Contents
Garden HandbookBuilt-in Components

Explanation gallery

Six garden compose diagrams for RBAC, SSO, an auth stack, API checks, an agent policy point, and OAuth PKCE.

These six diagrams are garden compose. Color comes only from the theme tokens. A narrow screen stacks each row into one column.

1How the atoms fit together

On the diagramHow to write it
Soft full-width band (Role, IdP, steps 2 and 5, Agent)card with frame: band. The two emphasis fills are tone: accent and tone: tip
Small capsule (the browser)card with frame: pill
Plain title plus a gray linecard with frame: text, or title + text
Bordered cardcard
Circled indexbadge set to a circled number
Shieldmark: shield
One downward arrowarrow: down
Several downward arrows in a rowfan, then a row with the same count
V connector with a label in the notchjoin. Both arms meet at one vertex, then a short stem
Swimlane, dashed lifelines, both arrow directionslanes. The label sits above the shaft. forward and back are two emphasis colors
Footer linetext with tone: muted
Two-by-two gridtwo row nodes, two cells each

A band wraps only the highlighted layer. Inside a centered stack, a footer that should sit on the left uses align: start.

2RBAC

User

Alice

Bob

Role

Admin

Reviewer

Permission

orders:read

orders:approve

The role connects users and permissions

User ↔ Role ↔ Permission

3SSO

Browser
Identity Provider (IdP)Verify identity, keep the session, and issue an assertion

HR

Finance

Project

All three systems trust the same identity provider

4Auth stack

①Browser / AppCookie, session, OAuth client
②Identity service IdP / IAMPasskey, MFA, OIDC, session
③BFF / API GatewaySession, token, and entry checks
④Business serviceOrders, payments, accounts, resources
⑤Authorization decisionRBAC + ABAC + ReBAC + policy engine

Not every request walks the stack in this order. The identity service is usually involved at sign-in. The business service calls the decision system when it executes a request.

5Six checks on an API call

The user starts an API request

Example: change an order address

Authenticate

Who are you?

Authentication

Credential

How do you prove it?

Credential

Authorize

May you change this order?

Authorization

Verify

Is the payload valid?

Verification

Work and storage

TransportCan the network eavesdrop, alter, or spoof this?
ConfidentialityCan a leaked secret still be read?

These six checks are not a single sequence. Transport covers the network. Confidentiality can cover both client and server.

6Agent, policy point, and tool

User Intent + Authorization

State the task, the user, and the granted scope

Agent / LLMUnderstand, plan, and propose an action
Untrusted ContextMemoryTool Results
Policy Enforcement Point

A deterministic check outside the LLM

Scope and resources

Argument checks

Task limits

High-risk review

Tool Executor

Least privilege, an audit record, and a way to stop

7OAuth authorization code + PKCE

User

Client

Authorization server

① Start sign-inUser → Client
② Authorization request + PKCEClient → Authorization server
③ Authenticate and approveAuthorization server → User
④ Redirect with the codeAuthorization server → Client
⑤ Code + verifier for a tokenClient → Authorization server
⑥ Return the tokenAuthorization server → Client

This sketch leaves out the browser redirect, callback binding, and token checks.

Contents