Architecture & solutions
Complete reference architecture
Animated reference architecture with eight layers and a governance plane, two enclaves and four deployment models (public cloud, dedicated hybrid, on-prem sovereign, air-gapped sovereign), the cloud / on-prem / air-gapped zone schema, Kubernetes reference and indicative deployment scripts on request.
Deployment models
- Public multi-tenant cloud (Cloud & hybrid enclave): Tier 1–3 use cases, fastest start, elastic scale, frontier models.
- Dedicated hybrid (Cloud & hybrid enclave): Mixed estate: cloud orchestration, sensitive data and systems of record stay on-prem.
- On-prem sovereign (Sovereign enclave): Regulated or sovereign data, connected network but no external model calls.
- Air-gapped sovereign (Sovereign enclave): Defence, national security, critical infrastructure: no network path to the internet.
Layers
- Channels & edge
- Experience & agent interfaces
- Orchestration
- AI services
- Integration
- Data & knowledge
- Systems of record
- Infrastructure
Kubernetes
- Namespaces & tenancy: One namespace per tier and business unit; tier 3–4 on dedicated node pools; ResourceQuotas per namespace.
- Model serving: vLLM (or Ollama for small models) on GPU node pools, LoRA adapters hot-loaded per domain, autoscaling on queue depth.
- Service mesh & network: mTLS everywhere (Istio / Linkerd), default-deny NetworkPolicies, egress gateway with allow-list.
- Policy & admission: OPA Gatekeeper / Kyverno: signed images only, no privileged pods, labels for data class and tier.
- Secrets & keys: External Secrets / Vault, keys in KMS or HSM; agent tool credentials short-lived and scoped.
- GitOps & supply chain: Argo CD from a signed Git repository, SBOM and image signing (Sigstore / cosign), promotion dev → test → prod via CAB.
- Observability: OpenTelemetry traces of agent steps and tool calls, Prometheus metrics, logs to SIEM and WORM vault.
Public demo with fictional data (Example Group). © 2025–2026 Russo-Got Marius Mihail & PIR2-IT. All rights reserved.
More in this demo
- Executive dashboard
- Executive summary generator
- Portfolio: idea → retire
- Policy register
- Governance & gates
- RACI
- Guardrails catalogue
- Risk register
- Complexity & costs
- V&V
- AI engines & model choice
- Training on institutional culture
- Agentic workflow & HITL
- Hallucination control
- AI security & threats
- Lessons learned
- e-Learning