# Operating Model Document: enterprise-knowledge-assistant

- Template: Full Report
- Status: Published
- Version: 1.0.0
- Architecture: enterprise-knowledge-assistant-system-architecture
- Generated: 2026-07-12T00:00:00.000Z
- Published: 2026-07-12T00:00:00.000Z

## Executive Summary

Audience: Executives

- businessObjective: knowledge-assistant
- currentOperatingModel: {"implemented":0,"planned":42,"validated":21,"blocked":18,"deprecated":0}
- targetOperatingModel: {"targetMaturity":"enterprise-operating-model","targetDeployment":"candidate-private-cloud","targetReadiness":96,"targetGovernance":"regulated-audit-ready"}
- keyDecisions: ["candidate-private-cloud"]
- risks: {"overallRisk":"High","majorRisks":[{"category":"Technical","severity":"Medium","probability":"Medium","mitigation":"Keep architecture review and acceptance criteria current.","owner":"architecture lead","relatedTasks":["task-discovery-architecture-review"]},{"category":"Operational","severity":"Medium","probability":"Medium","mitigation":"Assign operational owner before deployment package is approved.","owner":"operations owner","relatedTasks":["task-operations-monitoring"]},{"category":"Governance","severity":"Medium","probability":"Medium","mitigation":"Require review evidence for all governance-sensitive workflow paths.","owner":"governance owner","relatedTasks":["task-validation-security"]},{"category":"Security","severity":"Medium","probability":"Low","mitigation":"Validate permission boundary before integrations are enabled.","owner":"security engineer","relatedTasks":["task-foundation-permissions","task-integration-tools"]},{"category":"Deployment","severity":"Medium","probability":"Medium","mitigation":"Stage deployment behind acceptance and rollback runbook.","owner":"release owner","relatedTasks":["task-deployment-package","task-deployment-runbook"]}],"evidenceRefs":["exec-evidence-implementationplan-riskregister-43"]}
- investmentSummary: {"currency":"USD","initialCost":113910,"annualCost":129987.6,"threeYearTco":503872.8,"estimatedRoi":-39.27,"evidenceRefs":["exec-evidence-costmodel-metrics-42"]}
- implementationSummary: {"estimatedWeeks":16,"complexity":"Enterprise","criticalPath":["task-discovery-architecture-review","task-foundation-infrastructure","task-core-recommendation","task-core-workflows","task-integration-knowledge","task-validation-evaluation","task-validation-security","task-validation-audit-evidence","task-deployment-package","task-operations-monitoring","task-operations-maintenance"],"dependencies":[{"from":"task-discovery-constraints","to":"task-foundation-authentication","type":"blocks"},{"from":"task-discovery-architecture-review","to":"task-foundation-infrastructure","type":"blocks"},{"from":"task-discovery-architecture-review","to":"task-foundation-ontology","type":"blocks"},{"from":"task-foundation-authentication","to":"task-foundation-permissions","type":"blocks"},{"from":"task-foundation-permissions","to":"task-core-human-review","type":"blocks"},{"from":"task-core-workflows","to":"task-core-human-review","type":"blocks"},{"from":"task-foundation-ontology","to":"task-core-recommendation","type":"blocks"},{"from":"task-foundation-infrastructure","to":"task-core-recommendation","type":"blocks"},{"from":"task-core-recommendation","to":"task-core-workflows","type":"blocks"},{"from":"task-foundation-permissions","to":"task-core-workflows","type":"blocks"},{"from":"task-core-recommendation","to":"task-core-frontend","type":"blocks"},{"from":"task-core-workflows","to":"task-integration-knowledge","type":"blocks"},{"from":"task-foundation-permissions","to":"task-integration-tools","type":"blocks"},{"from":"task-core-workflows","to":"task-integration-tools","type":"blocks"},{"from":"task-validation-security","to":"task-validation-audit-evidence","type":"blocks"},{"from":"task-integration-knowledge","to":"task-validation-evaluation","type":"blocks"},{"from":"task-integration-tools","to":"task-validation-evaluation","type":"blocks"},{"from":"task-foundation-permissions","to":"task-validation-security","type":"blocks"},{"from":"task-validation-evaluation","to":"task-validation-security","type":"blocks"},{"from":"task-core-human-review","to":"task-validation-security","type":"blocks"},{"from":"task-validation-evaluation","to":"task-deployment-package","type":"blocks"},{"from":"task-validation-security","to":"task-deployment-package","type":"blocks"},{"from":"task-validation-audit-evidence","to":"task-deployment-package","type":"blocks"},{"from":"task-deployment-package","to":"task-deployment-runbook","type":"blocks"},{"from":"task-deployment-package","to":"task-operations-monitoring","type":"blocks"},{"from":"task-operations-monitoring","to":"task-operations-maintenance","type":"blocks"}],"evidenceRefs":["exec-evidence-implementationplan-timeline-45"]}

