

Imports, matching, deduplication, identity resolution, provenance, reconciliation and correction.

ImportJob · IdentityMatch · DeduplicationDecision · SourceReference

Access

read-only

Tenant, actor, roles, permissions, consent, suppression and service authority.

Tenant · Actor · Role · Permission

Reliability

read-only

Idempotency, bounded retries, reconciliation, dead letters, replay, kill switches and guarantees.

RetryDecision · DeliveryAttempt · DeadLetter · ReplayRequest

Audit

planned

Immutable command, event, actor, approval, correction and access history.

AuditEvent · CommandReceipt · ApprovalDecision · CorrectionLineage

Autonomy

foundation

Typed effect classes, immutable safety rules, bounded authority, simulations and fail-closed action evaluation.

AutonomyConstitution · CapabilityPolicy · AuthorityGrant · ActionEvaluation

Developer

foundation

Versioned API contracts, event catalog, webhooks, sandbox and changelog.

OpenAPI · EventSchema · WebhookContract · CompatibilityPolicy