Technology glossary

Technical terms for procurement and integration discussions; specific provider contracts remain the authority for product behaviour.

API gateway

A service that receives API requests and applies routing or access policies. A gateway is not evidence that each underlying resource has correct authorization.Technical source

Idempotency

The property that repeating an operation has the same intended effect as performing it once. Financial integrations need a documented key scope, retention window and conflict policy; a retry alone does not make a request idempotent.Technical source

Webhook

An HTTP notification sent when a system records an event. Consumers must verify the sender and handle duplicates or delayed delivery according to the provider's actual contract.Technical source

OpenTelemetry

A vendor-neutral framework and tools for generating, collecting and exporting telemetry such as traces, metrics and logs. Instrumentation does not by itself define operational service-level targets.Technical source

Zero trust

An approach that avoids granting implicit trust solely from network location. Authorization is evaluated around resources and access context rather than assuming an internal network is safe.Technical source

Transactional outbox

A pattern that records an intended event alongside a database change so a separate process can deliver it. Consumers still need to address repeated delivery and ordering.Technical source