> ## Documentation Index > Fetch the complete documentation index at: https://docs.parmanasystems.com/llms.txt > Use this file to discover all available pages before exploring further. # Glossary > Every term used on this site, mapped to its real source. | Term | Meaning | Source | | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------ | | **Policy** | A named, versioned, ordered list of rules; first match wins, no match rejects | [Policies and the decision](/concepts/policies-and-the-decision) | | **`boundSignals`** | A policy's optional map from a signal key to an `intent` dot-path (e.g. `{ "vendorId": "target" }`); `SignalIntentBinder` rejects a transaction whose declared signal doesn't exactly equal the bound `intent` field, before any rule evaluates | [Policies and the decision](/concepts/policies-and-the-decision), [Security](/security/overview) | | **`SignalIntentBinder`** | Checks every `boundSignals` entry, `packages/policy/src/SignalIntentBinder.ts`; invoked by `RuntimeEngine` immediately before `PolicyEngine.evaluate` | [Policies and the decision](/concepts/policies-and-the-decision) | | **Fail-closed** | The absence of a matching rule, a missing connector, or a failed check always denies, there is no default-allow path anywhere in this system | [Policies and the decision](/concepts/policies-and-the-decision) | | **Authority** | The entity empowered to authorize execution within a trust domain | `packages/shared/src/domain/authority.ts` | | **Authorization** | A grant, from an Authority, for a specific business purpose | `packages/shared/src/domain/authorization.ts` | | **Intent** | The specific action + target + parameters an Authority intends to execute | `packages/shared/src/domain/intent.ts` | | **Business Transaction** | The immutable input to policy evaluation, combining Authority + Authorization + Intent + a Policy reference | `packages/shared/src/domain/business-transaction.ts` | | **Decision** | The immutable result of evaluating an Intent against a Policy, `APPROVED` or `REJECTED` | `packages/shared/src/domain/decision.ts` | | **Execution** | What actually happened after a Decision, status, mode, evidence | `packages/shared/src/domain/execution.ts` | | **Execution Trust Record** | The canonical, append-only, signed aggregate of a Business Transaction's complete history | [Execution trust records](/concepts/execution-trust-records) | | **Signed Execution Authorization** | The v1 envelope: a signed, content-bound, single-use, time-bounded proof that Parmana authorized one specific execution | [Execution authorization](/concepts/execution-authorization) | | **Execution Permit** | Two different things share this name. An earlier prototype (`packages/shared/src/domain/execution-permit.ts`, added and deleted the same day) is gone, do not treat old references to it as shipped behavior. A separate, currently real `ExecutionPermit` exists in `@parmana/execution-control`, consumed only by `@parmana/receipt` and tutorials 53-56, disconnected from `packages/runtime` and `packages/api`. | [@parmana/execution-control](/reference/execution-control) | | **`businessTransactionHash`** | The canonical content hash bound into a Signed Execution Authorization's payload, the mechanism that closes the check-vs-use (TOCTOU) gap | [Content Binding & TOCTOU](/concepts/content-binding-toctou) | | **Execution Gateway** | The sole boundary that recomputes `businessTransactionHash` and releases verified content to a Connector. Wired into the default server unconditionally as of commit `651497a` | [The gateway](/concepts/the-gateway) | | **Gateway Attestation** | A request-bound signature proving the gateway itself, not just Parmana's policy engine, released one specific request | [Gateway attestation](/concepts/gateway-attestation) | | **Connector** | An interface for an enterprise execution system (SAP, a bank's payment rail, etc.) integrated behind the Gateway. `HttpConnector` and `MockConnector` are reference implementations; four enterprise-named connectors exist as explicit, unregistered mocks (`SapConnector`, `WorkdayConnector`, `OracleConnector`, `SalesforceConnector`). `razorpay` registers whenever `RAZORPAY_KEY_ID`/`RAZORPAY_KEY_SECRET` are configured, see [Razorpay](/integrations/razorpay); `hubspot` registers alongside it whenever `HUBSPOT_PRIVATE_APP_TOKEN` is configured, see [HubSpot](/integrations/hubspot). A third connector, `vendor-payment`, was previously registered unconditionally in the default server; it has since been removed from the repository entirely. | `packages/api/src/bootstrap/createConnectorRegistry.ts` | | **Execution Control** | Gateway-authenticated, session-scoped credential isolation for connectors. Real, tested, and wired into the default server for the two registered connectors (`razorpay`, `hubspot`); not yet a general-purpose claim for arbitrary connectors | [Credential isolation](/concepts/credential-isolation) | | **Session Credential** | A single-use, time-bounded credential lease issued only after gateway attestation succeeds, consumed exactly once by a connector | [Credential isolation](/concepts/credential-isolation) | | **Credential Provider** | Resolves a connector's credential from a source (environment variable, static map); never returns a raw value a caller upstream can see | [Credential isolation](/concepts/credential-isolation) | | **Connector Evidence** | What a connector's execution leaves on the trust record: connector ID, version, capability, sanitized endpoint, a `connectorEvidenceHash`, never the credential itself | [Execution trust records](/concepts/execution-trust-records) | | **Nonce** | A single-use value inside an authorization payload; a receiving system must reject a repeat | [Execution authorization](/concepts/execution-authorization) | | **Verification** | The 3-check process (integrity, signature, authorization binding) confirming an Execution Trust Record's validity | [Verification](/verification/overview) | | **Replay** | Two unconnected things share this name: a signature recheck (`POST /replay`) and a disconnected engine (`packages/replay`) that genuinely re-evaluates the recorded policy decision, scoped to one execution, not reachable from the API. | [Replay](/replay/overview) | | **Receipt** | A signed, independently-verifiable attestation of an Execution Trust Record's state | `packages/shared/src/domain/receipt.ts` | | **TOCTOU** | Time-Of-Check-To-Time-Of-Use, the gap between what was authorized and what was actually executed | [Content Binding & TOCTOU](/concepts/content-binding-toctou) | | **TTL** | Time-to-live; the bounded window an authorization is valid for, capped to limit exposure from other gaps (e.g. an unshared `NonceStore`) | CLAIMS.md 3.2 |