Event Consumption Model¶
Executive Summary¶
Event Consumption Model defines how Algosure modules and platform capabilities consume events. Consumers react to facts without mutating source ownership incorrectly.
Why This Exists¶
Event consumers drive cross-domain processes, AIOS orchestration, notifications, analytics projections, integration follow-up, and audit enrichment. Without clear rules, consumers can duplicate source facts or create hidden coupling.
Owner¶
The owner is the Chief Product Officer and Enterprise Architect.
Business Value¶
Governed consumption makes event-driven workflows reliable, auditable, and safe across tenants and Domains.
Consumption Flow¶
flowchart LR
Event[Published Event]
Handler[Consumer Handler]
Idempotency[Idempotency Check]
Reaction[Owned Reaction]
Projection[Projection or Workflow State]
Audit[Audit Record]
Event --> Handler
Handler --> Idempotency
Idempotency --> Reaction
Reaction --> Projection
Reaction --> Audit
Consumer Types¶
| Consumer | Valid Reaction |
|---|---|
| Domain module | Update own projections, start own workflow, request source module behavior through owned boundaries. |
| Workflow process | Advance cross-domain process state based on accepted facts. |
| AIOS | Assemble context, delegate Digital Professional work, produce recommendations, request approvals. |
| Notification | Create notification intent or delivery workflow from subscribed facts. |
| Analytics | Build projections, snapshots, metrics, reports, and executive insights. |
| Integration boundary | Publish external integration events or trigger external follow-up where approved. |
| Audit trail | Record event receipt, processing status, and traceability evidence. |
Consumer Rules¶
| Rule | Requirement |
|---|---|
| Consumers are idempotent | Reprocessing the same event must not duplicate irreversible effects. |
| Consumers own their reactions | The source publisher does not own consumer behavior. |
| Consumers do not mutate source ownership | A consumer must not directly change another module's records or facts. |
| Consumers respect tenant context | Event handling must validate tenant and organization context before acting. |
| Consumers handle unknown versions safely | Unknown or unsupported event versions must be rejected, parked, or handled by compatibility policy. |
| Consumers record failures | Failed processing must be visible for retry, dead-letter handling, and audit. |
AIOS Consumption Rules¶
| Rule | Meaning |
|---|---|
| AIOS reacts to events as triggers | Events may start or advance AIOS work, but AIOS output remains governed. |
| AIOS requests authorized context | Event metadata is not enough for full context; AIOS must request permitted source context. |
| AIOS returns proposals through workflows | Recommendations, drafts, and decisions are accepted only through owning application services. |
| AIOS events stay in Intelligence | AI task and reasoning facts are owned by Intelligence. |
Non-Implementation Boundary¶
This document does not define handler class names, subscriber registration, queue consumers, framework annotations, storage mechanisms, or processing threads.