Operator Classes
Classes of operator recognised by the framework
The operator framework recognises distinct classes of operator corresponding to the domains in which they hold mandates. This page describes each class, the capabilities it may exercise, and the responsibilities specific to that class.
Domain-specific authority
Each operator class is authorised to act within a defined domain, deployment, federation, compliance, marketplace, and others. Authority does not transfer across classes; a deployment operator may not exercise marketplace authority, and vice versa. Cross-class action requires a separate mandate for each domain.
Class boundaries are constitutional
The boundaries between operator classes are drawn in the constitution, not by administrative convention. Expanding the scope of a class requires a constitutional amendment, not a board resolution. This prevents scope creep through administrative decision-making and keeps operator authority visibly bounded.
Oversight across classes
Certain governance functions, including oversight of other operators, are reserved to specific classes. The framework designates which classes may audit, which may revoke mandates, and which may initiate the break-glass procedure for another class. Oversight authority is asymmetric by constitutional design.