flowchart TB
  subgraph L0["Experience & enterprise identity"]
    direction LR
    L0N0["API customers &amp; NOC teams<br/>Partner developers · platform engineers · operators"]
    L0N1["Next.js / TypeScript portals<br/>Sandbox · docs · usage metering · operations / SLO views"]
    L0N0 -->|"HTTPS access"| L0N1
    L0N2["Enterprise identity &amp; RBAC<br/>OIDC / SAML · tenant roles · EN / ES / FR / HT"]
    L0N1 -->|"SSO &amp; authorization"| L0N2
  end
  subgraph L1["Gateway &amp; capability adaptation"]
    direction LR
    L1N0["Enterprise API gateway<br/>OAuth2 · mTLS where required · rate limits"]
    L1N1["CAMARA API services<br/>QoD · SIM Swap · Number Verification · Device Location / Status"]
    L1N0 -->|"Authenticated API requests"| L1N1
    L1N2["Consent &amp; policy adapters<br/>Versioned OpenAPI schemas · operator authorization · CAPIF where supported"]
    L1N1 -->|"Capability &amp; consent mapping"| L1N2
  end
  subgraph L2["Network exposure &amp; separate management"]
    direction LR
    L2N0["3GPP NEF / SCEF<br/>Operator-supported N33 / T8 exposure interfaces"]
    L2N1["4G / 5G core capabilities<br/>Policy-authorized network functions"]
    L2N0 -->|"Authorized network access"| L2N1
    L2N2["Ericsson ENM management<br/>Separate CM / FM / PM integration; not a NEF / SCEF endpoint"]
    L2N1 -->|"Separate management interfaces"| L2N2
  end
  L0N1 -.->|"Portal API traffic enters the authenticated gateway; operational changes use reviewed GitOps requests."| L1N0
  L1N2 -.->|"Adapters map only to APIs and versions enabled by the operator."| L2N0
  L0N2 -.->|"Gateway authorization verifies the caller and tenant policy."| L1N0
  %% Portal and API gateway requests enforce OIDC/OAuth 2.0 tenant scopes and rate limits at the edge. Southbound 3GPP NEF/SCEF exposure is isolated from ENM element management over dedicated VRFs.
  %% Reference topologies, not a statement of fit for your estate. Protocol versions, network boundaries, roles and service targets are set in the low-level design during the Assessment Sprint.