Identity, access & policy
AuthOS identity and membership, provider-backed sign-in, scoped authority, policy review and evidence-bound execution permits.
Core auth has runtime-backed adapters; IdP/SSO/SCIM and provider activation have separate readiness gates. OPA OS is not presumed to be this policy engine.
CONNECTED ACROSS LSSM
See what this infrastructure supports.
Select an entry to explore its neighbours. Move between ownership, specifications, areas, products, data and infrastructure without leaving this page.
15 entries · 74 recorded relationships
Arrow keys navigate entries. Enter selects. Alt + arrows rearranges. F fits the view; Shift + F fits the selection. + and − zoom. Shift + F10 opens actions.
Accessible entry list (15)
- Shared foundations
- Products & experiences
- Products & experiences
- Shared foundations
- Shared foundations
- Inspected sources
- Data services
- Infrastructure services
- Infrastructure services
- Infrastructure services
- Infrastructure services
- Infrastructure services
- Infrastructure services
- Specialized specifications
- Specialized specifications
Inspected composition
- CompanyOS ↗Composes service
Managed CompanyOS declares AuthOS and governance dependencies; governance-suite identifies the managed host as a consumer.
- CommunicationOS ↗Composes service
CommunicationOS persistence includes product membership, scoped authority and single-use realtime tickets.
Capabilities
- Specifications & delivery ↗Supports this capability
Editorial capability classification based on the described service scope; no deployed binding is implied.
- AI company orchestration ↗Supports this capability
Editorial capability classification based on the described service scope; no deployed binding is implied.
Problem areas
- Adaptable software ↗Useful in this area
Problem-based navigation; the same service may support multiple areas.
- Business operations ↗Useful in this area
Problem-based navigation; the same service may support multiple areas.
- Personal life, agency & health ↗Useful in this area
Problem-based navigation; the same service may support multiple areas.
Related services and proposed uses
- Governed data exchange ↗Related service role
Governed projections require exact purpose, subject and grant boundaries.
- Deployment, state & queues ↗Related service role
LSSM OS execution requires exact Connect authority and fenced durable state.
- Personal finance & ownership ↗Related reusable role
Editorial navigation between complementary responsibilities. This link does not establish an installed adapter, execution permit or production binding.
- Household & life administration ↗Related reusable role
Editorial navigation between complementary responsibilities. This link does not establish an installed adapter, execution permit or production binding.
- Private & workplace messaging ↗Related reusable role
Editorial navigation between complementary responsibilities. This link does not establish an installed adapter, execution permit or production binding.
- Notifications & channel preferences ↗Related reusable role
Editorial navigation between complementary responsibilities. This link does not establish an installed adapter, execution permit or production binding.
Shared foundations & holding scope
- ContractSpec ↗Shared foundation role
Founder-declared shared foundation role. This edge does not claim a measured import or production deployment dependency.
- LSSM OS ↗Shared foundation role
Founder-declared shared foundation role. This edge does not claim a measured import or production deployment dependency.
- Patio ↗Infrastructure & data responsibility within Patio
Founder-declared holding remit. The service retains its own implementation lifecycle, providers, consumers, source attribution and access boundaries.
Specialized specifications
- Identity & AuthOS specs ↗Source-mapped contract scope
Pinned package purpose and reviewed source map associate this contract surface with the target. This relationship is not a manifest dependency or proof of product runtime adoption.
- Assurance specs ↗Source-mapped contract scope
Pinned package purpose and reviewed source map associate this contract surface with the target. This relationship is not a manifest dependency or proof of product runtime adoption.
Within LSSM
- LSSM ↗Owned by LSSM
Founder-confirmed ecosystem ownership. This records the stated organizational structure, not a company-register verification or ownership of an external provider.
Groups using this responsibility
- Company & owner assistance ↗Service context for this group
Derived through explicit member products, selected capabilities or their recorded source paths. The source edge chain preserves implemented, proposed and editorial scopes; the group link adds navigation, not runtime integration.
