▮ TIER

Federation transport

Names, figures and the federation key travel unencrypted.

Federation

Each federated server is one place in this tree; its received organization appears below its assigned place.

Company totals · selected month

From federated servers · reported by them, not re-checked here

People add up to the selected branch’s monthly totals. People must report to one server only; the central server cannot detect a person reporting to two.

Allowed servers

Knowing this server’s address does not grant access. Each allowed server needs its own unrevoked federation token. The token can write only into that server’s assigned place and cannot read. Invalid, revoked and replayed pushes are refused and logged.

Revocation stops future reports. Previously accepted totals are kept. Reports include monthly people and models, subject to each reader’s scope and privacy floor. Keys, raw inputs and child audit logs stay on the child. Authenticated, pinned routes are required. HTTPS follows the organization’s setting.

Allow a federated server

Refused attempts

Federation audit