Status. Proposed design only. Nothing in this vault is DG client approval. No application, service or test has been executed; every scenario is Not executed. Fees and dates are open.

Integration ports

Purpose

Code against interfaces, never a vendor. The vault states that identity and email providers, hosting and region are DG decisions (Q09, D08 in Proposal-Decisions-D01-D10).

Ports (Proposed)

Port	Responsibility	Development and test adapter	Real adapter
IdentityProvider	Authenticate, session and MFA for DG administrators	Local stub with fixed synthetic users	Blocked by Q09
EmailSender	Send generic transactional email; report delivery outcome	Mailpit style local sink	Blocked by Q09
Clock	Current time; makes overdue and expiry reproducible (T31)	Controllable fake	System clock
IdGenerator	UUIDv7 identifiers (ADR-0004-UUIDv7-and-Idempotency)	Deterministic fake	Real generator

No file-storage port: document rooms are outside every tier (Scope-Balanced-Manual-Additional).

Rules

Provider credentials are read from the environment by name (Environment-Configuration) and stay server-side. No provider SDK is added before DG chooses the vendor. Staging uses synthetic data only.

Change history

Date	Change
2026-10-20	Created (bootstrap Phase 2)