# Provisioning Platform Glossary\n\n**Last Updated**: 2025-10-10\n**Version**: 1.0.0\n\nThis glossary defines key terminology used throughout the Provisioning Platform documentation. Terms are listed alphabetically with definitions, usage\ncontext, and cross-references to related documentation.\n\n---\n\n## A\n\n### ADR (Architecture Decision Record)\n\n**Definition**: Documentation of significant architectural decisions, including context, decision, and consequences.\n\n**Where Used**:\n\n- Architecture planning and review\n- Technical decision-making process\n- System design documentation\n\n**Related Concepts**: Architecture, Design Patterns, Technical Debt\n\n**Examples**:\n\n- ADR-001: Project Structure\n- ADR-006: CLI Refactoring\n- ADR-009: Complete Security System\n\n**See Also**: Architecture Documentation\n\n---\n\n### Agent\n\n**Definition**: A specialized component that performs a specific task in the system orchestration (for example, autonomous execution units in the\norchestrator).\n\n**Where Used**:\n\n- Task orchestration\n- Workflow management\n- Parallel execution patterns\n\n**Related Concepts**: Orchestrator, Workflow, Task\n\n**See Also**: [Orchestrator Architecture](../architecture/orchestrator-integration-model.md)\n\n---\n\n### Anchor Link\n\n**Definition**: An internal document link to a specific section within the same or different markdown file using the `#` symbol.\n\n**Where Used**:\n\n- Cross-referencing documentation sections\n- Table of contents generation\n- Navigation within long documents\n\n**Related Concepts**: Internal Link, Cross-Reference, Documentation\n\n**Examples**:\n\n- `[See Installation](#installation)` - Same document\n- `[Configuration Guide](config.md#setup)` - Different document\n\n---\n\n### API Gateway\n\n**Definition**: Platform service that provides unified REST API access to provisioning operations.\n\n**Where Used**:\n\n- External system integration\n- Web Control Center backend\n- MCP server communication\n\n**Related Concepts**: REST API, Platform Service, Orchestrator\n\n**Location**: `provisioning/platform/api-gateway/`\n\n**See Also**: REST API Documentation\n\n---\n\n### Auth (Authentication)\n\n**Definition**: The process of verifying user identity using JWT tokens, MFA, and secure session management.\n\n**Where Used**:\n\n- User login flows\n- API access control\n- CLI session management\n\n**Related Concepts**: Authorization, JWT, MFA, Security\n\n**See Also**:\n\n- Authentication Layer Guide\n- Auth Quick Reference\n\n---\n\n### Authorization\n\n**Definition**: The process of determining user permissions using Cedar policy language.\n\n**Where Used**:\n\n- Access control decisions\n- Resource permission checks\n- Multi-tenant security\n\n**Related Concepts**: Auth, Cedar, Policies, RBAC\n\n**See Also**: Cedar Authorization Implementation\n\n---\n\n## B\n\n### Batch Operation\n\n**Definition**: A collection of related infrastructure operations executed as a single workflow unit.\n\n**Where Used**:\n\n- Multi-server deployments\n- Cluster creation\n- Bulk taskserv installation\n\n**Related Concepts**: Workflow, Operation, Orchestrator\n\n**Commands**:\n\n```\nprovisioning batch submit workflow.ncl\nprovisioning batch list\nprovisioning batch status <id>\n```\n\n**See Also**: [Batch Workflow System](../guides/from-scratch.md)\n\n---\n\n### Break-Glass\n\n**Definition**: Emergency access mechanism requiring multi-party approval for critical operations.\n\n**Where Used**:\n\n- Emergency system access\n- Incident response\n- Security override scenarios\n\n**Related Concepts**: Security, Compliance, Audit\n\n**Commands**:\n\n```\nprovisioning break-glass request "reason"\nprovisioning break-glass approve <id>\n```\n\n**See Also**: Break-Glass Training Guide\n\n---\n\n## C\n\n### Cedar\n\n**Definition**: Amazon's policy language used for fine-grained authorization decisions.\n\n**Where Used**:\n\n- Authorization policies\n- Access control rules\n- Resource permissions\n\n**Related Concepts**: Authorization, Policies, Security\n\n**See Also**: Cedar Authorization Implementation\n\n---\n\n### Checkpoint\n\n**Definition**: A saved state of a workflow allowing resume from point of failure.