Skip to content

2finity CORE

What CORE is, and what it is not.

A capability-driven operating layer that interfaces connect to. CORE is the authority; everything with a screen is a view.

2finity CORE and the interfaces and participants connected to it

CORE selected. Ten layers, one capability contract.

CORE
The shared operating layer. Ten layers: Identity, Organizations, People, Relationships, Knowledge, Workflows, Commerce, Finance, Communication, Data.
Website (interface)
Public sites and portals that read content and catalog data and submit forms through CORE. Uses the Identity, Knowledge, Commerce and Data layers. Example capabilities: page.get, catalog.list, form.submit.
Applications (interface)
Internal, mobile and dashboard apps: views into CORE with the signed-in identity's permissions. Uses the Identity, Organizations, People, Workflows and Data layers. Example capabilities: customer.get, workflow.start, approval.decide.
Chat (interface)
2finity.chat and other conversational interfaces: language resolved to capabilities, with approval. Uses the Identity, Knowledge, Workflows, Finance and Communication layers. Example capabilities: site.content.update, invoice.create, permission.grant.
Agents (interface)
Actors with their own identity, an owner and scoped permissions; every action leaves an audit event. Uses the Identity, Knowledge, Workflows and Communication layers. Example capabilities: site.publish, deployment.rollback, workflow.start.
People (participant)
Humans in any context: professional, employee, customer or supplier, with one identity throughout. Uses the Identity, People, Relationships and Communication layers. Example capabilities: customer.get, permission.grant, message.send.
Companies (participant)
Organizations that own their data, run their workflows and decide who and what may act inside them. Uses the Organizations, People, Relationships, Commerce and Finance layers. Example capabilities: organization.get, invoice.create, order.update.
Partners (participant)
Other organizations connected by a relationship: suppliers, resellers and agencies see what it grants. Uses the Identity, Relationships, Commerce and Data layers. Example capabilities: catalog.product.get, order.update, permission.grant.
Enterprise (participant)
Large organizations running CORE in an isolated deployment with their own identity provider and policies. Uses the Identity, Organizations, Workflows, Finance and Data layers. Example capabilities: permission.grant, deployment.publish, workflow.start.

Definition

The operating layer

A website, a portal, an internal app, a mobile app, a chat client, an agent, an API, a partner app and an enterprise integration are interfaces. Each connects to CORE, and none of them owns the data it shows.

CORE holds what every interface needs and no interface should rebuild: identity, permissions, the entities of the ten layers and the events that record what happened to them. Interfaces read and write through capabilities; the model, the checks and the history stay in one place.

Interfaces

  • Website
  • Portal
  • Internal app
  • Mobile app
  • 2finity.chat
  • Agent
  • API
  • Partner app
  • Enterprise integration

What it is not

Not a CMS. Not a database. Not a gateway.

CORE is easy to mistake for the tools it replaces. It is none of them.

NotCMS
Content is one layer of ten, versioned and permission-checked like everything else.
NotDatabase
You never query it directly; every read and write is a capability with a permission check.
NotAPI gateway
Capabilities carry identity, permission and audit with them; routes do not.
NotAdmin dashboard
A dashboard is one consumer of CORE, not the place where the truth lives.
NotChatbot
Chat is one interface among many; CORE remains the authority.

The model

Ten layers

Identity, Organizations, People, Relationships, Knowledge, Workflows, Commerce, Finance, Communication and Data. Each layer answers one question about the organization, holds its own entity types and exposes named capabilities.

No interface owns a layer. A webshop reads Commerce, a payroll app reads People and Finance, an agent reads whatever its owner may read, and all of them see the same records.

01

Identity

Who or what is acting?

Who or what is acting: humans, agents and service identities, known once and recognized in every context.

Every action in CORE starts with an identity. A person, an agent or a service authenticates once and carries that identity into every organization and role it is connected to. Identity holds credentials, sessions and the links to roles and permissions; it does not hold business data. 2finity Identity is the planned OIDC provider for this layer.

