persona-reference-architecture
Installation
SKILL.md
Account-Linked KYC Control Plane with Persona
Overview
Put Persona behind a server-side identity orchestration boundary. The application owns subject identity, operation idempotency, policy and decisions; Persona owns inquiry and verification resources; authenticated events plus reconciliation connect the two.
Prerequisites
- System context, data classification, and threat model
- Business and regulatory decision policy
- Availability, latency, retention, residency, and recovery requirements
Instructions
Step 1: Draw trust boundaries
Separate client, application API, orchestration service, secret store, Persona REST API, embedded inquiry flow, webhook edge, durable queue, decision engine, and reviewer console.