// glossary

The technical terms used across the ragbaz products, explained in plain language — for readers who are interested in what the products do without living in the jargon. Each product page links back here.

how the products run

headless WordPress: WordPress used only as a content database behind the scenes. Visitors never touch WordPress itself — they see a separate, faster, hardened site that reads from it. (articulate)
edge / edge worker: Code that runs in data centers physically close to each visitor instead of on one central server, so pages respond quickly everywhere in the world.
WASM (WebAssembly): A portable format for running fast code inside a protective sandbox — the code can compute, but can't reach anything it wasn't given.
sandbox: An isolated, disposable environment where risky code or files can run without touching real systems. When the analysis is done, the sandbox is destroyed. (detcordon)
GraphQL: A way for a site or program to ask a service for exactly the data it needs in one request — nothing more, nothing missing.
multi-tenant: One installation securely serving many customers at once, with each customer's data and configuration isolated from the others. (articulate)

ai governance — konsonans

AI agent: Software that uses an AI model to act — call tools, write files, send messages — rather than just answer questions. That autonomy is what makes governance necessary.
MCP (Model Context Protocol): The standard "plug" through which AI agents connect to tools and data. Governing the plug means every agent action can be checked on its way through.
policy gate: A checkpoint that decides allow, hold for a human, or deny for each agent action before it happens — and denies by default when evidence is missing.
human-in-the-loop (HITL): Risky actions pause until a person reviews and approves them. If nobody decides within the deadline, the action is denied automatically.
audit trail / hash chain: A permanent record of events where each entry carries a cryptographic fingerprint of the one before it — so deleting or editing history becomes detectable.
SHA-256: A fingerprint function for data: any change to the data, however small, produces a completely different fingerprint.
Ed25519: A digital-signature scheme. A signature proves who produced a record and that it hasn't been altered since.
EU AI Act: The European Union's regulation for AI systems (2024/1689). It requires things like event logging, human oversight, and transparency — the platform maps its controls to specific articles.
SLA (service-level agreement): A deadline promise. Here: how long a held action may wait for human review before it is automatically denied.
RBAC (role-based access control): Permissions organized by role — who may submit, review, approve, or administer — instead of per person.
OIDC (OpenID Connect): The standard behind "sign in with your company account": a trusted identity provider vouches for who the user is.
HSM / PKCS#11: A hardware security module is a tamper-resistant device that holds signing keys so they can be used but never copied; PKCS#11 is the standard interface programs use to talk to it.

mail security — mailroute

MTA (mail transfer agent): The server software that moves email between systems — the postal service of the internet. MailRoute inspects mail between the MTA and the mailbox.
quarantine: A holding area where suspicious mail is parked instead of being delivered, so a person or rule can decide its fate.
SPF / DKIM / DMARC: Three complementary checks, published in DNS, that let a receiving mail server verify a message really comes from the domain it claims — and what to do when it doesn't.
phishing / spoofing: Mail crafted to look legitimate in order to steal credentials or deliver malware (phishing), often by forging the sender (spoofing).

forensics & school

DFIR: Digital forensics and incident response — finding out what happened on a device or network, and containing it.
rootkit / RAT / stalkerware: Families of hidden malicious software: rootkits conceal themselves inside the system, RATs give an attacker remote control, stalkerware covertly monitors the device's owner.
ADB (Android Debug Bridge): Android's built-in diagnostic interface. The forensics course uses it read-only: inspecting a phone without changing the evidence on it.
SIM / eSIM / eUICC: The chip that proves a phone's subscriber identity to the network. An eSIM is that chip embedded in the phone (the eUICC), with profiles delivered remotely instead of on a plastic card.

trading — baz signal stack

HFT (high-frequency trading): Trading where strategies observe the market and decide in fractions of a second, so the software's speed and correctness matter as much as the strategy.
candlestick chart: A price chart where each bar ("candle") shows the opening, highest, lowest, and closing price of one time interval.
SMA / EMA / RSI / Bollinger bands: Standard indicators computed from price history — moving averages, momentum, and volatility bands — used as inputs to trading signals.
WebSocket: A connection that stays open between browser and server so live updates (prices, signals) stream in without reloading the page.

terms used on this site

completion: An estimate of how much of a product's finished scope exists today, shown as a percentage with the date of its last evaluation.
prospectus: The per-product page describing scope, maturity, and value — what you'd hand a prospective customer or partner.
current / finished value: Internal studio estimates in USD of a product's present value and its value at finished scope. They are planning signals, not booked revenue.
flagship: The products the studio currently leads with.