Architecture Reference¶
This is the curated entry point to the 141 architecture documents in this repository — deep dives on one subsystem, one seam, or one hardening incident each. Start with North-Star Architecture for the whole-program view, then drop into whichever group matches what the operator're touching. Every file here is also reachable through MkDocs Material's site search if the operator already know its name.
New to the codebase?
docs/pillars/index.mdis the 5-pillar concept map these documents implement. This page is the implementation detail underneath it.
Start here — whole-program view¶
The north star, the operating model, and the standards every other document here assumes the operator've read.
- North-Star Architecture (the whole program)
- Delegation-First Operating Model (orchestrate + resolve)
- agent-utilities-expert (KG-bound delegate)
- Epistemic Operations Protocol (retired)
- Empirical Development Standards — the incidents behind the rules
- Troubleshooting (cross-layer diagnose)
Identity, session & authority¶
Who is acting, on whose behalf, with what authority — from the first request to a delegated sub-agent.
- Graph Authority Convergence (session, client, work state)
- Per-Agent On-Behalf-Of Identity (delegation chain, ceiling, revocation)
- Verified Identity Carrier Contract (GOC-15)
- IdP-Agnostic Role Inheritance & Identity-Scoped Auto-Load
- MCP Fleet Authentication (JWT + Eunomia)
- Engine-authoritative cluster discovery and session continuity
- Concept hierarchy
- Cross-host concept reservation authority
- ACL Registration Convergence (write-time + read-time defence in depth)
Control-plane suite¶
The remaining runtime authority and resource-management seams. - Relational Authority & Registry Read Model - Resource-pool capability authority - Native WorkItem resource-reservation boundary - Fleet scale authority - Durable ScaleIntent actuation - Service-surface scale units
Ingestion & data preparation¶
Getting external and internal signal into the graph — classification, commit-history tails, Arrow-based prep, and stability under load.
- Intelligent Ingestion (classify/commit-history/tail)
- Content-Aware Ingestion (ArchiveBox/crawl4ai/scholarx)
- Real Data-Preparation Acceptance (NE-115)
- Arrow Data Preparation & Profiling
- Optional Operator Data-Quality Certification
- Ingestion Throughput (lanes, tick collapse, bulk)
- KG Connectors, Ingestors & Enrichers
- KG as Bidirectional ETL Hub
- Document → KG Fact Extraction
- Knowledge Graph Ingestion Stability & Locking Architecture
- Skill-Workflow → Knowledge-Graph Ingestion
- Knowledge Graph Ingestion — Concept Extraction Standards
Ontology & semantic layer¶
OWL/RDF, SHACL, argumentation, and object-centric process semantics — the reasoning layer over the raw graph.
- OWL/RDF Layer (local, always-on)
- Ontology System
- Ontology Library (catalog + anti-drift)
- Ontology Federation & Package Migration (domain ttls in owning repos)
- Ontology-Guided Ingestion & Entity Resolution (exceeds sift-kg)
- Ontology integrity-policy activation
- Ontology-native classification — full handoff (Phase A → checkpoint → Phase B)
- Vendor-Neutral Enterprise Ontology
- AIF Argumentation (I-nodes/S-nodes → Dung acceptability)
- Governed JSON-OCEL exchange
- Incremental Object-Centric Derivation + Conformance
- Dynamic graph construction
- Governed retrieval
- Shortcut-Resistant Search-Task Synthesis
Memory, reasoning & cognition¶
How the system remembers, attends, and reasons across turns and agents.
- Latent-Native Memory
- Self-Improving Reasoning Substrate
- Reasoning Algorithms as Versioned Graph Topologies (CoT/ToT/GoT/ReAct/RAP)
- Global Workspace Attention
- Perspectival Inquiry (STORM, native)
- Multi-Agent Social System
- Runtime Org Dynamics (recruiter, work-item DAG, self-grown staff)
Evolution, evaluation & learning loops¶
The self-improvement flywheel: propose, evaluate, distill, and the evidence trail that grounds it.
- Self-Evolution Flywheel (transparent + steerable)
- The Evolvable Surface (native programs)
- Failure-Driven Evolution
- Knowledge Distillation → Skill-Graphs
- Multi-Source Assimilation Program
- Graph-Native Assimilation Engine
- Model Registry as Graph Resources + Routing Provenance
- Harness Foundry (surpass HarnessX)
- Agent-Operator Program (closing the loops)
- Evidence Spine (Artifact → addressable Fragment)
- Evidence-Spine Convergence (Seam 2)
- Epistemic-columns currency (Seam 1) — consuming epistemic-graph's
KnowledgeBatch
Orchestration, execution & routing¶
How a request becomes a plan, a plan becomes tool calls, and results come back through one entrypoint.
