Owns ingress policy, route decisions, and peer-identity enforcement.
Ownership and boundaries
Does not issue principals, hold master secrets, or grant business authorization.
Connected roles
Operator, customer surfaces, certificate owner.
Contract status
Owner-local contract proposals; complete integration and production verification not established.
For the owner-specific contract summary, see Interfaces. For platform-wide dependencies, see Interface map.