Example entities

  • Identity
  • Credential
  • Session
  • Service identity
  • Agent identity
  • Permission grant
  • Identity link

Example capabilities

  • identity.current
  • identity.verify
  • identity.link
  • session.create
  • session.revoke
  • permission.grant
  • permission.revoke
  • permission.check
02

Organizations

Inside which boundary?

Companies, teams, departments and business units: the boundaries inside which people, data and permissions live.

An organization is the unit of ownership in CORE. It owns entities, defines teams and departments, and sets the boundary that permissions and isolation are enforced against. One identity can belong to many organizations with a different role in each. Networks of organizations connect through relationships, never by sharing a database.

Example entities

  • Organization
  • Team
  • Department
  • Business unit
  • Membership
  • Legal entity
  • Organization settings

Example capabilities

  • organization.get
  • organization.create
  • organization.update
  • team.create
  • team.member.add
  • department.create
  • membership.invite
  • membership.revoke
03

People

Who do we work with?

Customers, employees, professionals, suppliers and leads: the people an organization works with, as one record each.

People are the humans an organization knows about, independent of how they arrived. A customer, an employee and a supplier contact are the same kind of record with different relationships attached. When a person also has an identity, the two are linked, so a customer who later joins as an employee is still one person. Leads are people whose relationship is not confirmed yet.

Example entities

  • Person
  • Customer
  • Employee
  • Professional
  • Supplier contact
  • Lead
  • Contact detail
  • Address

Example capabilities

  • person.get
  • person.create
  • person.update
  • person.merge
  • customer.get
  • lead.create
  • lead.qualify
  • lead.list
04

Relationships

How are they connected?

Connections between people, organizations, roles and agents: who is a customer, employee, supplier, partner or owner of whom.

Relationships are first-class records, not foreign keys hidden in a table. Each one names two parties, a type and a validity period, and can carry its own terms. Authorization reads relationships: a person edits a website because a relationship makes them an editor of that organization. The same model links agents to the people and organizations that own them.

Example entities

  • Relationship
  • Relationship type
  • Role
  • Partnership
  • Customer relationship
  • Supplier relationship
  • Agent ownership
  • Mandate

Example capabilities

  • relationship.create
  • relationship.get
  • relationship.list
  • relationship.end
  • role.grant
  • role.revoke
  • partner.link
  • agent.owner.set
05

Knowledge

What do we know and publish?

Documents, structured knowledge, policies, published content and context: what the organization knows and shows.

Knowledge holds everything an organization has written down: internal documents, policies, product knowledge, website pages and the context agents need to act well. Content is versioned, so a change to a homepage headline is a revision that can be previewed, approved and rolled back. Knowledge is scoped by organization and permission, so an agent only reads what its owner may read.

Example entities

  • Document
  • Page
  • Policy
  • Knowledge article
  • Revision
  • Collection
  • Context
  • Glossary term

Example capabilities

  • site.content.update
  • site.publish
  • page.get
  • page.create
  • document.create
  • document.get
  • policy.get
  • knowledge.search
06

Workflows

How does work move?

Tasks, approvals, automations, processes, triggers and state transitions: how work moves and who signs off.

A workflow describes how an entity moves from one state to another and who has to agree along the way. Approvals, scheduled jobs, triggers on events and multi-step processes are all workflows. Agents take part as actors: an agent can start a workflow and propose a step, and a human approval can be required before anything is published or paid. Deployments and rollbacks are workflows over revisions.

Example entities

  • Workflow
  • Task
  • Approval
  • Trigger
  • Automation
  • Process definition
  • Step
  • Deployment

Example capabilities

  • workflow.start
  • workflow.get
  • task.create
  • task.complete
  • approval.request
  • approval.decide
  • deployment.publish
  • deployment.rollback
07

Commerce

What do we sell?