- Orchestration Execution Seam (ingested capability → executed)
- Non-Blocking Hierarchical Execution
- Unified Agent Entrypoint (verified routing map)
- Entrypoint Unification (one orchestrator)
- Intent Surface (Seam 8 — condensed tool-surface collapse)
- Skills-over-MCP (unified capability space)
- Edit-Application Engine
- Chunked Async Drain (full re-ingest, non-blocking)
- Governed Warm-Fork Sandboxes
- Agents-as-Data Activation (dormant rows, worker pool, scale proof)
- Queue-Driven Agent Dispatch
- Durable Execution (unified plane, supersedes restate)
- Event Sourcing and Query Routing Architecture
- Layered Hybrid Architecture — KG Comparative Analysis Pipeline
Enterprise system integrations¶
Bridges into the enterprise tool landscape — BPM, GRC, and the runtime that carries the organization's own intelligence.
- Camunda + ARIS ↔ Knowledge Graph
- CISO Assistant ↔ Knowledge Graph
- Company Brain Runtime
- Enterprise Parity, Supervisory Plane & Durable Execution
Ecosystem, communication & UI surface¶
How the platform talks to the outside world — cross-session messaging, reactions, frontend contribution points, and code intelligence.
- Agent Communication Bus (cross-session/host/provider)
- Messaging Reach (Telegram + agents)
- Secure Messaging Ingress (zero open ports)
- Reactions / Emotes (system-wide, renderer contract)
- FrontendContribution.v1 (package-authored WebUI descriptors)
- Modular Prompt & Skill Contribution (fleet entry-points)
- Agentic Resource Discovery (ARD) interop (publish + consume + federate)
- Codebase Context via the KG (query, don't grep)
- Code Intelligence (type/scope-resolved calls)
Scaling, sharding & the engine surface¶
Everything about running more than one of something — engine shards, GPUs, gateways, caches, tenants, and the wire protocols between them.
- Authoritative Engine Placement & Sharding
- graph-os Horizontal Scaling (the HPA blocker, precisely)
- Distributed Multi-GPU Concurrency
- Adaptive Model Concurrency (vLLM auto-scale)
- Scaling the Gateway
- Resource-Priority Edict (interactive over ingestion, end-to-end)
- Scaling Authority Contract (NE-164)
- Durable-State Externalization
- Event Backbone (Kafka)
- Multi-Tenant graph-os over Streamable-HTTP
- HNSW Vector Index Lifecycle
- Task-Aware Sampling Profiles
- LLM/Embedding Server-Capacity Guard (never OOM the model host)
- KV-Cache-Layering Policy (per-execution cache-worthiness)
- KV-Checkpoint Intelligence (when to freeze a context, RAM vs disk)
- Graph Backend Architecture
- Epistemic Graph Service Layer Architecture
- GraphOS Embedded Fleet Gateway
- MCP 2026-07-28 Native Protocol Surface
- fastmcp 4 as the Default (MCP SDK v2 protocol bridge)
- Staged httpx to httpx2 Migration (transport-factory strangler)
- Gateway Daemon (all runtime components)
Observability, governance & safety¶
Metrics/logs/traces, autonomous governance, and the reliability loop that watches all of the above.
- Observability (Metrics/Logs/Traces/Alerts)
- Runtime-Reliability Loop (detect→signal→gap→heal)
- Autonomous Governance & Zero-Trust Consensus
- Fleet Autonomy Control Plane
Deployment, release & repo operations¶
Shipping the platform itself — containerization, orchestrator migrations, versioning, the merge queue, and the shared dev environment.
- Containerized Deployment (microservices)
- Orchestrator Migration & Cutover (Swarm→k8s hardening)
- Genesis k8s Deployment Inputs + Named Environment Profiles
- Drift-Proof Release & Versioning
- Lane Concurrency (four arbitration classes)
- Merge Queue (continuous merge, tiered gate)
- Repository-development WorkItem authority
- Configuration Reference & Flag Audit
- Universal External Graph Connectors
- Privacy-safe External Graph Ingestion
- Mandatory ContextCompiler Model Boundary
- The shared workspace
.venv— sync, flip-on-merge, drift, upgrade - Phased Dependency Release Architecture
- GOC-44 dependency/runtime compatibility — baseline revalidation (2026-08-16)
- graph-os Self-Hosting Cutover (design)
- Unattended Claude Code Harness
- Pydantic AI v2 Migration
- In-House Training Substrate
Trace, provenance & incident history¶
The canonical record of what ran, why, and — for closed incidents — what broke and how it was found.