The -ilities
What the design is judged on.
Each quality, where the diagram answers it, and what is still open for the next phase.
- Autonomy
- Raw data, identity and operations stay in each party's account. The region holds contracts and derived products. A party can revoke.
- Interoperability
- Open standards as the contracts: GTFS, GTFS-Realtime, TIDES, GBFS, MDS. Shared identifiers for stops, zones, modes and time.
- Security
- Federated identity, short-lived roles, mutual TLS between services, one policy enforcement point, cross-party audit. Operational systems stay behind each party's OT boundary.
- Privacy
- Restricted fields never cross raw. Aggregation above a minimum group size, pseudonymisation, or clean-room computation. Fare data is the test case.
- Governance
- Owner and steward per dataset at the party, a regional body for contracts. Every field classified; every change scored by impact before it ships.
- Maintainability
- Vendor change is absorbed in the adapter. Contract change is versioned. Nothing downstream depends on a vendor's column names.
- Scalability
- Adding a party is constant work: adapter, identity, agreement. Event-driven exchange; per-party accounts. See onboarding.
- Resilience
- Coupling is one-way. An exchange outage degrades regional products and touches no bus, gate or charger.
- Auditability
- Immutable record of every access and contract change, readable by every party for its own data.
- Explainability
- Every model records the contract version and the parties whose data trained it. Covered properly in the AI strategy, Phase 4.
Open for Phase 3 and beyond.
- The sharing agreement template, access policies and privacy thresholds (Phase 3, governance framework).
- The trust model in detail: how a party's identity provider is vetted, incident roles, data classification tiers beyond three (Phase 3, cybersecurity framework).
- Which regional use cases come first, and the exact fields each needs, worked backward from the requirement.
- Whether an agent-based translation layer belongs in the adapter, or stays a pattern to evaluate.
- The AWS service choices, all still candidates until the Phase 5 technical architecture.