Control Plane · Management & Orchestration

The layer that governs the architecture.

The central infrastructure that collects, governs, and prepares information.

Infrastructura centrală care colectează, guvernează și pregătește informația.

cida.tech is the operational control surface of the Central Intelligence Data Architecture. Every ingestion job, index rebuild, credential release and cortex query passes through policy here — authenticated, authorised, rate-shaped, metered and observable. Nothing in CIDA executes outside its governance.

Powered by RONOR — Sovereign Intelligence Operating Runtime operating under constitutional and operational control.
Control Plane · Component Health All nominal
Cortex · ContinuumpediaGraph resolutionHealthy
Data Lake · IngestionStreaming + batchHealthy
Archive · IndexSearch & versioningHealthy
Vault · CustodySealed / auditedSealed
Gateway p99 latencyRegional median41 ms
Policy decisions / minAuthorisation engine18,402
Healthy Sealed Degraded
5
Governed components
99.98%
Control availability
41 ms
Gateway p99
100%
Decisions audited
Capabilities

One plane of control across
five independent components.

Distributed architectures fail at the seams — where responsibility for identity, policy, cost and observability is unclear. CIDA resolves this by centralising governance while keeping storage, processing and reasoning strictly separated. The Control Plane owns the seams.

Unified dashboard

A single operational view of ingestion throughput, index freshness, custody state, graph resolution latency and cost per workload — with drill-down to the individual job or query.

API gateway

One authenticated entry point for every CIDA capability. Versioned contracts, schema validation, quota enforcement, deterministic error semantics and per-tenant rate shaping.

Access control

Role- and attribute-based authorisation evaluated per request, with jurisdictional constraints, purpose limitation and time-bounded elevation for sensitive operations.

Observability

Structured traces, metrics and logs correlated by request identity across all five components — so an anomaly in a cortex answer can be traced back to the ingestion batch that caused it.

Policy enforcement

Policy is declarative, versioned and testable. Changes are proposed, diffed against live traffic in shadow mode, then promoted — never edited directly in production.

Orchestration

Scheduled and event-driven workflows across ingestion, refinement, indexing and re-scoring, with dependency awareness, back-pressure handling and idempotent retries.

API Gateway

One contract.
Five subsystems.

Consumers of CIDA — including the RONOR runtime — never address components directly. They address the gateway, which resolves the correct component, applies policy, meters usage and returns a traceable response.

  • Stable versioned surface. Component internals evolve without breaking consumers.
  • Request identity end to end. A single correlation identity flows through every hop and appears in every audit record.
  • Metered by default. Cost attribution per tenant, workload and component, computed at the edge.
  • Fail closed. When policy cannot be evaluated, the request is denied rather than defaulted.
POST /v1/resolve · gateway
# Resolve a question through the Cortex, governed end to end
POST https://api.cida.tech/v1/resolve
Authorization: Bearer <operator-token>
X-CIDA-Purpose: "investment-committee"
X-CIDA-Jurisdiction: "EU"

{
  "query": "long-duration storage parity window",
  "min_confidence": 0.75,
  "include": ["provenance", "timeline"],
  "components": ["cortex", "archive"]
}

# 200 OK
{
  "trace_id": "cida_7fd41a9e",
  "confidence": 0.89,
  "band": "strongly-supported",
  "sources": 63,
  "policy": { "decision": "allow", "residency": "eu-central" },
  "metered": { "units": 4, "component": "cortex" }
}
Access Control

Authorisation is a
decision, not a flag.

Every request carries an identity, a purpose and a jurisdiction. The authorisation engine evaluates these against declarative policy and returns a decision with its reasoning attached. Denials are as auditable as approvals.

Sensitive operations — Vault reads, index rebuilds, policy promotion — require time-bounded elevation with a named approver. Elevation expires automatically; standing privilege does not exist in CIDA.

Authorisation · Recent decisions Immutable log
cortex.resolvepurpose: investment-committee · EUAllow
lake.raw.readpurpose: pipeline-debug · EUAllow
vault.secret.readelevation required · no approverDeny
archive.version.restoreelevated 15 min · approver setAllow
cortex.resolveresidency: non-EU egressDeny
policy.promoteshadow-tested · two approversAllow
Observability

If it cannot be traced,
it does not ship.

Correlated telemetry across all five components makes causality recoverable. An unexpected confidence downgrade in the Cortex can be traced to the ingestion batch, the source document and the policy version responsible.

Trace cida_7fd41a9e · cross-component span 41 ms total
gateway.authorizepolicy v42 · allow4 ms
cortex.graph.traversedepth 3 · 118 nodes19 ms
archive.index.lookup63 documents11 ms
cortex.confidence.compose5 dimensions5 ms
gateway.meter4 units attributed2 ms
Cortex Gateway Scoring
SurfaceResponsibilityEnforcement pointAudit
DashboardOperational visibility and drill-downRead-only, scoped per tenantView events logged
API GatewaySingle authenticated entry pointPer-request policy evaluationFull request/decision record
Access ControlIdentity, purpose, jurisdictionDeny-by-default authorisationImmutable decision log
MonitoringTraces, metrics, anomaly signalsCorrelated by request identityRetention per policy
OrchestrationWorkflow scheduling and retriesIdempotent, back-pressure awareJob lineage preserved
CIDA · Central Intelligence Data Architecture

Five components. One architecture.

CIDA separates the handling of data from the understanding of it. Four infrastructure components move, refine, index and protect material; the Cortex constructs meaning. The Control Plane governs all five, and the RONOR runtime consumes them on the user's behalf.

Runtime
RONOR
Sovereign Intelligence Operating Runtime — the surface users actually interact with. Provider-neutral, model-portable, sovereignty-aware.
Governance
Control Plane
Resolves, authorises, meters and observes every request RONOR issues into the architecture.
Understanding
Cortex
Continuumpedia turns the governed material into scored, traceable intelligence.
Substrate
Lake · Archive · Vault
Ingestion, durable indexed record and encrypted custody — invisible to the user, essential to the answer.
Operator access

Governance is not optional.

Control Plane access is provisioned to named operators under a defined purpose and jurisdiction, with elevation workflows and audit retention agreed in advance. Tell us what you need to operate and we will scope it.

Request Operator Access Request a Briefing

office@cida.tech · No cookies · No tracking