Control plane
ENI6MA Control
AvailableRegistry, durable nonce ledger, and visibility. Control is how Gate knows which identities are alive, which nonces are spent, and what just happened at the boundary.
Three pieces, one plane
Registry
AvailableActivate, deactivate, and resolve circuit handles. Revocation is one state change, not a rotation campaign across every workload.
Nonce ledger
AvailableReserve, respond, commit. Nonces burn before proof validation with a configurable TTL (default 300 seconds).
Visibility
AvailableBurn events and access logs from Gate, surfaced for operators and auditors.
What Control guarantees
ENI6MA Control registry activates, deactivates, and resolves circuit handles for Gate checks.Shippingregistry-service at registry.eni6ma.net.
The Control ledger reserves and burns nonces before proof validation, so every submission spends the nonce.Shippingledger-service reserve/response/commit with NONCE_TTL_SECONDS 300.Holds under the reference architecture
Control visibility surfaces burn events and access logs from Gate for operational review.Shippingledger-visibility-service at ledger.eni6ma.net.
Deployment shapes
- Managed Control for Team and Enterprise Gate subscriptions.
- Self-hosted Control for Sovereign and air-gapped estates.
- Durable ledger deployment is a reference-architecture requirement for absolute claims.
- Services: registry.eni6ma.net and ledger.eni6ma.net for managed paths.