3.1 Control Plane vs Agent Execution Plane
3.2 Project Scope Model
3.3 Data Flow: Source -> Release -> Pipeline -> Logs/Artifacts
3.4 Runtime Configuration Layers (global / project / environment)
3.5 Pipeline Execution Semantics
3.6 Release Governance Path
3.7 Rollback Architecture (Policy-driven)
3.8 Security and Trust Boundaries
3.9 State and Persistence Model
3.10 Scalability Model
3.11 Failure Modes and Recovery Patterns
3.12 Why This Architecture Works in Practice
16.2 Project Permissions
Orbnetes deployment and release orchestration documentation for operators and platform teams.
Project permissions control what a user can do inside a specific project.
Typical project permission domains:
- blueprints management,
- release creation/execution,
- pipeline operations (stop/rerun),
- approvals actions,
- release sources management,
- project secrets/variables management,
- environments management,
- release storage management,
- agent operations (within project scope behavior).
Key principle:
- project membership grants visibility scope,
- project permissions grant action capability.
Operational guidance:
- assign permissions by responsibility, not by convenience.
- split deploy authority from config authority when risk profile is high.
- review project permissions periodically for drift.