> ## Documentation Index
> Fetch the complete documentation index at: https://docs.manthan.systems/llms.txt
> Use this file to discover all available pages before exploring further.

# Glossary

> Every term used on this site, mapped to its real source.

| Term                               | Meaning                                                                                                                                                                                                                                                                                                        | Source                                                                          |
| ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------- |
| **Authority**                      | The entity empowered to authorize execution within a trust domain                                                                                                                                                                                                                                              | `packages/shared/src/domain/authority.ts`                                       |
| **Authorization**                  | A grant, from an Authority, for a specific business purpose                                                                                                                                                                                                                                                    | `packages/shared/src/domain/authorization.ts`                                   |
| **Intent**                         | The specific action + target + parameters an Authority intends to execute                                                                                                                                                                                                                                      | `packages/shared/src/domain/intent.ts`                                          |
| **Business Transaction**           | The immutable input to policy evaluation, combining Authority + Authorization + Intent + a Policy reference                                                                                                                                                                                                    | `packages/shared/src/domain/business-transaction.ts`                            |
| **Decision**                       | The immutable result of evaluating an Intent against a Policy — `APPROVED` or `REJECTED`                                                                                                                                                                                                                       | `packages/shared/src/domain/decision.ts`                                        |
| **Execution**                      | What actually happened after a Decision — status, mode, evidence                                                                                                                                                                                                                                               | `packages/shared/src/domain/execution.ts`                                       |
| **Execution Trust Record**         | The canonical, append-only, signed aggregate of a Business Transaction's complete history                                                                                                                                                                                                                      | [Trust Record](/trust-record/overview)                                          |
| **Signed Execution Authorization** | The v1 envelope: a signed, content-bound, single-use, time-bounded proof that Parmana authorized one specific execution                                                                                                                                                                                        | [Signed Execution Authorization](/authorization/signed-execution-authorization) |
| **Execution Permit**               | An earlier prototype name for the same idea now covered by Signed Execution Authorization. Added in commit `39c89e9`, deleted the same day in `17dfe81` in favor of the current architecture. Does not exist in the current codebase — do not treat references to it elsewhere as describing shipped behavior. | git history only                                                                |
| **`businessTransactionHash`**      | The canonical content hash bound into a Signed Execution Authorization's payload — the mechanism that closes the check-vs-use (TOCTOU) gap                                                                                                                                                                     | [Content Binding & TOCTOU](/concepts/content-binding-toctou)                    |
| **Execution Gateway**              | The library that recomputes `businessTransactionHash` and releases verified content to a Connector — real, but not wired into the default server                                                                                                                                                               | [Execution Gateway](/authorization/execution-gateway)                           |
| **Connector**                      | An interface for an enterprise execution system (SAP, a bank's payment rail, etc.) integrated behind the Gateway. One reference implementation (`HttpConnector`) exists.                                                                                                                                       | `packages/execution-gateway/src/Connector.ts`                                   |
| **Execution Control**              | Gateway-authenticated, session-scoped credential isolation for connectors — real, tested, in-memory scaffold; not the finished credential-brokering claim                                                                                                                                                      | [Roadmap](/roadmap)                                                             |
| **Nonce**                          | A single-use value inside an authorization payload; a receiving system must reject a repeat                                                                                                                                                                                                                    | [Signed Execution Authorization](/authorization/signed-execution-authorization) |
| **Verification**                   | The 3-check process (integrity, signature, authorization binding) confirming an Execution Trust Record's validity                                                                                                                                                                                              | [Verification](/verification/overview)                                          |
| **Replay**                         | Two unconnected things share this name — a signature recheck (`POST /replay`) and a disconnected determinism engine (`packages/replay`). Neither does semantic re-evaluation.                                                                                                                                  | [Replay](/replay/overview)                                                      |
| **Receipt**                        | A signed, independently-verifiable attestation of an Execution Trust Record's state                                                                                                                                                                                                                            | `packages/shared/src/domain/receipt.ts`                                         |
| **TOCTOU**                         | Time-Of-Check-To-Time-Of-Use — the gap between what was authorized and what was actually executed                                                                                                                                                                                                              | [Content Binding & TOCTOU](/concepts/content-binding-toctou)                    |
| **TTL**                            | Time-to-live; the bounded window an authorization is valid for, capped to limit exposure from other gaps (e.g. an unshared `NonceStore`)                                                                                                                                                                       | CLAIMS.md 3.2                                                                   |