Thanks for hints to improve it :) You are right. Baggage propagation with external services through direct calls or SDKs is not a well-known security risk.

I will update it.

And the last one? It´s just for a supporting service - notifications, …

Read service creates a read model of business data, making it readily available by API’s or other mechanism.

Write service handles business interactions by issuing commands to modify data through aggregates or some domain model representation.

Integration service provides an anti-corruption layer between your systems and external systems, ensuring that inconsistent semantics—whether in contracts, communications, or other interactions you are not accept into you language.