// Resources / Architecture Briefs

Flowspecs and Policy-Mediated Communication

How communication intent is declared, constrained, and enforced before workloads exchange data.

What it covers

Flowspecs express communication intent as an artifact that can be reviewed, signed, and enforced.

The brief explains where flowspecs sit between policy, workload identity, and communication paths.

Review areas

  • Declaring allowable workload communication.
  • Enforcing communication before execution depends on it.
  • Relationship to QHx Proxy and network isolation controls.
  • Signed resources and change accountability.