Skip to content

RTOpacks Identity

Document: docs/product/identity.md
Status: Canonical
Last updated: 2026-04-06
Authority: Tim Rignold, RTOpacks Pty Ltd


What RTOpacks Is

RTOpacks is a standalone VET sector intelligence and management platform for Australian Registered Training Organisations. It is a product — not a sub-product, not a module, not a feature of another platform. It operates under its own domain (rtopacks.com.au), its own infrastructure, its own identity, and its own commercial relationships.

RTOpacks helps RTOs navigate the regulatory framework that governs vocational education in Australia. It ingests, enriches, and structures data from authoritative government sources, then presents it as actionable intelligence through a suite of tools designed for the people who run training organisations.


What RTOpacks Is Not

  • Not part of UCCA's infrastructure. UCCA provides authentication architecture that RTOpacks connects to as an external service.
  • Not UCCA-branded. No UCCA identity, domain, or branding appears in any user-facing context.
  • Not dependent on UCCA for its operation. If UCCA disappeared tomorrow, RTOpacks would continue to function — the auth backplane would need to be replaced, but the product, data, and users are entirely self-contained.

External Data Sources

RTOpacks connects to the following authoritative sources:

Source Purpose Type
TGA (training.gov.au) NRT corpus — qualifications, units, RTOs, scope, regulatory data Government — authoritative
ASQA Regulatory and audit decisions Government — authoritative
NCVER VET statistical data (VOCSTATS, apprenticeships) Government — authoritative
ABS Labour force statistics, employment data Government — authoritative
Jobs and Skills Australia Occupation shortage, vacancy, training enrolment data Government — authoritative
yourcareer.gov.au Career pathways and VNDA outcomes Government — authoritative
CRICOS International provider and course registrations Government — authoritative
TEQSA / TQNR Higher education provider and qualification data Government — authoritative
NSW Fair Trading Occupational licensing records State government
Resend Transactional email delivery Commercial service
Cloudflare Infrastructure — Workers, D1, R2, KV, DNS Commercial service
UCCA Authentication backplane (see below) Platform service

The UCCA Relationship

UCCA Inc provides authentication infrastructure. RTOpacks connects to it as it would any trusted external service — in exactly the same way it connects to TGA, ASQA, or NCVER.

What UCCA provides: - Tier model specification — the L1/L2/L3/L4/L4A layer definitions - Session schema architecture — the RTPSession structure - Security constitution — minimum security posture requirements for a compliant operator

What UCCA does not provide: - Hosting — RTOpacks runs on its own Cloudflare account - Data — all data sources are independently connected - User management — RTOpacks manages its own users, allowlists, and access control - Monitoring — RTOpacks operates its own logging, anomaly detection, and alerting

Nothing flows up. UCCA has no visibility into RTOpacks data or users.
Nothing flows down. UCCA does not push data, configuration, or policy into RTOpacks.

The formal boundary is documented in boundary-agreement.md.


Future Federation (FEDERATION-HOOK-01)

At a future point, UCCA will offer a step-down access mechanism allowing L1/L2 to enter a connected L3 operator's environment for support and compliance purposes. When built, this will arrive as a UCCA-issued signed assertion token. RTOpacks will validate and honour it.

The implementation placeholder is FEDERATION-HOOK-01 in lib/tier-resolution.ts. Until B-AUTH-OAUTH-01 ships, the auth backplane connection is an architectural specification, not a live API call.


Amendment Log

Date Change Authority
2026-04-06 Initial document — Session 44 Tim Rignold