\n\n**Where Used**:\n\n- Workflow recovery\n- Long-running operations\n- Batch processing\n\n**Related Concepts**: Workflow, State Management, Recovery\n\n**See Also**: [Batch Workflow System](../guides/from-scratch.md)\n\n---\n\n### CLI (Command-Line Interface)\n\n**Definition**: The `provisioning` command-line tool providing access to all platform operations.\n\n**Where Used**:\n\n- Daily operations\n- Script automation\n- CI/CD pipelines\n\n**Related Concepts**: Command, Shortcut, Module\n\n**Location**: `provisioning/core/cli/provisioning`\n\n**Examples**:\n\n```\nprovisioning server create\nprovisioning taskserv install kubernetes\nprovisioning workspace switch prod\n```\n\n**See Also**:\n\n- [CLI Reference](../infrastructure/cli-reference.md)\n- CLI Reference\n\n---\n\n### Cluster\n\n**Definition**: A complete, pre-configured deployment of multiple servers and taskservs working together.\n\n**Where Used**:\n\n- Kubernetes deployments\n- Database clusters\n- Complete infrastructure stacks\n\n**Related Concepts**: Infrastructure, Server, Taskserv\n\n**Location**: `provisioning/extensions/clusters/{name}/`\n\n**Commands**:\n\n```\nprovisioning cluster create <name>\nprovisioning cluster list\nprovisioning cluster delete <name>\n```\n\n**See Also**: Infrastructure Management\n\n---\n\n### Compliance\n\n**Definition**: System capabilities ensuring adherence to regulatory requirements (GDPR, SOC2, ISO 27001).\n\n**Where Used**:\n\n- Audit logging\n- Data retention policies\n- Incident response\n\n**Related Concepts**: Audit, Security, GDPR\n\n**See Also**: Compliance Implementation Summary\n\n---\n\n### Config (Configuration)\n\n**Definition**: System settings stored in TOML files with hierarchical loading and variable interpolation.\n\n**Where Used**:\n\n- System initialization\n- User preferences\n- Environment-specific settings\n\n**Related Concepts**: Settings, Environment, Workspace\n\n**Files**:\n\n- `provisioning/config/config.defaults.toml` - System defaults\n- `workspace/config/local-overrides.toml` - User settings\n\n**See Also**: [Configuration Guide](../infrastructure/configuration-guide.md)\n\n---\n\n### Control Center\n\n**Definition**: Web-based UI for managing provisioning operations built with Ratatui/Crossterm.\n\n**Where Used**:\n\n- Visual infrastructure management\n- Real-time monitoring\n- Guided workflows\n\n**Related Concepts**: UI, Platform Service, Orchestrator\n\n**Location**: `provisioning/platform/control-center/`\n\n**See Also**: Platform Services\n\n---\n\n### CoreDNS\n\n**Definition**: DNS server taskserv providing service discovery and DNS management.\n\n**Where Used**:\n\n- Kubernetes DNS\n- Service discovery\n- Internal DNS resolution\n\n**Related Concepts**: Taskserv, Kubernetes, Networking\n\n**See Also**:\n\n- CoreDNS Guide\n- CoreDNS Quick Reference\n\n---\n\n### Cross-Reference\n\n**Definition**: Links between related documentation sections or concepts.\n\n**Where Used**:\n\n- Documentation navigation\n- Related topic discovery\n- Learning path guidance\n\n**Related Concepts**: Documentation, Navigation, See Also\n\n**Examples**: "See Also" sections at the end of documentation pages\n\n---\n\n## D\n\n### Dependency\n\n**Definition**: A requirement that must be satisfied before installing or running a component.\n\n**Where Used**:\n\n- Taskserv installation order\n- Version compatibility checks\n- Cluster deployment sequencing\n\n**Related Concepts**: Version, Taskserv, Workflow\n\n**Schema**: `provisioning/schemas/dependencies.ncl`\n\n**See Also**: Nickel Dependency Patterns\n\n---\n\n### Diagnostics\n\n**Definition**: System health checking and troubleshooting assistance.\n\n**Where Used**:\n\n- System status verification\n- Problem identification\n- Guided troubleshooting\n\n**Related Concepts**: Health Check, Monitoring, Troubleshooting\n\n**Commands**:\n\n```\nprovisioning status\nprovisioning diagnostics run\n```\n\n---\n\n### Dynamic Secrets\n\n**Definition**: Temporary credentials generated on-demand with automatic expiration.\n\n**Where Used**:\n\n- AWS STS tokens\n- SSH temporary keys\n- Database credentials\n\n**Related Concepts**: Security, KMS, Secrets Management\n\n**See Also**:\n\n- Dynamic Secrets Implementation\n- Dynamic Secrets Quick Reference\n\n---\n\n## E\n\n### Environment\n\n**Definition**: A deployment context (dev, test, prod) with specific configuration overrides.