Products, services, catalogs, quotes, carts and orders: what an organization sells and how it is bought.

Commerce models the offer and the transaction. Products and services sit in catalogs with prices and variants; quotes, carts and orders record what a person or organization is buying. Because buyers are People and sellers are Organizations, a webshop, a sales agent and a partner portal operate on the same order. Payment and invoicing hand over to Finance.

Example entities

  • Product
  • Service
  • Catalog
  • Variant
  • Price
  • Quote
  • Cart
  • Order

Example capabilities

  • catalog.list
  • catalog.product.get
  • catalog.product.update
  • catalog.product.publish
  • quote.create
  • cart.add
  • order.create
  • order.update
08

Finance

What is owed and paid?

Invoices, payments, costs and financial records: the money side of every order, contract and relationship.

Finance records what is owed, paid and spent. Invoices reference orders and people, payments settle invoices, costs attach to projects and organizations. Nothing here moves money by itself: a payment provider or bank is an interface that reports into CORE, and a capability like invoice.create is subject to the same identity and permission checks as any other action.

Example entities

  • Invoice
  • Invoice line
  • Payment
  • Credit note
  • Cost
  • Account
  • Ledger entry
  • Tax rate

Example capabilities

  • invoice.create
  • invoice.get
  • invoice.send
  • invoice.void
  • payment.record
  • payment.list
  • cost.record
  • ledger.export
09

Communication

How do we talk?

Messages, conversations, notifications and threads between people, agents and organizations.

Communication is where humans and agents talk to each other and to the organization. A conversation can be a support thread, an internal discussion, a chat with an agent or a notification stream. 2finity.chat is one planned interface to this layer; email and messaging integrations are others. Every message is linked to the people, entities and capabilities it refers to, so a chat message that changes a headline is traceable to the revision it produced.

Example entities

  • Conversation
  • Message
  • Thread
  • Notification
  • Channel
  • Participant
  • Template
  • Inbox

Example capabilities

  • conversation.create
  • conversation.get
  • message.send
  • message.list
  • notification.send
  • notification.subscribe
  • channel.connect
  • thread.resolve
10

Data

What happened, and what do we have?

Shared structured entities, events, analytics and operational data: the records and signals every layer produces.

Data is the common ground under the other layers. Every capability invocation emits an event, every entity change is recorded, and custom entity types extend the model without a new backend. Queries, reports and analytics read from here through the same permission checks as everything else. Agents get data through capabilities, not through a database connection.

Example entities

  • Entity type
  • Record
  • Field
  • Event
  • Audit entry
  • Dataset
  • Report
  • Metric

Example capabilities

  • entity.get
  • entity.list
  • entity.type.define
  • event.emit
  • event.query
  • audit.list
  • report.run
  • form.submit

Mechanics

How a request moves

Every request takes the same path. An interface calls the CoreClient; CORE resolves who is asking, checks whether that identity may invoke the capability on that resource, runs the capability against the layer entities and records an event.

Nothing skips a step. A click in a dashboard, an API call, an agent’s decision and a chat message arrive at the same check and leave the same trace.

  1. Interface (A website, application, agent, API client or chat client makes the request.)
  2. CoreClient (The typed contract every interface uses to reach CORE.)
  3. Identity (Who or what is asking, resolved from the session or token.)
  4. Permission (May this identity invoke this capability on this resource?)
  5. Capability (The named action: validated input, handler, transaction.)
  6. Layer entities (The records the capability reads and changes, each in its layer.)
  7. Event (What happened, by whom, on what, recorded for audit.)
Illustration

Interfaces

UI is optional

A dashboard, a chat, an agent, a website and an API are consumers of the same capabilities. Build the one your users need, or several, and let them disagree about layout while agreeing about the facts.

Because the authority sits in CORE, a new interface is a new view, not a new backend. It inherits identity, permissions and history on its first request.

Next

Go deeper, or start building.