kernel.owosgv.com

OVAK — OWOS Verified Access Kernel

OVAK runs frozen Kernel V1 internals. This edge is the only sanctioned way for a federated module to submit canonical truth or replay it. Identity is verified against OVIN. Module callers are cryptographically authenticated. Every write passes through the frozen write gate — registry, proof-bundle, idempotency and hash-chain rules included.

Edge readiness

Checking…

Federation contracts

POST /api/public/federation/events: Canonical event submission. Signed module envelope + OVIN bearer token for passport actors. Returns event_id, ledger_seq, recorded_at and admission result.
GET /api/public/federation/replay: Authenticated ledger replay by ledger_seq cursor with correction lineage. Raw truth only — projections belong to OCLL.
POST /api/public/federation/passport-mirror: OVIN-only mirror refresh. Kernel never mints identity.

Identity establishes compatibility. Consent establishes authority. Kernel records facts.