| Portal | 3002 | Web UI for org and project governance — policies, agents, access keys, traces |
| API | 4001 (REST), 4002 (gRPC) | Core backend. Manages orgs, projects, policies, and agents. The system of record other services call into |
| Gateway | 8787 | LLM gateway. Proxies AI requests to upstream providers, enforcing auth and guardrails on the way through |
| Guardian | 8700 | Guardrail evaluation engine. Scores prompts and completions against a policy’s rule set (jailbreak detection, compliance checks) |
| Tracing | 5001 | Observability. Stores request/response spans for the audit log and review queue |
| Postgres, SuperTokens, ClickHouse | internal only | Infrastructure dependencies — relational storage, auth sessions, and trace storage. Not exposed outside the Compose network |