# Provisioning Platform Glossary\n\n**Last Updated**: 2025-10-10\n**Version**: 1.0.0\n\nThis glossary defines key terminology used throughout the Provisioning Platform documentation. Terms are listed alphabetically with definitions, usage\ncontext, and cross-references to related documentation.\n\n---\n\n## A\n\n### ADR (Architecture Decision Record)\n\n**Definition**: Documentation of significant architectural decisions, including context, decision, and consequences.\n\n**Where Used**:\n\n- Architecture planning and review\n- Technical decision-making process\n- System design documentation\n\n**Related Concepts**: Architecture, Design Patterns, Technical Debt\n\n**Examples**:\n\n- ADR-001: Project Structure\n- ADR-006: CLI Refactoring\n- ADR-009: Complete Security System\n\n**See Also**: Architecture Documentation\n\n---\n\n### Agent\n\n**Definition**: A specialized component that performs a specific task in the system orchestration (for example, autonomous execution units in the\norchestrator).\n\n**Where Used**:\n\n- Task orchestration\n- Workflow management\n- Parallel execution patterns\n\n**Related Concepts**: Orchestrator, Workflow, Task\n\n**See Also**: [Orchestrator Architecture](../architecture/orchestrator-integration-model.md)\n\n---\n\n### Anchor Link\n\n**Definition**: An internal document link to a specific section within the same or different markdown file using the `#` symbol.\n\n**Where Used**:\n\n- Cross-referencing documentation sections\n- Table of contents generation\n- Navigation within long documents\n\n**Related Concepts**: Internal Link, Cross-Reference, Documentation\n\n**Examples**:\n\n- `[See Installation](#installation)` - Same document\n- `[Configuration Guide](config.md#setup)` - Different document\n\n---\n\n### API Gateway\n\n**Definition**: Platform service that provides unified REST API access to provisioning operations.\n\n**Where Used**:\n\n- External system integration\n- Web Control Center backend\n- MCP server communication\n\n**Related Concepts**: REST API, Platform Service, Orchestrator\n\n**Location**: `provisioning/platform/api-gateway/`\n\n**See Also**: REST API Documentation\n\n---\n\n### Auth (Authentication)\n\n**Definition**: The process of verifying user identity using JWT tokens, MFA, and secure session management.\n\n**Where Used**:\n\n- User login flows\n- API access control\n- CLI session management\n\n**Related Concepts**: Authorization, JWT, MFA, Security\n\n**See Also**:\n\n- Authentication Layer Guide\n- Auth Quick Reference\n\n---\n\n### Authorization\n\n**Definition**: The process of determining user permissions using Cedar policy language.\n\n**Where Used**:\n\n- Access control decisions\n- Resource permission checks\n- Multi-tenant security\n\n**Related Concepts**: Auth, Cedar, Policies, RBAC\n\n**See Also**: Cedar Authorization Implementation\n\n---\n\n## B\n\n### Batch Operation\n\n**Definition**: A collection of related infrastructure operations executed as a single workflow unit.\n\n**Where Used**:\n\n- Multi-server deployments\n- Cluster creation\n- Bulk taskserv installation\n\n**Related Concepts**: Workflow, Operation, Orchestrator\n\n**Commands**:\n\n```\nprovisioning batch submit workflow.ncl\nprovisioning batch list\nprovisioning batch status <id>\n```\n\n**See Also**: [Batch Workflow System](../guides/from-scratch.md)\n\n---\n\n### Break-Glass\n\n**Definition**: Emergency access mechanism requiring multi-party approval for critical operations.\n\n**Where Used**:\n\n- Emergency system access\n- Incident response\n- Security override scenarios\n\n**Related Concepts**: Security, Compliance, Audit\n\n**Commands**:\n\n```\nprovisioning break-glass request "reason"\nprovisioning break-glass approve <id>\n```\n\n**See Also**: Break-Glass Training Guide\n\n---\n\n## C\n\n### Cedar\n\n**Definition**: Amazon's policy language used for fine-grained authorization decisions.\n\n**Where Used**:\n\n- Authorization policies\n- Access control rules\n- Resource permissions\n\n**Related Concepts**: Authorization, Policies, Security\n\n**See Also**: Cedar Authorizatio