\n\n**Where Used**:\n\n- Configuration loading\n- Resource isolation\n- Deployment targeting\n\n**Related Concepts**: Config, Workspace, Infrastructure\n\n**Config Files**: `config.{dev,test,prod}.toml`\n\n**Usage**:\n\n```\nPROVISIONING_ENV=prod provisioning server list\n```\n\n---\n\n### Extension\n\n**Definition**: A pluggable component adding functionality (provider, taskserv, cluster, or workflow).\n\n**Where Used**:\n\n- Custom cloud providers\n- Third-party taskservs\n- Custom deployment patterns\n\n**Related Concepts**: Provider, Taskserv, Cluster, Workflow\n\n**Location**: `provisioning/extensions/{type}/{name}/`\n\n**See Also**: Extension Development\n\n---\n\n## F\n\n### Feature\n\n**Definition**: A major system capability providing key platform functionality.\n\n**Where Used**:\n\n- Architecture documentation\n- Feature planning\n- System capabilities\n\n**Related Concepts**: ADR, Architecture, System\n\n**Examples**:\n\n- Batch Workflow System\n- Orchestrator Architecture\n- CLI Architecture\n- Configuration System\n\n**See Also**: [Architecture Overview](../architecture/system-overview.md)\n\n---\n\n## G\n\n### GDPR (General Data Protection Regulation)\n\n**Definition**: EU data protection regulation compliance features in the platform.\n\n**Where Used**:\n\n- Data export requests\n- Right to erasure\n- Audit compliance\n\n**Related Concepts**: Compliance, Audit, Security\n\n**Commands**:\n\n```\nprovisioning compliance gdpr export <user>\nprovisioning compliance gdpr delete <user>\n```\n\n**See Also**: Compliance Implementation\n\n---\n\n### Glossary\n\n**Definition**: This document - a comprehensive terminology reference for the platform.\n\n**Where Used**:\n\n- Learning the platform\n- Understanding documentation\n- Resolving terminology questions\n\n**Related Concepts**: Documentation, Reference, Cross-Reference\n\n---\n\n### Guide\n\n**Definition**: Step-by-step walkthrough documentation for common workflows.\n\n**Where Used**:\n\n- Onboarding new users\n- Learning workflows\n- Reference implementation\n\n**Related Concepts**: Documentation, Workflow, Tutorial\n\n**Commands**:\n\n```\nprovisioning guide from-scratch\nprovisioning guide update\nprovisioning guide customize\n```\n\n**See Also**: [Guides](../guides/README.md)\n\n---\n\n## H\n\n### Health Check\n\n**Definition**: Automated verification that a component is running correctly.\n\n**Where Used**:\n\n- Taskserv validation\n- System monitoring\n- Dependency verification\n\n**Related Concepts**: Diagnostics, Monitoring, Status\n\n**Example**:\n\n```\nhealth_check = {\n    endpoint = "http://localhost:6443/healthz"\n    timeout = 30\n    interval = 10\n}\n```\n\n---\n\n### Hybrid Architecture\n\n**Definition**: System design combining Rust orchestrator with Nushell business logic.\n\n**Where Used**:\n\n- Core platform architecture\n- Performance optimization\n- Call stack management\n\n**Related Concepts**: Orchestrator, Architecture, Design\n\n**See Also**:\n\n- [Orchestrator Architecture](../architecture/orchestrator-integration-model.md)\n- [ADR-004: Hybrid Architecture](../architecture/adr/adr-004-hybrid-architecture.md)\n\n---\n\n## I\n\n### Infrastructure\n\n**Definition**: A named collection of servers, configurations, and deployments managed as a unit.\n\n**Where Used**:\n\n- Environment isolation\n- Resource organization\n- Deployment targeting\n\n**Related Concepts**: Workspace, Server, Environment\n\n**Location**: `workspace/infra/{name}/`\n\n**Commands**:\n\n```\nprovisioning infra list\nprovisioning generate infra --new <name>\n```\n\n**See Also**: Infrastructure Management\n\n---\n\n### Integration\n\n**Definition**: Connection between platform components or external systems.\n\n**Where Used**:\n\n- API integration\n- CI/CD pipelines\n- External tool connectivity\n\n**Related Concepts**: API, Extension, Platform\n\n**See Also**:\n\n- Integration Patterns\n- Integration Examples\n\n---\n\n### Internal Link\n\n**Definition**: A markdown link to another documentation file or section within the platform docs.