- Company decisions & learning ↗Service context for this group
Derived through explicit member products, selected capabilities or their recorded source paths. The source edge chain preserves implemented, proposed and editorial scopes; the group link adds navigation, not runtime integration.
- Community life ↗Service context for this group
Derived through explicit member products, selected capabilities or their recorded source paths. The source edge chain preserves implemented, proposed and editorial scopes; the group link adds navigation, not runtime integration.
- Contracts & application foundations ↗Service context for this group
Derived through explicit member products, selected capabilities or their recorded source paths. The source edge chain preserves implemented, proposed and editorial scopes; the group link adds navigation, not runtime integration.
- Planning & delivery ↗Service context for this group
Derived through explicit member products, selected capabilities or their recorded source paths. The source edge chain preserves implemented, proposed and editorial scopes; the group link adds navigation, not runtime integration.
- Conversations & correspondence ↗Service context for this group
Derived through explicit member products, selected capabilities or their recorded source paths. The source edge chain preserves implemented, proposed and editorial scopes; the group link adds navigation, not runtime integration.
- Communication channels & infrastructure ↗Service context for this group
Derived through explicit member products, selected capabilities or their recorded source paths. The source edge chain preserves implemented, proposed and editorial scopes; the group link adds navigation, not runtime integration.
The source behind this role.
Repository evidence identifies the implementation and its scope. Deployment and host qualification are separate.
- packages/domains/identity/spec/README.md ↗
Provider-neutral identity, authentication, account federation, memberships, entitlement and agent authority contracts.
Maturity tags distinguish runtime-backed capabilities from fixtures and contract-only surfaces. - packages/integrations/authos-better-auth/README.md ↗
Runtime-backed Better Auth bridge for core sign-in, organizations, MFA, passkeys and supported OAuth flows.
IdP, SSO/SCIM, callbacks and provider activation have separate host/security rollout gates. - packages/platform/governance/governance-suite/README.md ↗
CompanyOS governance/audit composition with policy editor, constraints and evidence attachment.
The host supplies transaction/persistence; a UI control is not an effect grant. - packages/platform/governance/contractspec-connect/README.md ↗
Digest-bound policy/review packet authority with durable signed permits and point-of-use verification.
Connect governs authorization; it does not itself deploy, release or execute provider effects. - packages/bundles/managed-companyos/package.json ↗
Managed CompanyOS declares knowledge, CommunicationOS persistence/module, AuthOS, governance and billing dependencies.
Source composition is not a claim that every feature is enabled in every deployed CompanyOS variant.
Other services in this layer.
MailPatio
Embedded email infrastructure for dedicated addresses, workflow-linked messages and explicit application access. Its public website explains the proposed model with a fictional interactive example; live mailbox service and production intake remain disabled.
Website published · mailbox service in developmentEXPLORE THE PRODUCT ↗
INFRASTRUCTURE PRODUCTPhonePatio
A proposed channel product for dedicated numbers, inbound and outbound voice, SMS, MMS and RCS. PhonePatio and TelPatio remain alternative names for this one telephony scope; carrier support and service implementation are to establish.
Product concept · phone service not establishedEXPLORE THE PRODUCT ↗
INFRASTRUCTURE PRODUCTLetterPatio
A proposed boundary for physical letters, print-and-post workflows and delivery evidence, with formal digital correspondence connected to its own governed services.
Product concept · implementation and public destination to establishEXPLORE THE PRODUCT ↗
INFRASTRUCTURE PRODUCTSocialPatio
A proposed service boundary for social accounts, publishing, comments, permission-dependent direct messages and evidence-aware listening. Shared source building blocks exist; the branded service remains to establish.
Product concept · implementation and public destination to establishEXPLORE THE PRODUCT ↗
INFRASTRUCTURE PRODUCTVoicePatio
A proposed experience for transcription, speech generation and voice-agent conversations, composed from bounded shared voice capabilities rather than a phone-number or carrier service.
