Zone 1

API Router

Request routing, rate limiting, payload validation. Malformed or oversized requests are rejected before they reach business logic.

Full architecture Security
Z0 Auth Gateway Z1 API Router Z2 Session Manager Z3 Memory Engine Z4 Compute Sandbox Z5 Integration Layer Z6 MCP Gateway Z7 Security Policy Engine

Overview

The API Router is the traffic controller of the bRRAIn platform. After a request passes authentication in Zone 0, it arrives at Zone 1 for routing, validation, and rate limiting. This zone enforces payload size limits, validates request schemas, and routes operations to the appropriate downstream zone. It serves as the central nervous system that ensures only well-formed, authorized requests reach business logic.

Key capabilities

Request Routing

Intelligent routing of API requests to the appropriate downstream zone based on operation type.

Payload Validation

Schema validation and payload size enforcement — malformed requests are rejected before reaching business logic.

Rate Limiting

Per-user, per-session, and per-endpoint rate limiting with configurable thresholds.

Request Logging

Every API call is logged with user, session, timestamp, and operation metadata for audit compliance.

Load Balancing

Distributes requests across service instances for high availability and optimal performance.

API Versioning

Supports multiple API versions simultaneously with graceful deprecation and migration paths.

Security implications

How Zone 1 enforces bRRAIn's zero-trust security model:

  • All requests are validated against API schemas before processing
  • Oversized payloads are rejected to prevent resource exhaustion attacks
  • Rate limiting prevents abuse and ensures fair resource allocation
  • Comprehensive request logging supports audit and incident reconstruction
  • No direct access to downstream zones — all traffic flows through the router
Every zone enforces its own security boundary. No zone trusts another implicitly.

How it connects

Zone 1 receives authenticated requests from Zone 0 and routes them to Zone 2 for session context binding.

Zone 0 — Auth Gateway Zone 1 API Router Zone 2 — Session Manager Zone 7 — Security Policy Engine inspects all zone transitions

Related certifications

bRRAIn professionals who interact with Zone 1:

Implementation Specialist

Configures API routing rules, rate limits, and integration patterns.

→

Operations Controller

Monitors API health, throughput, and enforces operational policies.

→

See Zone 1 in action

Request a demo to see how bRRAIn's zero-trust architecture protects your institutional memory.

Request a demo Explore architecture