Action Bus

The Action Bus is the part of the One3 kernel every Action passes through. When a caller invokes an Action, the bus validates the input schema, resolves the tenant and the actor (human, agent or service), and asks the policy engine whether the actor may do it. If approval is needed, the request goes to a human with a diff preview, the AI's rationale and the risk tier.

Once allowed, the handler runs inside a transaction with an outbox, and the bus appends the events, an audit record, a cost record and a trace id. Entitlements, budgets and kill switches are enforced here too, so no app, workflow or agent can bypass them. For external Actions, a durable intent is committed before any provider call, and an unclear provider response is reconciled rather than retried blindly.