Axiom-Trace Industrial
The edge node on the shop floor: deterministic, manifest-driven execution where every production action is role-checked, constraint-checked and signed — one fleet, one Control Plane, one audit trail.
Back to Axiom-Trace PlatformRules the machine cannot break
Every business action crosses the same fail-closed pipeline — auth, idempotency, RBAC, constraints, FSM, data-link, audit, commit. The expression language is deterministic by construction: no now(), no random(), no hidden state. The same event on the same state produces the same verdict, forever.
The process is a document
States, transitions, roles, formulas, constraints and data bindings live in a signed LayoutManifest — versioned, monotonic, hot-swappable. Changing the process means publishing a new signed manifest from the Control Plane, not redeploying code on the machine.
Production never waits for the network
The edge commits locally: business row, audit record and CDC outbox entry land in the same transaction. When the link drops, work continues; when it returns, the outbox drains and dedup absorbs the replay — a resend is a designed retry path, not an error.
Evidence, not claims
Operator actions are hash-chained per tenant; sync batches are Ed25519-signed per node and preserved as re-checkable evidence on the Control Plane. A third party can verify a committed event through the public oracle — no credentials, no leakage.
Fail-closed by construction
A violated constraint rolls back the whole transaction — there is no half-applied state. A role without the trigger gets 403, not a warning. Signing keys are mandatory in production — missing Ed25519 means the node refuses to start, not a degraded mode.
Same node, same governance
Every edge node joins through a single-use bootstrap token and becomes visible in one fleet view: heartbeat, manifest version, outbox depth. The machine and the back-office finally speak the same protocol — the signed sync channel.