\n\n**Where Used**:\n\n- Cross-referencing documentation\n- Navigation between topics\n- Related content discovery\n\n**Related Concepts**: Anchor Link, Cross-Reference, Documentation\n\n**Examples**:\n\n- `[See Configuration](configuration.md)`\n- `[Architecture Overview](../architecture/README.md)`\n\n---\n\n## J\n\n### JWT (JSON Web Token)\n\n**Definition**: Token-based authentication mechanism using RS256 signatures.\n\n**Where Used**:\n\n- User authentication\n- API authorization\n- Session management\n\n**Related Concepts**: Auth, Security, Token\n\n**See Also**: JWT Auth Implementation\n\n---\n\n## K\n\n### Nickel (Nickel Configuration Language)\n\n**Definition**: Declarative configuration language with type safety and lazy evaluation for infrastructure definitions.\n\n**Where Used**:\n\n- Infrastructure schemas\n- Workflow definitions\n- Configuration validation\n\n**Related Concepts**: Schema, Configuration, Validation\n\n**Version**: 1.15.0+\n\n**Location**: `provisioning/schemas/*.ncl`\n\n**See Also**: Nickel Quick Reference\n\n---\n\n### KMS (Key Management Service)\n\n**Definition**: Encryption key management system supporting multiple backends (RustyVault, Age, AWS, Vault).\n\n**Where Used**:\n\n- Configuration encryption\n- Secret management\n- Data protection\n\n**Related Concepts**: Security, Encryption, Secrets\n\n**See Also**: RustyVault KMS Guide\n\n---\n\n### Kubernetes\n\n**Definition**: Container orchestration platform available as a taskserv.\n\n**Where Used**:\n\n- Container deployments\n- Cluster management\n- Production workloads\n\n**Related Concepts**: Taskserv, Cluster, Container\n\n**Commands**:\n\n```\nprovisioning taskserv create kubernetes\nprovisioning test quick kubernetes\n```\n\n---\n\n## L\n\n### Layer\n\n**Definition**: A level in the configuration hierarchy (Core → Workspace → Infrastructure).\n\n**Where Used**:\n\n- Configuration inheritance\n- Customization patterns\n- Settings override\n\n**Related Concepts**: Config, Workspace, Infrastructure\n\n**See Also**: [Configuration Guide](../infrastructure/configuration-guide.md)\n\n---\n\n## M\n\n### MCP (Model Context Protocol)\n\n**Definition**: AI-powered server providing intelligent configuration assistance.\n\n**Where Used**:\n\n- Configuration validation\n- Troubleshooting guidance\n- Documentation search\n\n**Related Concepts**: Platform Service, AI, Guidance\n\n**Location**: `provisioning/platform/mcp-server/`\n\n**See Also**: Platform Services\n\n---\n\n### MFA (Multi-Factor Authentication)\n\n**Definition**: Additional authentication layer using TOTP or WebAuthn/FIDO2.\n\n**Where Used**:\n\n- Enhanced security\n- Compliance requirements\n- Production access\n\n**Related Concepts**: Auth, Security, TOTP, WebAuthn\n\n**Commands**:\n\n```\nprovisioning mfa totp enroll\nprovisioning mfa webauthn enroll\nprovisioning mfa verify <code>\n```\n\n**See Also**: MFA Implementation Summary\n\n---\n\n### Migration\n\n**Definition**: Process of updating existing infrastructure or moving between system versions.\n\n**Where Used**:\n\n- System upgrades\n- Configuration changes\n- Infrastructure evolution\n\n**Related Concepts**: Update, Upgrade, Version\n\n**See Also**: Migration Guide\n\n---\n\n### Module\n\n**Definition**: A reusable component (provider, taskserv, cluster) loaded into a workspace.\n\n**Where Used**:\n\n- Extension management\n- Workspace customization\n- Component distribution\n\n**Related Concepts**: Extension, Workspace, Package\n\n**Commands**:\n\n```\nprovisioning module discover provider\nprovisioning module load provider <ws> <name>\nprovisioning module list taskserv\n```\n\n**See Also**: [Module System](../development/extension-development.md)\n\n---\n\n## N\n\n### Nushell\n\n**Definition**: Primary shell and scripting language (v0.107.1) used throughout the platform.\n\n**Where Used**:\n\n- CLI implementation\n- Automation scripts\n- Business logic\n\n**Related Concepts**: CLI, Script, Automation\n\n**Version**: 0.107.1\n\n**See Also**: [Nushell Guidelines](../development/README.md)\n\n---\n\n## O\n\n### OCI (Open Container Initiative)\n\n**Definition**: Standard format for packaging and distributing extensions.\n\n**Where Used**:\n\n- Extension distribution\n- Package registry\n- Version management\n\n**Related Concepts**: Registry, Package, Distribution\n\n**See Also**: OCI Registry Guide\n\n---\n\n### Operation\n\n**Definition**: A single infrastructure action (create server, install taskserv, etc.).