# Mortakaz Integration Spec 1 — Ghaymah SRE Telemetry & Security Hub

## Executive Overview

This integration specification defines the data pipeline and authentication protocol connecting **Ghaymah Cloud Infrastructure** with the **Mortakaz Platform**. It ensures centralized telemetry ingestion (metrics, logs, traces) and security audit synchronization across all containerized workloads.

---

## 1. Integration Architecture

```
┌─────────────────────────────────────────┐
│     Ghaymah Container Platform (SRE)    │
│   • FastAPI App / Prometheus Exporter   │
│   • cAdvisor Container Telemetry        │
└────────────────────┬────────────────────┘
                     │ HTTPS / gRPC (mTLS)
                     ▼
┌─────────────────────────────────────────┐
│     Mortakaz Ingestion Gateway          │
│   • API Endpoint: https://api.mortakaz  │
│   • Authentication: HMAC-SHA256 Token   │
└────────────────────┬────────────────────┘
                     │
                     ▼
┌─────────────────────────────────────────┐
│     Mortakaz Security & Observability   │
│   • Real-Time Threat Analysis           │
│   • Centralized SRE Dashboards          │
└─────────────────────────────────────────┘
```

---

## 2. Ingestion API Payload Specification

Ghaymah SRE telemetry agents stream metrics to Mortakaz via `POST /v1/telemetry/ingest`:

```json
{
  "qabilah_user": "marwanabdelmoneim",
  "email": "marwantamermo@gmail.com",
  "source_platform": "ghaymah.systems",
  "timestamp": "2026-07-27T21:30:00Z",
  "cluster_id": "ghaymah-prod-cluster-01",
  "metrics": {
    "http_latency_p95_ms": 14.2,
    "uptime_percentage": 99.99,
    "total_requests": 14820,
    "active_containers": 39,
    "memory_utilization_pct": 68.4,
    "cpu_utilization_pct": 52.1
  },
  "security_audit": {
    "trivy_scan_status": "PASSED",
    "critical_vulnerabilities": 0,
    "ssl_valid": true,
    "ssl_days_remaining": 49
  }
}
```

---

## 3. Security & Authentication Controls

1. **Mutual TLS (mTLS)**: All communication between Ghaymah nodes and Mortakaz Hub is encrypted with X.509 certificates managed by Ghaymah Certificate Authority.
2. **API Token Rotation**: Rotates HMAC secret keys every 30 days automatically.
3. **Data Anonymization**: PII fields are sanitized prior to transmission.