An attack should not become a security problem only after data has already been read, aggregated or transferred. immo.quick establishes two independent boundaries: one before a request reaches governed logic, and one immediately before a real effect can occur.
Traditional security models are often strong at establishing who authenticated, what role an account holds and whether behavior appears anomalous. The deeper question is whether a technically reachable path can actually create a production effect. immo.quick deliberately separates access, authority and execution.
A dedicated fail-closed Access Guardian sits in front of the governed compliance pipeline. A request must fully satisfy the required admission conditions before downstream decision logic becomes reachable. Missing required information, stale state or invalid cryptographic origin results in denial before the pipeline.
At the edge, a client must first cryptographically demonstrate that it is registered and currently legitimate for the requested surface. Only then do governance gates and Execution Rights follow. Even a successfully attested client does not receive unrestricted execution authority. Effect requires a valid, current, scope-conformant Execution Right and a valid capability derived from it.
Successful authentication proves an identity or client state. It does not automatically authorize every downstream action.
The fact that a resource is technically reachable does not mean the current request or capability is entitled to use it.
Reading is not exporting. Individual access is not bulk transfer. Administration is not exfiltration. Every effect remains bound to its own permitted scope.
immo.quick does not assume that an analyst will detect an attack quickly enough to prevent harm. Where an invalid admission or execution condition is established, the primary response is denial. Forensic capture, reconstruction and internal incident processes then document what was attempted and at which boundary the request ended.
Detection remains valuable. But it is not the final authority over whether an effect may occur.
No architecture can credibly guarantee that an attacker will never reach a technical contact point, that credentials can never be stolen or that zero-day vulnerabilities cannot exist. immo.quick therefore does not claim to replace general network, endpoint or organizational cybersecurity.
The verifiable architectural claim is narrower and stronger: invalid requests should not reach governed logic; and access alone should not authorize a real effect. Where required state is missing, stale, revoked, out of scope or arrives through an unauthorized path, execution fails closed.
It describes two separate security boundaries: an admission boundary intended to stop invalid requests before governed logic is reached, and an independent Execution Rights boundary intended to prevent access alone from authorizing a real effect.
Authentication, role or technical reachability are not automatically sufficient for execution. A real effect requires a currently valid, scope-bound execution basis.
Only the architecture of the immo.quick Serverless Edition was demonstrably submitted to the BSI for technical consideration on 28 July 2026. immo.quick Core was not submitted to the BSI. This does not constitute a BSI audit, certification or endorsement.
No. Network, endpoint, identity and organizational security remain necessary. The additional architectural claim is to constrain unauthorized admission and prevent access from automatically becoming executable authority.
Core and Serverless Edition are independent architectures. Both follow the same institutional principle: technical reachability, identity and privilege do not by themselves create executable authority.
Explore Core →Explore Serverless Edition →Explore Execution Rights →