\n\n**Where Used**:\n\n- Workflow steps\n- Batch processing\n- Orchestrator tasks\n\n**Related Concepts**: Workflow, Task, Action\n\n---\n\n### Orchestrator\n\n**Definition**: Hybrid Rust/Nushell service coordinating complex infrastructure operations.\n\n**Where Used**:\n\n- Workflow execution\n- Task coordination\n- State management\n\n**Related Concepts**: Hybrid Architecture, Workflow, Platform Service\n\n**Location**: `provisioning/platform/orchestrator/`\n\n**Commands**:\n\n```\ncd provisioning/platform/orchestrator\n./scripts/start-orchestrator.nu --background\n```\n\n**See Also**: [Orchestrator Architecture](../architecture/orchestrator-integration-model.md)\n\n---\n\n## P\n\n### PAP (Project Architecture Principles)\n\n**Definition**: Core architectural rules and patterns that must be followed.\n\n**Where Used**:\n\n- Code review\n- Architecture decisions\n- Design validation\n\n**Related Concepts**: Architecture, ADR, Best Practices\n\n**See Also**: Architecture Overview\n\n---\n\n### Platform Service\n\n**Definition**: A core service providing platform-level functionality (Orchestrator, Control Center, MCP, API Gateway).\n\n**Where Used**:\n\n- System infrastructure\n- Core capabilities\n- Service integration\n\n**Related Concepts**: Service, Architecture, Infrastructure\n\n**Location**: `provisioning/platform/{service}/`\n\n---\n\n### Plugin\n\n**Definition**: Native Nushell plugin providing performance-optimized operations.\n\n**Where Used**:\n\n- Auth operations (10-50x faster)\n- KMS encryption\n- Orchestrator queries\n\n**Related Concepts**: Nushell, Performance, Native\n\n**Commands**:\n\n```\nprovisioning plugin list\nprovisioning plugin install\n```\n\n**See Also**: Nushell Plugins Guide\n\n---\n\n### Provider\n\n**Definition**: Cloud platform integration (AWS, UpCloud, local) handling infrastructure provisioning.\n\n**Where Used**:\n\n- Server creation\n- Resource management\n- Cloud operations\n\n**Related Concepts**: Extension, Infrastructure, Cloud\n\n**Location**: `provisioning/extensions/providers/{name}/`\n\n**Examples**: aws, upcloud, local\n\n**Commands**:\n\n```\nprovisioning module discover provider\nprovisioning providers list\n```\n\n**See Also**: Quick Provider Guide\n\n---\n\n## Q\n\n### Quick Reference\n\n**Definition**: Condensed command and configuration reference for rapid lookup.\n\n**Where Used**:\n\n- Daily operations\n- Quick reminders\n- Command syntax\n\n**Related Concepts**: Guide, Documentation, Cheatsheet\n\n**Commands**:\n\n```\nprovisioning sc  # Fastest\nprovisioning guide quickstart\n```\n\n**See Also**: Quickstart Cheatsheet\n\n---\n\n## R\n\n### RBAC (Role-Based Access Control)\n\n**Definition**: Permission system with 5 roles (admin, operator, developer, viewer, auditor).\n\n**Where Used**:\n\n- User permissions\n- Access control\n- Security policies\n\n**Related Concepts**: Authorization, Cedar, Security\n\n**Roles**: Admin, Operator, Developer, Viewer, Auditor\n\n---\n\n### Registry\n\n**Definition**: OCI-compliant repository for storing and distributing extensions.\n\n**Where Used**:\n\n- Extension publishing\n- Version management\n- Package distribution\n\n**Related Concepts**: OCI, Package, Distribution\n\n**See Also**: OCI Registry Guide\n\n---\n\n### REST API\n\n**Definition**: HTTP endpoints exposing platform operations to external systems.\n\n**Where Used**:\n\n- External integration\n- Web UI backend\n- Programmatic access\n\n**Related Concepts**: API, Integration, HTTP\n\n**Endpoint**: `http://localhost:9090`\n\n**See Also**: REST API Documentation\n\n---\n\n### Rollback\n\n**Definition**: Reverting a failed workflow or operation to previous stable state.\n\n**Where Used**:\n\n- Failure recovery\n- Deployment safety\n- State restoration\n\n**Related Concepts**: Workflow, Checkpoint, Recovery\n\n**Commands**:\n\n```\nprovisioning batch rollback <workflow-id>\n```\n\n---\n\n### RustyVault\n\n**Definition**: Rust-based secrets management backend for KMS.\n\n**Where Used**:\n\n- Key storage\n- Secret encryption\n- Configuration protection\n\n**Related Concepts**: KMS, Security, Encryption\n\n**See Also**: RustyVault KMS Guide\n\n---\n\n## S\n\n### Schema\n\n**Definition**: Nickel type definition specifying structure and validation rules.