Architecture / 2026-09-24

Control plane ≠ data plane.

Why lifecycle management and execution deserve different boundaries.

Passerel separates the system that decides what should exist from the system that executes work.

Control plane

The control plane owns project compilation, planning, applied state and lifecycle operations. It is where declared intent becomes operational state.

Data plane

The data plane is the runtime path: ingress, tasks, runs, capabilities, resources and the telemetry produced while work executes.

Keeping those responsibilities explicit makes the system easier to reason about and gives policy, identity and audit a clear place to live.