Architecture
Worker Design
A concise map of how the API, auth, gatekeeper, and jobs runtimes divide responsibilities.
The platform separates responsibilities across several runtimes so the system can stay clearer operationally.
API Runtime
Handles product APIs, admin surfaces, and MCP transport.
Auth Runtime
Owns interactive auth routes and OAuth authorization server behavior.
Gatekeeper Runtime
Receives GitHub webhooks, validates them, and hands off work asynchronously.
Jobs Runtime
Processes policy checks, onboarding scans, and other background workflows.
This boundary keeps webhook ingestion, browser auth, and background evaluation from becoming tightly coupled.