Architecture

Your AI can change.
Your enterprise boundary does not.

AI Fabrix keeps business context, identity, permissions, authority, governed operations and Evidence within one customer-controlled architecture — entirely inside your organisation’s own Azure tenant.

Build without restriction. Execute through verified human authority.

Step one
Verified identity
Step two
Applicable context
Step three
Capability verification
Step four
Governed execution
The architectural law

AI has no authority of its own.

Every action runs on behalf of an identified person and remains within that person’s existing organisational authority and access.

AI Fabrix does not replace the organisation’s existing identity, permissions, approvals or system controls. It preserves them when AI participates and executes only approved capabilities under verified human authority.

Prompts, models and retrieved content cannot create new authority.

Explore the architecture

One foundation.
Seven architecture views.

Each view answers one architecture question in plain language. Start with how enterprise meaning is defined, then follow how work is decided, authorised, performed and proven.

Enterprise model
How connected systems become explicit, reusable business meaning for AI-assisted work.
Explore
Runtime & execution
How each governed continuation is evaluated, executed, completed or stopped safely.
Explore
Trust & security
How verified human authority and existing enterprise controls remain in force.
Explore
Deployment & ownership
How AI Fabrix operates entirely within the customer’s own Azure tenant.
Explore
Systems & CIP
How governed data contracts connect existing authoritative enterprise systems.
Explore
Evidence & observability
How results, Evidence and technical logs remain distinct and inspectable.
Explore
Independence & exit
How models and interfaces can change through explicit contract boundaries.
Explore
The operational firewall for AI

Open development around the platform.
One governed path into the business.

Customers can build any application, interface, model or business logic around AI Fabrix. Where AI reaches enterprise information or operations, it can request only approved capabilities on behalf of an identified person.

Declared capabilities

Approved connected-system definitions specify the only enterprise information and operations available to AI.

Next-step decision

The runtime evaluates the active person, case and current business context, then selects one permitted next step—or stops safely.

Authority check

Operational Trust—the authority-control layer—checks identity, permissions, scope and approvals before an operation reaches the connected system. Raw APIs and credentials stay behind the boundary.

Inspectable record

Relevant requests, authority decisions, completed steps and actual outcomes remain available for audit.

Trust from request to result

Existing enterprise controls stay authoritative.

AI Fabrix uses the identity, access, approval and business controls the organisation already operates. The receiving enterprise system continues to enforce its own permissions and remains authoritative for the result.

Canonical execution path
Verified identity and active role
Applicable business context
Runtime decision
Capability verification
Governed execution
Validated result

Runtime

Determines the next permitted continuation for the active person and case.

System of record

Accepts, rejects and records the business transaction under its normal controls.

Secure Azure deployment

Choose the network controls your environment requires.

Every edition runs in the customer's own Azure tenant. Marketplace deployment creates the foundation there, tenant activation applies the licensed operating model and deploys the selected environments, and readiness verification confirms identity, endpoints, network configuration and platform health before the platform is used.

Your tenant
Your identity
Your keys
Your systems
Your models

Administration

Administration differs by edition: Community and Standard use the deployment controller; Enterprise also gives the customer direct control of the deployed Azure resources.

Platform boundary

Supported public and private network profiles are selected during deployment. PostgreSQL, Storage and Key Vault remain behind the governed platform boundary, and infrastructure secrets are generated into Key Vault.

Network profiles

Enterprise customers can apply customer-managed Azure networking. Private ingress, egress, DNS and connections to AI services and enterprise systems remain explicit architecture choices.

Network controls for regulated environments must be selected, configured and verified by the customer.

Architecture principles

Deterministic control where AI touches the business.

Runs entirely inside the customer’s own Azure tenant
Marketplace deployment is activated and verified before operational use
Infrastructure secrets are generated and stored in Azure Key Vault
Public and private network profiles are selected explicitly
Private profiles do not silently fall back to public access
AI receives no independent identity, authority, credentials or access
Enterprise applications remain the systems of record
Relevant payloads, decisions and outcomes remain inspectable for audit
Result, Evidence and logs

Execution result

The validated result of a specific run, including a rejection, failure, safe stop or incomplete outcome — not only successful work.

Evidence

Business-significant facts, controls, human decisions and outcomes that have passed the required validation before they can be reused.

Audit and operational logs

Technical activity and relevant inbound and outbound payloads retained for security, traceability and operations.

Your AI remains interchangeable. Your enterprise foundation remains yours.

Models and interfaces can change. Human authority and enterprise control remain.