📘 Platform Documentation
Welcome to the technical documentation for platform security and architecture within the Mojaloop ecosystem.
This site focuses on how the platform is actually implemented and operated, rather than abstract or theoretical designs.
🏗️ Architecture
- Platform Architecture Overview
Provides a high-level reference architecture covering: - Mojaloop Hub, PM4ML, and Tazama
- Cloud, on-premise, and hybrid deployments
- Primary–Standby topology
- Platform responsibilities and trust boundaries
🔐 Security Architecture
- Hub ↔ PM4ML Security Architecture
Describes the end-to-end security model between the Hub and PM4ML, including: - Mutual TLS (mTLS) for transport-level security
- JWS for application-level message signing
- Certificate lifecycle and rotation
- Trust boundaries and ownership
🚧 Upcoming Documentation
The following sections are planned and will be published incrementally:
- 🔁 Certificate & Key Management
- 🚨 Incident & Failure Scenarios
- 📐 Environment & Capacity Model
- ⚙️ Operational Runbooks
These documents will reflect validated production behavior and operational best practices.
🌐 More information
For general information about ThitsaWorks, including our services and platform offerings, visit:
📌 About this site
This documentation reflects real-world implementation and operational security practices used in Mojaloop-based deployments.
It is intended for platform engineers, security engineers, and operators who need a clear and practical understanding of how the system is secured and operated in production.