Abstract: To determine whether a set of software services underlying an API adhere to architecture guidelines, an architecture guideline validation system analyzes program code as part of a compilation process for the services to generate a data structure that indicates an organization of the services and invocations between the services. The system analyzes the data structure to determine whether any architecture guidelines have been violated. Example architecture guidelines can include limitations on a number of successive invocations and restrictions as to a directionality of invocations (e.g. an invocation by a private, secure service to an exposed, client-facing service). If any violations are identified, the system indicates the violations and may display the violations as compiler errors or warnings.

Abstract: A method of ensuring the identity of a first processing device to a second processing device allows for secure network communication between the devices. A network resource address including an encoded trusted identifier in a portion of the address excluding the host name of the first processing device are provided to a second processing device by a trusted distribution mechanism. The trusted identifier is derived from a public key of the first processing device. Communication is initiated with the first processing device at the network resource address and a public key purporting to identify the first processing device is received in response to initiating the communication. The trusted identifier is compared to a transformation of at least a portion of the public key to determine a match between the identifier and the transformation. If the trusted identifier and the transformation match, the identity of the first processing device is verified.

Abstract: To determine whether a set of software services underlying an API adhere to architecture guidelines, an architecture guideline validation system analyzes program code as part of a compilation process for the services to generate a data structure that indicates an organization of the services and invocations between the services. The system analyzes the data structure to determine whether any architecture guidelines have been violated. Example architecture guidelines can include limitations on a number of successive invocations and restrictions as to a directionality of invocations (e.g. an invocation by a private, secure service to an exposed, client-facing service). If any violations are identified, the system indicates the violations and may display the violations as compiler errors or warnings.

Abstract: Systems and techniques for representing data transformation loss in a system model that includes multiple nodes are disclosed. In an embodiment, an interface generator determines that a first node in a data path applies a data coding. In response, at least in part, to determining that a second node that is downstream from the first node applies a data transcoding, the interface generator determines a decoding stability factor that corresponds to a combined data transformation loss incurred by the data transcoding in combination with the data coding. The interface generator generates a display object having a display indicator that corresponds to the decoding stability factor.

Abstract: A method of ensuring the identity of a first processing device to a second processing device allows for secure network communication between the devices. A network resource address including an encoded trusted identifier in a portion of the address excluding the host name of the first processing device are provided to a second processing device by a trusted distribution mechanism. The trusted identifier is derived from a public key of the first processing device. Communication is initiated with the first processing device at the network resource address and a public key purporting to identify the first processing device is received in response to initiating the communication. The trusted identifier is compared to a transformation of at least a portion of the public key to determine a match between the identifier and the transformation. If the trusted identifier and the transformation match, the identity of the first processing device is verified.