\n\n**Where Used**:\n\n- Configuration validation\n- Type safety\n- Documentation\n\n**Related Concepts**: Nickel, Validation, Type\n\n**Example**:\n\n```\nlet ServerConfig = {\n    hostname | string,\n    cores | number,\n    memory | number,\n} in\nServerConfig\n```\n\n**See Also**: Nickel Development\n\n---\n\n### Secrets Management\n\n**Definition**: System for secure storage and retrieval of sensitive data.\n\n**Where Used**:\n\n- Password storage\n- API keys\n- Certificates\n\n**Related Concepts**: KMS, Security, Encryption\n\n**See Also**: Dynamic Secrets Implementation\n\n---\n\n### Security System\n\n**Definition**: Comprehensive enterprise-grade security with 12 components (Auth, Cedar, MFA, KMS, Secrets, Compliance, etc.).\n\n**Where Used**:\n\n- User authentication\n- Access control\n- Data protection\n\n**Related Concepts**: Auth, Authorization, MFA, KMS, Audit\n\n**See Also**: Security System Implementation\n\n---\n\n### Server\n\n**Definition**: Virtual machine or physical host managed by the platform.\n\n**Where Used**:\n\n- Infrastructure provisioning\n- Compute resources\n- Deployment targets\n\n**Related Concepts**: Infrastructure, Provider, Taskserv\n\n**Commands**:\n\n```\nprovisioning server create\nprovisioning server list\nprovisioning server ssh <hostname>\n```\n\n**See Also**: Infrastructure Management\n\n---\n\n### Service\n\n**Definition**: A running application or daemon (interchangeable with Taskserv in many contexts).\n\n**Where Used**:\n\n- Service management\n- Application deployment\n- System administration\n\n**Related Concepts**: Taskserv, Daemon, Application\n\n**See Also**: Service Management Guide\n\n---\n\n### Shortcut\n\n**Definition**: Abbreviated command alias for faster CLI operations.\n\n**Where Used**:\n\n- Daily operations\n- Quick commands\n- Productivity enhancement\n\n**Related Concepts**: CLI, Command, Alias\n\n**Examples**:\n\n- `provisioning s create` → `provisioning server create`\n- `provisioning ws list` → `provisioning workspace list`\n- `provisioning sc` → Quick reference\n\n**See Also**: [CLI Reference](../infrastructure/cli-reference.md)\n\n---\n\n### SOPS (Secrets OPerationS)\n\n**Definition**: Encryption tool for managing secrets in version control.\n\n**Where Used**:\n\n- Configuration encryption\n- Secret management\n- Secure storage\n\n**Related Concepts**: Encryption, Security, Age\n\n**Version**: 3.10.2\n\n**Commands**:\n\n```\nprovisioning sops edit <file>\n```\n\n---\n\n### SSH (Secure Shell)\n\n**Definition**: Encrypted remote access protocol with temporal key support.\n\n**Where Used**:\n\n- Server administration\n- Remote commands\n- Secure file transfer\n\n**Related Concepts**: Security, Server, Remote Access\n\n**Commands**:\n\n```\nprovisioning server ssh <hostname>\nprovisioning ssh connect <server>\n```\n\n**See Also**: SSH Temporal Keys User Guide\n\n---\n\n### State Management\n\n**Definition**: Tracking and persisting workflow execution state.\n\n**Where Used**:\n\n- Workflow recovery\n- Progress tracking\n- Failure handling\n\n**Related Concepts**: Workflow, Checkpoint, Orchestrator\n\n---\n\n## T\n\n### Task\n\n**Definition**: A unit of work submitted to the orchestrator for execution.\n\n**Where Used**:\n\n- Workflow execution\n- Job processing\n- Operation tracking\n\n**Related Concepts**: Operation, Workflow, Orchestrator\n\n---\n\n### Taskserv\n\n**Definition**: An installable infrastructure service (Kubernetes, PostgreSQL, Redis, etc.).\n\n**Where Used**:\n\n- Service installation\n- Application deployment\n- Infrastructure components\n\n**Related Concepts**: Service, Extension, Package\n\n**Location**: `provisioning/extensions/taskservs/{category}/{name}/`\n\n**Commands**:\n\n```\nprovisioning taskserv create <name>\nprovisioning taskserv list\nprovisioning test quick <taskserv>\n```\n\n**See Also**: Taskserv Developer Guide\n\n---\n\n### Template\n\n**Definition**: Parameterized configuration file supporting variable substitution.\n\n**Where Used**:\n\n- Configuration generation\n- Infrastructure customization\n- Deployment automation\n\n**Related Concepts**: Config, Generation, Customization\n\n**Location**: `provisioning/templates/`\n\n---\n\n### Test Environment\n\n**Definition**: Containerized isolated environment for testing taskservs and clusters.