# Terms Glossary v0.4-pre

Status: pre-release glossary
Date: 2026-06-18

## Canonical Terms

| Term | Meaning |
| --- | --- |
| HUB | Launcher/application access layer with open and company/client contours. |
| Open contour | Public/open HUB branch for simple users and public pool access. |
| Client/company contour | Managed closed HUB context for companies/clients. |
| OPS Product | Operational work/project/card layer. |
| OPS Card | Canonical work object in OPS; Plane Issue/task/work item are aliases or subtypes. |
| OPS Gateway | Scoped MCP/API access layer for agents working with OPS. |
| Agent identity | Gateway execution identity, not a human user and not assistant persona. |
| Agent token | Opaque credential used by Gateway; not user identity. |
| ENGINE | Workflow/dev environment. |
| L1 workflow | NodeDC/React Flow canvas workflow. |
| L2 workflow | Protected Engine execution workflow layer. |
| Runtime workflow id | Engine L2 runtime workflow id, separate from NodeDC L1 workflow id. |
| Runtime event | Event emitted by L2 runtime: workflow/node start/finish/success/error. |
| Assistant | Product assistant capability; exact source model pending AI Workspace pass. |
| Ontology Core | Future platform service/module for canonical entities, relations, aliases, evidence, and resolver rules. |
| Interface Layer | Future UI/workview layer for automation dashboards, maps, forms, and controls. |
| Domain package | Domain-specific ontology extension, e.g. tenders, ecology, transport, robotics, ERP. |

## Alias Rules

| Alias | Canonical term |
| --- | --- |
| Plane Issue | `ops.card` |
| task / ticket / work item | `ops.card` or `ops.card_type`, depending on context |
| Authentik user / OIDC subject / JWT subject | `ndcauth.identity` |
| Launcher service / app | `hub.application` |
| Application tile / app card | `hub.application_card` |
| runtime workflow id | `engine.workflow_l2_runtime_id` |
| L2 execution | `engine.l2_execution` |
| Engine-side OPS / Agent Monitor OPS | `engine.tech_debt.ops_layer`, not OPS Product |
| Tender Agent Monitor UI | `engine.tech_debt.tender_domain_ui`, not future Interface Layer |

## Forbidden Shortcuts

- Do not say "OPS" without specifying OPS Product, OPS Gateway, or ENGINE-side OpsLayer.
- Do not say "workflow" without specifying L1 workflow, L2 workflow, or runtime workflow id when ambiguity matters.
- Do not say "user" when the context needs HUB user, NDCAuth identity, OPS member, or Gateway agent identity.
- Do not say "task" as the root concept when the object is an OPS card.
- Do not treat current tender/Agent Monitor implementation as target architecture.
