{"schemaVersion":"corex.legacy-experience-reconciliation.v1","governance":{"schemaVersion":"corex.legacy-experience-reconciliation.v1","sourceRole":"DESIGN_AND_PRODUCT_DISCOVERY_EVIDENCE_NOT_PRODUCTION_AUTHORITY","prohibitedCarryForward":["synthetic ARR, user, install, uptime, latency or volume metrics","unsupported compliance/certification labels","unsupported Production Ready or Live badges","opaque global trust or identity scores","provider-connected states without current configuration evidence","claims that biometric templates are handled by CoreX when authentication is performed by a platform authenticator","console or admin authority inferred from a user-selected login button instead of trusted role/tenant/policy claims"],"reuseRule":"Reuse navigation, workflow and product structure only when reconciled to current capability and authority state."},"architecturePlanes":[{"plane":0,"legacyName":"Infrastructure","legacyPurpose":"Cloud resources, networking, hardware security","modernMapping":"CoreX Stack deployment, provider boundaries and runtime infrastructure","state":"READY","note":"Retain as infrastructure/deployment layer; do not expose placeholder hardware/security claims."},{"plane":1,"legacyName":"Nodes & Networks","legacyPurpose":"Node management, topology, connectivity","modernMapping":"Service identity, integration channels, deployment topology and provider connectivity","state":"READY","note":"Reframe around channels, service identity and deployment topology."},{"plane":2,"legacyName":"Kernel Authority","legacyPurpose":"Policy engine, authorization decisions","modernMapping":"Living Trust Kernel + Trust Fabric policy","state":"ACTIVE","note":"Now materially implemented through canonical objects, lifecycle, authority preservation and policy evaluation."},{"plane":3,"legacyName":"Defense & Cloak","legacyPurpose":"Security, cloaking, threat detection","modernMapping":"CoreX Defender / Security Posture / state-evidence consistency","state":"READY","note":"Reconcile legacy Defender concepts onto current event, Watch and risk infrastructure; do not revive unsupported cloak/AV claims."},{"plane":4,"legacyName":"Identity","legacyPurpose":"User identity, certificates, authentication","modernMapping":"CoreX Identity & Authenticity + Credentials","state":"READY","note":"Identity assurance is implemented; biometric/device/media providers remain externally gated."},{"plane":5,"legacyName":"Events","legacyPurpose":"Event streaming, audit logging","modernMapping":"Canonical event spine + Living Trust timeline + Audit & Activity","state":"ACTIVE","note":"Current event infrastructure is stronger than the legacy design."},{"plane":6,"legacyName":"Storage","legacyPurpose":"Data storage, encryption, retention","modernMapping":"Credential/event persistence + Evidence Vault + retention policy","state":"GATED","note":"Persistence exists; private Evidence Vault requires storage/KMS/retention binding."},{"plane":7,"legacyName":"Territory","legacyPurpose":"Jurisdiction, compliance, data residency","modernMapping":"Execution territory, region, jurisdiction policy and sovereign deployment","state":"READY","note":"Keep territory as a governance dimension rather than a product."},{"plane":8,"legacyName":"AI/ML","legacyPurpose":"Predictions, anomaly detection, insights","modernMapping":"Explainable Trust Intelligence + CoreX Defender","state":"READY","note":"Deterministic/explainable signals are current; probabilistic AI claims require evidence and validated models."},{"plane":9,"legacyName":"Policy","legacyPurpose":"Business rules, workflows, automation","modernMapping":"Trust Fabric, verifier policy, entitlements and release governance","state":"ACTIVE","note":"Unify mature current policy primitives in Studio."},{"plane":10,"legacyName":"Pods","legacyPurpose":"Sector-specific solutions, verticals","modernMapping":"Product lines, vertical trust profiles and deployable solution packs","state":"READY","note":"Use reusable product/vertical profiles rather than separate trust cores."}],"solutionMappings":[{"category":"Identity","legacyName":"CoreX ID","modernName":"CoreX Identity & Authenticity","state":"READY","currentHome":"/identity","note":"Preserve verified-attribute/provider UX; replace opaque verification score with explainable assurance dimensions."},{"category":"Identity","legacyName":"Fingerprint Login","modernName":"Platform Authenticator / WebAuthn","state":"CONCEPT","currentHome":"/identity","note":"Reuse biometric UX only for platform authenticators. CoreX should never receive raw fingerprint templates. Remove unsupported FIDO2 certification wording."