\n\n**Where Used**:\n\n- Development testing\n- CI/CD integration\n- Pre-deployment validation\n\n**Related Concepts**: Container, Testing, Validation\n\n**Commands**:\n\n```\nprovisioning test quick <taskserv>\nprovisioning test env single <taskserv>\nprovisioning test env cluster <cluster>\n```\n\n**See Also**: [Test Environment Guide](../testing/test-environment-guide.md)\n\n---\n\n### Topology\n\n**Definition**: Multi-node cluster configuration template (Kubernetes HA, etcd cluster, etc.).\n\n**Where Used**:\n\n- Cluster testing\n- Multi-node deployments\n- Production simulation\n\n**Related Concepts**: Test Environment, Cluster, Configuration\n\n**Examples**: kubernetes_3node, etcd_cluster, kubernetes_single\n\n---\n\n### TOTP (Time-based One-Time Password)\n\n**Definition**: MFA method generating time-sensitive codes.\n\n**Where Used**:\n\n- Two-factor authentication\n- MFA enrollment\n- Security enhancement\n\n**Related Concepts**: MFA, Security, Auth\n\n**Commands**:\n\n```\nprovisioning mfa totp enroll\nprovisioning mfa totp verify <code>\n```\n\n---\n\n### Troubleshooting\n\n**Definition**: System problem diagnosis and resolution guidance.\n\n**Where Used**:\n\n- Problem solving\n- Error resolution\n- System debugging\n\n**Related Concepts**: Diagnostics, Guide, Support\n\n**See Also**: Troubleshooting Guide\n\n---\n\n## U\n\n### UI (User Interface)\n\n**Definition**: Visual interface for platform operations (Control Center, Web UI).\n\n**Where Used**:\n\n- Visual management\n- Guided workflows\n- Monitoring dashboards\n\n**Related Concepts**: Control Center, Platform Service, GUI\n\n---\n\n### Update\n\n**Definition**: Process of upgrading infrastructure components to newer versions.\n\n**Where Used**:\n\n- Version management\n- Security patches\n- Feature updates\n\n**Related Concepts**: Version, Migration, Upgrade\n\n**Commands**:\n\n```\nprovisioning version check\nprovisioning version apply\n```\n\n**See Also**: Update Infrastructure Guide\n\n---\n\n## V\n\n### Validation\n\n**Definition**: Verification that configuration or infrastructure meets requirements.\n\n**Where Used**:\n\n- Configuration checks\n- Schema validation\n- Pre-deployment verification\n\n**Related Concepts**: Schema, Nickel, Check\n\n**Commands**:\n\n```\nprovisioning validate config\nprovisioning validate infrastructure\n```\n\n**See Also**: [Config Validation](../provisioning/docs/CONFIG_VALIDATION.md)\n\n---\n\n### Version\n\n**Definition**: Semantic version identifier for components and compatibility.\n\n**Where Used**:\n\n- Component versioning\n- Compatibility checking\n- Update management\n\n**Related Concepts**: Update, Dependency, Compatibility\n\n**Commands**:\n\n```\nprovisioning version\nprovisioning version check\nprovisioning taskserv check-updates\n```\n\n---\n\n## W\n\n### WebAuthn\n\n**Definition**: FIDO2-based passwordless authentication standard.\n\n**Where Used**:\n\n- Hardware key authentication\n- Passwordless login\n- Enhanced MFA\n\n**Related Concepts**: MFA, Security, FIDO2\n\n**Commands**:\n\n```\nprovisioning mfa webauthn enroll\nprovisioning mfa webauthn verify\n```\n\n---\n\n### Workflow\n\n**Definition**: A sequence of related operations with dependency management and state tracking.\n\n**Where Used**:\n\n- Complex deployments\n- Multi-step operations\n- Automated processes\n\n**Related Concepts**: Batch Operation, Orchestrator, Task\n\n**Commands**:\n\n```\nprovisioning workflow list\nprovisioning workflow status <id>\nprovisioning workflow monitor <id>\n```\n\n**See Also**: [Batch Workflow System](../guides/from-scratch.md)\n\n---\n\n### Workspace\n\n**Definition**: An isolated environment containing infrastructure definitions and configuration.\n\n**Where Used**:\n\n- Project isolation\n- Environment separation\n- Team workspaces\n\n**Related Concepts**: Infrastructure, Config, Environment\n\n**Location**: `workspace/{name}/`\n\n**Commands**:\n\n```\nprovisioning workspace list\nprovisioning workspace switch <name>\nprovisioning workspace create <name>\n```\n\n**See Also**: Workspace Switching Guide\n\n---\n\n## X-Z\n\n### YAML\n\n**Definition**: Data serialization format used for Kubernetes manifests and configuration.