Skip to content
SSDFTransport
Seed loop 1/11

Integration organ

Integration feeds the machine. Authority governs it.

Motive is not the fleet. Stripe is not the ledger. A webhook is not a grant. The adapter is replaceable. The Observation is not. A provider saying yes is an input — not a completeness condition. The machine is complete.

Proofs T12–T18

Integration pipeline

AUTHENTICATE here is HMAC. It is not AUTH-1002. Fixture secret ssdf-fixture-webhook — verification is real. A production provider brings their own.

  1. CONNECT

    Adapter exists. Completeness does not wait.

  2. AUTHENTICATE

    HMAC / token. Not an AuthorityRecord.

  3. VERIFY

    Bad signature dies here.

  4. NORMALIZE

    Canonical Observation. Provider is replaceable.

  5. INGEST

    Provider event crosses the boundary.

  6. STORE

    Observation spine. grantsAuthority=false.

  7. RECONCILE

    Divergence is visible.

  8. MONITOR

    Freshness, last-known, errors.

  9. RETRY

    Known transition. Do not invent state.

  10. DEGRADE

    Last-known held. Dispatch may wait.

  11. DISCONNECT

    Not a revocation.

  12. RECONNECT

    Reconcile last-known. AUTH unchanged.

  13. OFFBOARD

    Adapter revoked. Records remain.

Integration machine

tms-core

location · Charlotte paper mill · dock

credential none · grantsAuthority = false always

Authority machine

No Gulf AUTH

No active AuthorityRecord grants this action for this carrier. Match ≠ assignment. Capability ≠ authority. Online ≠ authorized. N9 / N16.

Laws

  • Integration tells the machine what the outside world says.
  • Authority establishes permission.
  • Observation is not assignment.
  • A provider yes is an input, not a completeness condition.
  • Integration failure does not revoke authority.
  • Authority revocation does not disconnect integration.

Replaceable adapters

One organ. Six families. The provider is an implementation. Completeness does not wait on a Motive yes.

telematics

  • Motive

    Replaceable ELD adapter. Not SSDF's fleet. Not authority.

    disconnected

  • Samsara

    Replaceable ELD adapter. Same Observation object as Motive.

    proposed

communications

  • Driver app

    Primary radio hop. Not a second inbox.

    connected

  • Public SMS

    Replaceable hop. The CommunicationRecord is the product.

    connected

payments

  • Stripe

    Collects SSDF invoices. Never freight.

    connected

freight

  • Licensed freight feed

    Discovery only. Signal is not a transaction.

    connected

tms

  • Carrier TMS

    The carrier runs itself. SSDF documents.

    degraded

accounting

  • Accounting

    Corporate books. Not freight books.

    proposed

Canonical observation spine

  1. Sep 21, 11:50 PMtms-core · locationCharlotte paper mill · dock · tms-core · tms-loc-cole-1 · grant=false

External identity map

Provider objects bind to SSDF objects. Binding is not employment, not appointment, not authority.

  • motivevehicle motive-veh-401 → as-401
  • motivedriver motive-drv-marcus → dr-marcus
  • samsaravehicle sam-veh-401 → as-401
  • tms-corevehicle ctx-12 → as-cx1
  • tms-coredriver cole-brennan → dr-cole

Reconciliation

No runs yet. Reconcile an adapter. Divergence is visible. It is not invented away.