},{"category":"Identity","legacyName":"Email Login","modernName":"Passwordless Email / Federated Login","state":"READY","currentHome":"/identity","note":"Current identity service contains email one-time-code primitives; production delivery/provider/session hardening remains before GA."},{"category":"Identity","legacyName":"Phone Login","modernName":"Phone Verification Provider Integration","state":"GATED","currentHome":"/identity","note":"Reuse UX when an SMS/phone provider and abuse controls are actually bound."},{"category":"Identity","legacyName":"Google / Microsoft / Apple Login","modernName":"Federated OIDC Login","state":"READY","currentHome":"/identity","note":"Provider buttons should be rendered only from actually configured federation providers."},{"category":"Identity","legacyName":"Master Console","modernName":"CoreX Studio — Platform","state":"READY","currentHome":"/studio","note":"Console choice must not confer authority; platform access is derived from trusted role/tenant/policy claims after authentication."},{"category":"Identity","legacyName":"Admin Console","modernName":"CoreX Studio — Organisation","state":"READY","currentHome":"/studio","note":"Organisation access is tenant/role/policy controlled after authentication."},{"category":"Identity","legacyName":"User Portal","modernName":"My CoreX / Holder Workspace","state":"ACTIVE","currentHome":"/verify-workspace/holder","note":"Modern holder workspace already provides identity, access, credentials, transactions, events, evidence and sharing."},{"category":"Identity","legacyName":"Biometric Auth","modernName":"Biometric/PAD Provider Integration","state":"GATED","currentHome":"/identity","note":"Provider contracts are the correct home; biometric models do not become CoreX source authority."},{"category":"Identity","legacyName":"Single Sign-On","modernName":"OIDC / Service & User Federation","state":"ACTIVE","currentHome":"/identity","note":"OIDC service identity is active; customer IdP federation is deployment-specific."},{"category":"Identity","legacyName":"Multi-Factor Auth","modernName":"Assurance & Step-Up Authentication","state":"READY","currentHome":"/identity","note":"Expose through assurance policy; authenticator execution remains with bound providers."},{"category":"Identity","legacyName":"Passkeys","modernName":"Passkey / WebAuthn Integration","state":"CONCEPT","currentHome":"/identity","note":"Legacy fingerprint UX is a design reference; current repo evidence does not show a complete WebAuthn implementation."},{"category":"Security","legacyName":"CoreX Shield","modernName":"CoreX Defender / Security Posture","state":"READY","currentHome":"/studio","note":"Recover breach/phishing/headers/DNS/IP posture UX only where actual providers/checkers are implemented."},{"category":"Security","legacyName":"CoreX Comply","modernName":"Compliance Evidence","state":"READY","currentHome":"/studio","note":"VECTOR contains compliance screening, release and evidence primitives."},{"category":"Security","legacyName":"CoreX Audit","modernName":"Audit & Activity","state":"READY","currentHome":"/studio","note":"Use the modern canonical event spine rather than legacy in-memory audit."},{"category":"Security","legacyName":"Security Scanner","modernName":"Security Posture Scanner","state":"CONCEPT","currentHome":"/studio","note":"No current full scanner engine is evidenced; restore individual checks only with truthful providers/results."},{"category":"Security","legacyName":"Defender Suite","modernName":"CoreX Defender","state":"READY","currentHome":"/studio","note":"Legacy rules can be reconciled onto Watch, risk signals and canonical events."},{"category":"Finance","legacyName":"CoreX Pay","modernName":"CoreX Pay — Transaction Trust","state":"READY","currentHome":"/studio","note":"Payment assurance and transaction trust, not acquiring/custody/settlement."},{"category":"Finance","legacyName":"CoreX Invest","modernName":"Finance / Ownership Vertical","state":"ARCHIVED","currentHome":"","note":"Current repos do not evidence a production investment-management product."},{"category":"Finance","legacyName":"CoreX Link","modernName":"CoreX Developer & Integration Platform","state":"ACTIVE","currentHome":"/developers","note":"Integration/API/Webhook concepts now belong in the Developer Platform."},{"category":"Finance","legacyName":"KYC/AML Suite","modernName":"Identity Assurance + External AML Providers","state":"GATED","currentHome":"/identity","note":"Do not claim AML/sanctions capability until providers and compliance operations are bound."