monadiam

IAM | Access Control & AuthZ: hierarchical RBAC, DAC permission overrides, separation of duties (SoD), role delegation policies and realm-scoped access control.

Platform | Local Infrastructure: PostgreSQL/Redis, Kafka/Debezium messaging, Vault secrets, ClickHouse/SeaweedFS audit archival, Go tooling and observability with Prometheus, Grafana, Loki and Tempo.

IAM | Identity & AuthN: account lifecycle, OAuth 2.0/OIDC, federated login, sessions and token rotation, 2FA, account recovery and reauthentication.

Platform | Shared Contracts: TypeScript definitions, gRPC Protobuf contracts, Kafka JSON Schemas, service seed datasets and schema publication to Apicurio Registry.

Universal NestJS service boilerplate for MonadIAM — authn/permission guards wired against identity-service and access-control-service, audit/change-log capture with outbox-based ClickHouse archival, and BullMQ retention cleanup.

Platform | Notifications: email via AWS SES, SMS via AWS SNS, in-app notifications, recipient preferences, dispatch retries and message status tracking.

HRM | Workforce Management: employee records, employment, staffing, work calendars and schedules, leave management and approval workflows. In development; HR HTTP API pending.

IAM/HRM | Organizations: organization lifecycle, departments, teams, projects, memberships, project account assignments and invitations.