\n\n**Where Used**:\n\n- Kubernetes deployments\n- Configuration files\n- Data interchange\n\n**Related Concepts**: Config, Kubernetes, Data Format\n\n---\n\n## Symbol and Acronym Index\n\n| Symbol/Acronym | Full Term | Category |\n| ---------------- | ----------- | ---------- |\n| ADR | Architecture Decision Record | Architecture |\n| API | Application Programming Interface | Integration |\n| CLI | Command-Line Interface | User Interface |\n| GDPR | General Data Protection Regulation | Compliance |\n| JWT | JSON Web Token | Security |\n| Nickel | Nickel Configuration Language | Configuration |\n| KMS | Key Management Service | Security |\n| MCP | Model Context Protocol | Platform |\n| MFA | Multi-Factor Authentication | Security |\n| OCI | Open Container Initiative | Packaging |\n| PAP | Project Architecture Principles | Architecture |\n| RBAC | Role-Based Access Control | Security |\n| REST | Representational State Transfer | API |\n| SOC2 | Service Organization Control 2 | Compliance |\n| SOPS | Secrets OPerationS | Security |\n| SSH | Secure Shell | Remote Access |\n| TOTP | Time-based One-Time Password | Security |\n| UI | User Interface | User Interface |\n\n---\n\n## Cross-Reference Map\n\n### By Topic Area\n\n**Infrastructure**:\n\n- Infrastructure, Server, Cluster, Provider, Taskserv, Module\n\n**Security**:\n\n- Auth, Authorization, JWT, MFA, TOTP, WebAuthn, Cedar, KMS, Secrets Management, RBAC, Break-Glass\n\n**Configuration**:\n\n- Config, Nickel, Schema, Validation, Environment, Layer, Workspace\n\n**Workflow & Operations**:\n\n- Workflow, Batch Operation, Operation, Task, Orchestrator, Checkpoint, Rollback\n\n**Platform Services**:\n\n- Orchestrator, Control Center, MCP, API Gateway, Platform Service\n\n**Documentation**:\n\n- Glossary, Guide, ADR, Cross-Reference, Internal Link, Anchor Link\n\n**Development**:\n\n- Extension, Plugin, Template, Module, Integration\n\n**Testing**:\n\n- Test Environment, Topology, Validation, Health Check\n\n**Compliance**:\n\n- Compliance, GDPR, Audit, Security System\n\n### By User Journey\n\n**New User**:\n\n1. Glossary (this document)\n2. Guide\n3. Quick Reference\n4. Workspace\n5. Infrastructure\n6. Server\n7. Taskserv\n\n**Developer**:\n\n1. Extension\n2. Provider\n3. Taskserv\n4. Nickel\n5. Schema\n6. Template\n7. Plugin\n\n**Operations**:\n\n1. Workflow\n2. Orchestrator\n3. Monitoring\n4. Troubleshooting\n5. Security\n6. Compliance\n\n---\n\n## Terminology Guidelines\n\n### Writing Style\n\n**Consistency**: Use the same term throughout documentation (for example, "Taskserv" not "task service" or "task-serv")\n\n**Capitalization**:\n\n- Proper nouns and acronyms: CAPITALIZE (Nickel, JWT, MFA)\n- Generic terms: lowercase (server, cluster, workflow)\n- Platform-specific terms: Title Case (Taskserv, Workspace, Orchestrator)\n\n**Pluralization**:\n\n- Taskservs (not taskservices)\n- Workspaces (standard plural)\n- Topologies (not topologys)\n\n### Avoiding Confusion\n\n| Don't Say | Say Instead | Reason |\n| ----------- | ------------- | -------- |\n| "Task service" | "Taskserv" | Standard platform term |\n| "Configuration file" | "Config" or "Settings" | Context-dependent |\n| "Worker" | "Agent" or "Task" | Clarify context |\n| "Kubernetes service" | "K8s taskserv" or "K8s Service resource" | Disambiguate |\n\n---\n\n## Contributing to the Glossary\n\n### Adding New Terms\n\n1. Alphabetical placement in appropriate section\n2. Include all standard sections:\n   - Definition\n   - Where Used\n   - Related Concepts\n   - Examples (if applicable)\n   - Commands (if applicable)\n   - See Also (links to docs)\n\n3. Cross-reference in related terms\n4. Update Symbol and Acronym Index if applicable\n5. Update Cross-Reference Map\n\n### Updating Existing Terms\n\n1. Verify changes don't break cross-references\n2. Update "Last Updated" date at top\n3. Increment version if major changes\n4. Review related terms for consistency\n\n---\n\n## Version History\n\n| Version | Date | Changes |\n| --------- | ------ | --------- |\n| 1.0.0 | 2025-10-10 | Initial comprehensive glossary |\n\n---\n\n**Maintained By**: Documentation Team\n**Review Cycle**: Quarterly or when major features are added\n**Feedback**: Please report missing or unclear terms via issues