},{"category":"Loyalty","legacyName":"Loyalty Hub","modernName":"Loyalty / Programme Vertical","state":"CONCEPT","currentHome":"","note":"No current production loyalty engine is evidenced; preserve programme UX as a future vertical."},{"category":"Loyalty","legacyName":"Carbon Credits","modernName":"Environmental Attribute / Provenance Vertical","state":"CONCEPT","currentHome":"","note":"Compatible with Product Trust/provenance if authoritative registry/source integrations exist."},{"category":"Loyalty","legacyName":"Referral Program","modernName":"Referral / Promotion Module","state":"CONCEPT","currentHome":"","note":"May compose with VECTOR promotions; no current referral engine evidenced."},{"category":"Loyalty","legacyName":"Gamification","modernName":"Programme Engagement Module","state":"CONCEPT","currentHome":"","note":"Keep outside the trust kernel."},{"category":"Platform","legacyName":"CoreX Hub","modernName":"CoreX Studio","state":"ACTIVE","currentHome":"/studio","note":"Modern Studio subsumes the central management console."},{"category":"Platform","legacyName":"CoreX Prime","modernName":"VECTOR Commercial Intelligence","state":"READY","currentHome":"/studio","note":"Pricing economics, offers, packages and commercial control-plane primitives already exist in VECTOR."},{"category":"Platform","legacyName":"API Gateway","modernName":"CoreX Developer Platform / API Surface","state":"READY","currentHome":"/developers","note":"Current APIs are live; a separate gateway product is not yet required."},{"category":"Platform","legacyName":"Standards","modernName":"Standards & Interoperability Catalogue","state":"ACTIVE","currentHome":"/developers","note":"Current adapters/reference profiles include VC, OpenID foundations, EPCIS, UDI and related standards."},{"category":"Access","legacyName":"CoreX Access","modernName":"Policies & Access","state":"READY","currentHome":"/studio","note":"Reconcile tenant, role, assurance, disclosure, entitlement and release-class controls into one Studio access model."},{"category":"Access","legacyName":"CoreX Verify","modernName":"CoreX Verify & Resolve","state":"ACTIVE","currentHome":"/verify","note":"Current Verify is broader than the legacy KYC-only positioning."},{"category":"Access","legacyName":"CoreX Edge","modernName":"Channels & Deployment","state":"READY","currentHome":"/studio","note":"Use for channel/deployment readiness; do not claim a distributed edge-security runtime until evidenced."},{"category":"Developer","legacyName":"SDKs","modernName":"CoreX SDKs","state":"READY","currentHome":"/developers","note":"Internal client patterns exist; public SDK extraction/package publication remains productisation work."},{"category":"Developer","legacyName":"API Reference","modernName":"Developer API Catalogue","state":"ACTIVE","currentHome":"/developers/catalogue.json","note":"Developer catalogue is production-deployed; OpenAPI publication is the next step."},{"category":"Developer","legacyName":"Sandbox","modernName":"CoreX Trust & Policy Sandbox","state":"ACTIVE","currentHome":"/developers","note":"Side-effect-free CoreX sandbox is live; VECTOR provides additional shadow validation."},{"category":"Developer","legacyName":"Webhooks","modernName":"Webhook & Event Integrations","state":"READY","currentHome":"/developers","note":"Signed lifecycle/webhook paths exist; source ingress can remain externally gated."},{"category":"Analytics","legacyName":"Analytics Dashboard","modernName":"Trust / Commercial Analytics","state":"READY","currentHome":"/studio","note":"Use actual event/reporting data only."},{"category":"Analytics","legacyName":"AI Insights","modernName":"Explainable Trust Intelligence","state":"READY","currentHome":"/studio","note":"Predictive/ML claims require validated models and telemetry."},{"category":"Analytics","legacyName":"Custom Reports","modernName":"Reporting & Evidence Packs","state":"READY","currentHome":"/studio","note":"VECTOR reporting/evidence foundations already exist."},{"category":"Community","legacyName":"CoreX Community","modernName":"Community / Programme Vertical","state":"CONCEPT","currentHome":"","note":"Preserve UX idea; no current production community platform evidenced."},{"category":"Community","legacyName":"CoreX Arena","modernName":"Community / Engagement Vertical","state":"ARCHIVED","currentHome":"","note":"Retain only if future product strategy requires it."},{"category":"Community","legacyName":"Forums","modernName":"Community Forums","state":"ARCHIVED","currentHome":"","note":"Not part of the current trust platform baseline."}]}