Connector Lifecycle¶
Lifecycle¶
- Discover connector descriptor and declared capabilities.
- Verify readiness state and trust status.
- Bind request to least-privilege capability scope.
- Validate connector input constraints.
- Execute only when trust preconditions hold.
- Capture connector output and evidence.
- Continuously monitor trust indicators and revoke when needed.
Readiness States¶
- Ready
- Degraded
- Blocked
- Revoked
Fail-Closed Behavior¶
Degraded or unknown connector state cannot silently escalate privileges or auto-route to broader access.
Diagram¶
Source: diagrams/../diagrams/connector-lifecycle.mmd
Related ADR: