Academy / Architecture
Trace the boundary before building the system.
Explore how identity, data, approvals, execution and evidence connect. Each diagram includes a failure case to test.
Trust boundary: Approved private environment
1 →
User and identity
Authenticate the actor and resolve document permissions.
2 →
Policy and retrieval
Filter active documents before relevance scoring and context assembly.
3 →
Local inference
Send permitted context to an approved model endpoint.
4 ✓
Answer and evidence
Validate citations, abstain when unsupported, and retain redacted evidence.
Controls to inspect
Keep ingestion, indexes, cache deletion, model serving and audit stores within the declared boundary. Denied source text must never enter model context.
Failure case to test
A finance document is denied to an HR actor: retrieval returns no finance context and the answer cannot cite it.
These are reference designs. Validate the declared components, identities and failure behavior in your own environment.