Admin · Federation · Approvals
One gate, one ledger.
Every cross-org handshake crosses this desk: approve the pending ones, then audit the lot. Consent is single-use, billing is split at the handshake, and each side keeps its own books. The federation differentiator, governed.
Cross-org
Two named accounts terminate against each other. The A-side and Z-side each keep separate books; no subnet assumption.
Consent-gated
Approval resolves the single-use token to exactly one activation. Replay is impossible; the masked form below is metadata only.
Dual-billed
The A/Z revenue split is fixed at the handshake and replayed unchanged on the audit row. Each side invoices its declared share.
Audit ledger
newest first · approve acts on pending only| ID | Direction | A-side | Z-side | Route | Service profile | Consent token | Billing split | Requested | Status | Action |
|---|---|---|---|---|---|---|---|---|---|---|
| CR-4120 | outbound | NaaS Labsacct-naas | Blue Harbor DCacct-blueharbor | NRT → SIN | Cloud On-ramp · Chicagooffer-7 | crfa_••••2a08 | 60/40 | Jul 27, 2026 | pending | |
| CR-4108 | inbound | Corepath Networksacct-corepath | NaaS Labsacct-naas | ORD → DFW | Cloud On-ramp · Amsterdamoffer-1 | crfa_••••9c1d | 40/60 | Jul 25, 2026 | pending | |
| CR-4115 | outbound | NaaS Labsacct-naas | Meridian Capacity Co.acct-meridian | DEN → KC | Internet · Bostonoffer-3 | crfa_••••b7e3 | 50/50 | Jul 12, 2026 | approved | decided |
| CR-4101 | inbound | Aurora Transitacct-aurora | NaaS Labsacct-naas | FRA → AMS | Internet · Bostonoffer-3 | crfa_••••4f2a | 50/50 | Jun 21, 2026 | active | decided |
Approve promotes a pending handshake and resolves its single-use consent token. The token is masked here; the live secret stays in the vault and is consumed exactly once at activation. The billing split is fixed at request time and never amended on this row.