GPLink Platform — request path

One partner call, from credential to ledger

GPLink Platform — request path One partner call, from credential to ledger 01 / Partner 02 / Edge 03 / Gateway 04 / Store 05 / Async work Prime Commerce · OAuth2 client creds · 01 / Partner · commerce Prime Commerce OAuth2 client creds commerce FEV3R · mTLS · 01 / Partner · clinical FEV3R mTLS clinical Payment gateway · API key + HMAC · 01 / Partner · settlement Payment gateway API key + HMAC settlement Edge · WAF · load balancer · 02 / Edge · rate per partner Edge WAF · load balancer rate per partner API gateway · five guards in order · 03 / Gateway · 401 403 429 400 409 API gateway five guards in order 401 403 429 400 409 event_record · envelope stored first · 04 / Store · PostgreSQL event_record envelope stored first PostgreSQL Episode queue · group = episode_id · 04 / Store · ordered Episode queue group = episode_id ordered Saga orchestrator · step, compensation · 05 / Async work · writes money Saga orchestrator step, compensation writes money Ledger · double entry · 05 / Async work · halts on mismatch Ledger double entry halts on mismatch Dead letter · envelope + attempts · 05 / Async work · operator replay Dead letter envelope + attempts operator replay orders no shared secret spans two vendors clinical mutual TLS settlement HMAC over body filtered traffic TLS terminated, healthy target envelope written before any rule runs handed to the queue after the 202 in order parallel across episodes posted, both sides settlement halts on mismatch retries exhausted nothing is dropped Legend primary data policy / PII data store data flow

The guards, in order

  • • 401 credential
  • • 403 partner state
  • • 429 quota
  • • 400 schema
  • • 409 idempotency — same key, different body

Why the write comes first

  • • 202 Accepted means stored, not processed
  • • Replay reads PostgreSQL, not a queue window
  • • A partner retry is cheap and safe

Order and money

  • • Strict order inside one episode
  • • One service is allowed to write money
  • • Ledger and rules disagree → settlement halts