Product concept · implementation and public destination to establishEXPLORE THE PRODUCT ↗
INFRASTRUCTURE ROLEEmbedded email & inboxes
Dedicated workflow correspondence and scoped read, draft and send access, represented by the MailPatio product direction.
Product direction · service not implementedExplore the service role ↗
INFRASTRUCTURE ROLECommunication & realtime delivery
Messaging journals, channel adapters, durable outboxes and ticketed realtime delivery across communication experiences.
Inspected source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEBilling, finance & e-invoicing
Quote-to-cash, financial review and exact-money handoffs, with optional France-specific invoice readiness and Factur-X generation.
Inspected source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEMetering & cost control
Reusable usage aggregation, exact cost calculations, budget decisions and billing-facing economic references.
Inspected source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEScraping & browser execution
Governed provider routing for web requests, browser sessions, proxies, collection jobs and acquisition recovery.
Inspected source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLECollaboration & sync
Protocol-neutral realtime and collaboration envelopes, convergence semantics, presence and an ephemeral WebSocket proof.
Reference implementation / proof · hosted service unverifiedExplore the service role ↗
INFRASTRUCTURE ROLEDeployment, state & queues
Plan and operate runtime components with provider-neutral state, queues, caches, recovery and evidence-bound execution.
Inspected source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEPhone identity, calls & messages
A proposed phone identity, voice, SMS, MMS and RCS boundary, subject to provider/carrier support and qualified host integration.
Product concept · phone service not establishedExplore the service role ↗
INFRASTRUCTURE ROLECustomer support & resolution
Reusable SupportOS case intake, operator inbox, governed assistance, resolution workflows and durable support workers.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEWork graph & execution planning
Canonical WorkOS tasks, projects, strategy, immutable events, recurrence and governed synchronization that products can compose.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEScheduling, booking & meeting work
OPA planning, booking, agendas, governed meeting intelligence and approved follow-up work across product hosts.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEContent, media & editorial workflows
Composable text, image, video and analysis boundaries with immutable revisions, review, publication and rights-aware recovery.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEGrowth programs & distribution
GrowthOS referrals, affiliates, reviewed marketing, social publishing, advertising execution and evidence-aware outcome measurement.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEForms, intake & consent
Portable authoring and respondent flows with immutable publication, branching, resumable responses, assurance and scoped analysis.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEPersonal finance & ownership
Subject-owned wealth, cash-flow, budget, obligation and scenario records for a private PersonalOS finance overview.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEHousehold & life administration
PersonalOS household membership, purpose-limited delegation, calendar and file references, reminders, recovery and portable data rights.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLELearning, journeys & progression
Shared onboarding, drills, coaching, learning journeys and deterministic cadence, streak, quest and progression mechanics.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEPostal & formal correspondence
A proposed service boundary for physical letters, print/post handoffs, address preparation and explicit delivery evidence.
Proposed channel role · implementation to establishExplore the service role ↗
INFRASTRUCTURE ROLESocial channels & publishing
Reusable social publishing and scheduling source, scoped analytics and restricted messaging contracts; the SocialPatio product remains a concept.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLEPrivate & workplace messaging
Canonical threads, identities, revocable grants and routing for private and workplace channels, composed through host-owned adapters.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLENotifications & channel preferences
Reusable notification preparation, scope-bound preferences, consent and channel wrappers for in-app, web and mobile delivery boundaries.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLELive meetings, video & capture
Meeting-capture contracts and provider-neutral meeting orchestration with explicit participation, recording consent and governed follow-up boundaries.
Inspected reusable source · host qualification separateExplore the service role ↗
INFRASTRUCTURE ROLESpeech & voice interaction
Reusable TTS, STT, transcript/turn orchestration and streaming-compatible audio interfaces; VoicePatio remains a proposed branded experience.
Inspected reusable source · host qualification separateExplore the service role ↗