- How does Provenance relate to Keystone?
- Provenance syncs vendor and trust signals into the Keystone knowledge graph where your org already governs data. Graph sync runs against your Keystone deployment; without Keystone reachable on the shared Docker network, crawls and directory features can still run but graph-backed workflows may stall.
- Do you support OIDC / SSO?
- Production uses a BFF with Zitadel (OIDC). Demo mode can run without OIDC for local evaluation. Configure issuer, audience, and BFF client credentials per your cell deployment manifest and AGENTS.md.
- Where is data processed and stored?
- You control Postgres, Redis, and edge placement. The public directory and trust pages are served from your infrastructure; residency is determined by where you run the stack, not by a SaaS region toggle.
- What is the Trust & Compliance bundle?
- On the DJED platform, Certus (NIS2 compliance posture) and Provenance (vendor trust graph) can be sold together with a bundle discount. Stripe coupon IDs are driven from the cell registry; use djed stripe sync to provision coupons in Stripe.