Evidence: diagnostic, operatingModel, executiveDecision, costModel

## Operating Model Specification

Audience: Architecture

- architecture: {"systemFigureId":"enterprise-knowledge-assistant-system-architecture","authorityFigureId":"enterprise-knowledge-assistant-authority-oversight","nodeCount":25}
- runtime: {"id":"runtime-enterprise-knowledge-assistant","status":"valid","agents":2}
- deployment: Use a hybrid cloud deployment with measured fallback.
- governance: {"id":"governance-report-enterprise-knowledge-assistant","approval":"approved"}
- validation: {"id":"validation-enterprise-knowledge-assistant","status":"Implementation Ready","score":96}
- readiness: 96

Evidence: architecture, runtimePlan, governanceReport, validation

## Engineering Guide

Audience: Engineering

- implementationPackage: {"id":"implementation-package-enterprise-knowledge-assistant","status":"valid","modules":33}
- runtimeContracts: {"schemaVersion":"models-agent-runtime-contract.v1","planId":"runtime-enterprise-knowledge-assistant","architectureId":"enterprise-knowledge-assistant-system-architecture","agentRoles":[{"id":"role-workflow-single-specialist-workflow","architectureNodeId":"workflow-single-specialist-workflow","name":"single specialist workflow agent role","purpose":"Plan and supervise the single specialist workflow workflow without executing it.","responsibilities":["Micro workflow generated from diagnostic specialist components.","produce bounded recommendations","request human review for consequential actions"],"capabilities":["observe","recommend","draft"],"prohibitedCapabilities":["execute","approve","administer","self-approve"],"tools":["tool-retrieval-index","tool-citation-checker","tool-quality-gate"],"knowledgeSources":["knowledge-documents","knowledge-knowledge-base","knowledge-enterprise-systems"],"inputs":["knowledge-documents","knowledge-knowledge-base","knowledge-enterprise-systems"],"outputs":["runtime-output-workflow-single-specialist-workflow"],"authorityScope":"advisory-draft-only","delegatesTo":[],"reportsTo":"review-regulated-output","humanOversight":"review-regulated-output","memoryPolicyId":"memory-role-workflow-single-specialist-workflow","failurePolicyId":"failure-role-workflow-single-specialist-workflow","deploymentTargetId":"deploy-local-boundary","sourceRecommendationIds":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-SINGLE-001","RT-READONLY-001","RT-HUMAN-001"],"confidence":0.74},{"id":"role-workflow-review-workflow","architectureNodeId":"workflow-review-workflow","name":"review workflow agent role","purpose":"Plan and supervise the review workflow workflow without executing it.","responsibilities":["Micro workflow generated from diagnostic specialist components.","produce bounded recommendations","request human review for consequential actions"],"capabilities":["observe","recommend","draft"],"prohibitedCapabilities":["execute","approve","administer","self-approve"],"tools":[],"knowledgeSources":[],"inputs":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"outputs":["runtime-output-workflow-review-workflow"],"authorityScope":"advisory-draft-only","delegatesTo":[],"reportsTo":null,"humanOversight":"review-regulated-output","memoryPolicyId":"memory-role-workflow-review-workflow","failurePolicyId":"failure-role-workflow-review-workflow","deploymentTargetId":"deploy-local-boundary","sourceRecommendationIds":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-SINGLE-001","RT-READONLY-001","RT-HUMAN-001"],"confidence":0.74}],"capabilities":[{"id":"cap-role-workflow-single-specialist-workflow-observe","agentRoleId":"role-workflow-single-specialist-workflow","capabilityId":"observe","permission":"observe","scope":"advisory-draft-only","conditions":["architecture evidence required"],"constraints":["least privilege","deny by default"],"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001"]},{"id":"cap-role-workflow-single-specialist-workflow-recommend","agentRoleId":"role-workflow-single-specialist-workflow","capabilityId":"recommend","permission":"recommend","scope":"advisory-draft-only","conditions":["architecture evidence required"],"constraints":["least privilege","deny by default"],"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001"]},{"id":"cap-role-workflow-single-specialist-workflow-draft","agentRoleId":"role-workflow-single-specialist-workflow","capabilityId":"draft","permission":"draft","scope":"advisory-draft-only","conditions":["human approval required before execution"],"constraints":["least privilege","deny by default"],"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001","RT-DRAFT-001"]},{"id":"cap-role-workflow-review-workflow-observe","agentRoleId":"role-workflow-review-workflow","capabilityId":"observe","permission":"observe","scope":"advisory-draft-only","conditions":["architecture evidence required"],"constraints":["least privilege","deny by default"],"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001"]},{"id":"cap-role-workflow-review-workflow-recommend","agentRoleId":"role-workflow-review-workflow","capabilityId":"recommend","permission":"recommend","scope":"advisory-draft-only","conditions":["architecture evidence required"],"constraints":["least privilege","deny by default"],"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001"]},{"id":"cap-role-workflow-review-workflow-draft","agentRoleId":"role-workflow-review-workflow","capabilityId":"draft","permission":"draft","scope":"advisory-draft-only","conditions":["human approval required before execution"],"constraints":["least privilege","deny by default"],"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001","RT-DRAFT-001"]}],"authority":[{"id":"authority-role-workflow-single-specialist-workflow-recommend","subjectAgentRoleId":"role-workflow-single-specialist-workflow","action":"recommend","resource":"workflow-single-specialist-workflow","permission":"allow","conditions":["must include evidence","must stay inside role scope"],"approvalRequired":false,"approverRoleIds":[],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001","RT-AUDIT-001"]},{"id":"authority-role-workflow-single-specialist-workflow-draft","subjectAgentRoleId":"role-workflow-single-specialist-workflow","action":"draft","resource":"workflow-single-specialist-workflow","permission":"allow","conditions":["draft only","no execution","approval required before consequential use"],"approvalRequired":true,"approverRoleIds":["review-regulated-output","review-tool-action","review-low-confidence","review-user-dispute"],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-DRAFT-001","RT-HUMAN-001","RT-AUDIT-001"]},{"id":"authority-role-workflow-single-specialist-workflow-execute-deny","subjectAgentRoleId":"role-workflow-single-specialist-workflow","action":"execute","resource":"workflow-single-specialist-workflow","permission":"deny","conditions":["explicit architecture and authority evidence missing"],"approvalRequired":true,"approverRoleIds":["review-regulated-output","review-tool-action","review-low-confidence","review-user-dispute"],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-HUMAN-001","RT-READONLY-001"]},{"id":"authority-role-workflow-review-workflow-recommend","subjectAgentRoleId":"role-workflow-review-workflow","action":"recommend","resource":"workflow-review-workflow","permission":"allow","conditions":["must include evidence","must stay inside role scope"],"approvalRequired":false,"approverRoleIds":[],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001","RT-AUDIT-001"]},{"id":"authority-role-workflow-review-workflow-draft","subjectAgentRoleId":"role-workflow-review-workflow","action":"draft","resource":"workflow-review-workflow","permission":"allow","conditions":["draft only","no execution","approval required before consequential use"],"approvalRequired":true,"approverRoleIds":["review-regulated-output","review-tool-action","review-low-confidence","review-user-dispute"],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-DRAFT-001","RT-HUMAN-001","RT-AUDIT-001"]},{"id":"authority-role-workflow-review-workflow-execute-deny","subjectAgentRoleId":"role-workflow-review-workflow","action":"execute","resource":"workflow-review-workflow","permission":"deny","conditions":["explicit architecture and authority evidence missing"],"approvalRequired":true,"approverRoleIds":["review-regulated-output","review-tool-action","review-low-confidence","review-user-dispute"],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-HUMAN-001","RT-READONLY-001"]}],"toolBindings":[{"id":"tool-binding-role-workflow-single-specialist-workflow-tool-retrieval-index","agentRoleId":"role-workflow-single-specialist-workflow","toolId":"tool-retrieval-index","allowedOperations":["inspect","prepare-request","draft-call"],"prohibitedOperations":["execute-without-approval","modify-policy","approve-own-output"],"inputConstraints":["typed input required","scope must match role purpose"],"outputConstraints":["structured output","include evidence references"],"approvalRequirement":"pre-approval for consequential tool operation","auditRequirement":true,"failureBehavior":"retry within failure policy, then escalate","evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-TOOL-001","RT-HUMAN-001","RT-AUDIT-001"]},{"id":"tool-binding-role-workflow-single-specialist-workflow-tool-citation-checker","agentRoleId":"role-workflow-single-specialist-workflow","toolId":"tool-citation-checker","allowedOperations":["inspect","prepare-request","draft-call"],"prohibitedOperations":["execute-without-approval","modify-policy","approve-own-output"],"inputConstraints":["typed input required","scope must match role purpose"],"outputConstraints":["structured output","include evidence references"],"approvalRequirement":"pre-approval for consequential tool operation","auditRequirement":true,"failureBehavior":"retry within failure policy, then escalate","evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-TOOL-001","RT-HUMAN-001","RT-AUDIT-001"]},{"id":"tool-binding-role-workflow-single-specialist-workflow-tool-quality-gate","agentRoleId":"role-workflow-single-specialist-workflow","toolId":"tool-quality-gate","allowedOperations":["inspect","prepare-request","draft-call"],"prohibitedOperations":["execute-without-approval","modify-policy","approve-own-output"],"inputConstraints":["typed input required","scope must match role purpose"],"outputConstraints":["structured output","include evidence references"],"approvalRequirement":"pre-approval for consequential tool operation","auditRequirement":true,"failureBehavior":"retry within failure policy, then escalate","evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-TOOL-001","RT-HUMAN-001","RT-AUDIT-001"]}],"messageContracts":[{"id":"message-role-workflow-single-specialist-workflow-role-workflow-review-workflow-coordinate-specialist-output","sourceRoleId":"role-workflow-single-specialist-workflow","targetRoleId":"role-workflow-review-workflow","purpose":"coordinate specialist output","messageType":"agent-to-agent","inputSchemaRef":"jsonschema://models/runtime/message-input","outputSchemaRef":"jsonschema://models/runtime/message-output","requiredMetadata":["sourceRoleId","targetRoleId","architectureId","evidenceIds","ruleIds"],"timeout":"5s","retryPolicy":"bounded-retry","sensitivity":"high","auditRequired":true},{"id":"message-role-workflow-review-workflow-role-workflow-single-specialist-workflow-return-typed-recommendation","sourceRoleId":"role-workflow-review-workflow","targetRoleId":"role-workflow-single-specialist-workflow","purpose":"return typed recommendation","messageType":"agent-to-agent","inputSchemaRef":"jsonschema://models/runtime/message-input","outputSchemaRef":"jsonschema://models/runtime/message-output","requiredMetadata":["sourceRoleId","targetRoleId","architectureId","evidenceIds","ruleIds"],"timeout":"5s","retryPolicy":"bounded-retry","sensitivity":"high","auditRequired":true},{"id":"message-role-workflow-single-specialist-workflow-review-regulated-output-request-human-review","sourceRoleId":"role-workflow-single-specialist-workflow","targetRoleId":"review-regulated-output","purpose":"request human review","messageType":"agent-to-human","inputSchemaRef":"jsonschema://models/runtime/message-input","outputSchemaRef":"jsonschema://models/runtime/message-output","requiredMetadata":["sourceRoleId","targetRoleId","architectureId","evidenceIds","ruleIds"],"timeout":"24h","retryPolicy":"no-auto-repeat","sensitivity":"high","auditRequired":true},{"id":"message-role-workflow-review-workflow-review-regulated-output-request-human-review","sourceRoleId":"role-workflow-review-workflow","targetRoleId":"review-regulated-output","purpose":"request human review","messageType":"agent-to-human","inputSchemaRef":"jsonschema://models/runtime/message-input","outputSchemaRef":"jsonschema://models/runtime/message-output","requiredMetadata":["sourceRoleId","targetRoleId","architectureId","evidenceIds","ruleIds"],"timeout":"24h","retryPolicy":"no-auto-repeat","sensitivity":"high","auditRequired":true}],"memoryPolicies":[{"id":"memory-role-workflow-single-specialist-workflow","agentRoleId":"role-workflow-single-specialist-workflow","workingMemory":"ephemeral","sessionMemory":"session","longTermMemory":"none","sharedMemory":"shared-controlled","retention":"regulated audit retention","privacy":"high privacy restricted","provenance":"all reads and writes include evidence references","writeAuthority":"write-proposed","readAuthority":"minimum necessary","deletionPolicy":"policy-controlled deletion"},{"id":"memory-role-workflow-review-workflow","agentRoleId":"role-workflow-review-workflow","workingMemory":"ephemeral","sessionMemory":"session","longTermMemory":"none","sharedMemory":"shared-controlled","retention":"regulated audit retention","privacy":"high privacy restricted","provenance":"all reads and writes include evidence references","writeAuthority":"write-proposed","readAuthority":"minimum necessary","deletionPolicy":"policy-controlled deletion"}],"humanOversight":[{"id":"human-oversight-primary","trigger":"before consequential execution or external action","agentRoleIds":["role-workflow-single-specialist-workflow","role-workflow-review-workflow"],"actionTypes":["draft","tool-use","policy-exception"],"reviewerRole":"regulated output","reviewMode":"pre-approval","responseDeadline":"24h","fallbackOnTimeout":"deny action and escalate","auditRequired":true,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-HUMAN-001","RT-AUDIT-001"]}],"failurePolicies":[{"id":"failure-role-workflow-single-specialist-workflow","agentRoleId":"role-workflow-single-specialist-workflow","rules":[{"failureType":"invalid-input","detection":"schema validation failure","retryLimit":0,"fallback":"return typed correction request","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true},{"failureType":"tool-failure","detection":"tool binding reports error","retryLimit":2,"fallback":"use manual queue or reviewer handoff","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true},{"failureType":"knowledge-unavailable","detection":"knowledge binding cannot satisfy freshness or access","retryLimit":0,"fallback":"answer unavailable and request source review","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true},{"failureType":"low-confidence","detection":"role confidence below threshold","retryLimit":0,"fallback":"escalate to human reviewer","safeState":"deny consequential action and preserve evidence","notification":"notify reviewer","audit":true},{"failureType":"policy-denial","detection":"authority policy denies action","retryLimit":0,"fallback":"deny action","safeState":"deny consequential action and preserve evidence","notification":"notify reviewer","audit":true},{"failureType":"timeout","detection":"message or tool timeout","retryLimit":2,"fallback":"retry within limit then escalate","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true},{"failureType":"conflicting-results","detection":"specialist outputs conflict","retryLimit":0,"fallback":"route conflict to coordinator and reviewer","safeState":"deny consequential action and preserve evidence","notification":"notify reviewer","audit":true},{"failureType":"unsafe-output","detection":"validation or safety check rejects output","retryLimit":0,"fallback":"block output and preserve audit event","safeState":"deny consequential action and preserve evidence","notification":"notify reviewer","audit":true},{"failureType":"dependency-unavailable","detection":"external dependency unavailable","retryLimit":2,"fallback":"switch to offline safe path if available","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true}],"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-TOOLFAIL-001","RT-LOWCONF-001","RT-CONFLICT-001"]},{"id":"failure-role-workflow-review-workflow","agentRoleId":"role-workflow-review-workflow","rules":[{"failureType":"invalid-input","detection":"schema validation failure","retryLimit":0,"fallback":"return typed correction request","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true},{"failureType":"tool-failure","detection":"tool binding reports error","retryLimit":2,"fallback":"use manual queue or reviewer handoff","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true},{"failureType":"knowledge-unavailable","detection":"knowledge binding cannot satisfy freshness or access","retryLimit":0,"fallback":"answer unavailable and request source review","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true},{"failureType":"low-confidence","detection":"role confidence below threshold","retryLimit":0,"fallback":"escalate to human reviewer","safeState":"deny consequential action and preserve evidence","notification":"notify reviewer","audit":true},{"failureType":"policy-denial","detection":"authority policy denies action","retryLimit":0,"fallback":"deny action","safeState":"deny consequential action and preserve evidence","notification":"notify reviewer","audit":true},{"failureType":"timeout","detection":"message or tool timeout","retryLimit":2,"fallback":"retry within limit then escalate","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true},{"failureType":"conflicting-results","detection":"specialist outputs conflict","retryLimit":0,"fallback":"route conflict to coordinator and reviewer","safeState":"deny consequential action and preserve evidence","notification":"notify reviewer","audit":true},{"failureType":"unsafe-output","detection":"validation or safety check rejects output","retryLimit":0,"fallback":"block output and preserve audit event","safeState":"deny consequential action and preserve evidence","notification":"notify reviewer","audit":true},{"failureType":"dependency-unavailable","detection":"external dependency unavailable","retryLimit":2,"fallback":"switch to offline safe path if available","safeState":"deny consequential action and preserve evidence","notification":"notify role owner","audit":true}],"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-TOOLFAIL-001","RT-LOWCONF-001","RT-CONFLICT-001"]}],"escalationPolicies":[{"id":"escalation-role-workflow-single-specialist-workflow","trigger":"low-confidence","sourceRoleId":"role-workflow-single-specialist-workflow","targetRoleId":"role-workflow-review-workflow","humanTarget":"review-regulated-output","priority":"P0","requiredContext":["input","output","evidence","authorityPolicyId","failureType"],"timeout":"24h","fallback":"deny action until reviewed"},{"id":"escalation-role-workflow-review-workflow","trigger":"low-confidence","sourceRoleId":"role-workflow-review-workflow","targetRoleId":"role-workflow-single-specialist-workflow","humanTarget":"review-regulated-output","priority":"P0","requiredContext":["input","output","evidence","authorityPolicyId","failureType"],"timeout":"24h","fallback":"deny action until reviewed"}],"exportedAt":"2026-07-13T01:30:46.603Z"}
- apis: {"id":"api-contracts-runtime-opermodel-enterprise-knowledge-assistant","openapi":"3.1.0","info":{"title":"Enterprise Knowledge Assistant Runtime Contract Skeleton","version":"1.0.0"},"paths":{},"components":{"schemas":{"message-role-workflow-single-specialist-workflow-role-workflow-review-workflow-c":{"type":"object","required":["sourceRoleId","targetRoleId","architectureId","evidenceIds","ruleIds"],"properties":{"sourceRoleId":{"type":"string"},"targetRoleId":{"type":"string"},"architectureId":{"type":"string"},"evidenceIds":{"type":"string"},"ruleIds":{"type":"string"}}},"message-role-workflow-review-workflow-role-workflow-single-specialist-workflow-r":{"type":"object","required":["sourceRoleId","targetRoleId","architectureId","evidenceIds","ruleIds"],"properties":{"sourceRoleId":{"type":"string"},"targetRoleId":{"type":"string"},"architectureId":{"type":"string"},"evidenceIds":{"type":"string"},"ruleIds":{"type":"string"}}},"message-role-workflow-single-specialist-workflow-review-regulated-output-request":{"type":"object","required":["sourceRoleId","targetRoleId","architectureId","evidenceIds","ruleIds"],"properties":{"sourceRoleId":{"type":"string"},"targetRoleId":{"type":"string"},"architectureId":{"type":"string"},"evidenceIds":{"type":"string"},"ruleIds":{"type":"string"}}},"message-role-workflow-review-workflow-review-regulated-output-request-human-revi":{"type":"object","required":["sourceRoleId","targetRoleId","architectureId","evidenceIds","ruleIds"],"properties":{"sourceRoleId":{"type":"string"},"targetRoleId":{"type":"string"},"architectureId":{"type":"string"},"evidenceIds":{"type":"string"},"ruleIds":{"type":"string"}}}}},"x-runtime-contracts":[{"id":"message-role-workflow-single-specialist-workflow-role-workflow-review-workflow-coordinate-specialist-output","sourceRoleId":"role-workflow-single-specialist-workflow","targetRoleId":"role-workflow-review-workflow","inputSchemaRef":"jsonschema://models/runtime/message-input","outputSchemaRef":"jsonschema://models/runtime/message-output","auditRequired":true},{"id":"message-role-workflow-review-workflow-role-workflow-single-specialist-workflow-return-typed-recommendation","sourceRoleId":"role-workflow-review-workflow","targetRoleId":"role-workflow-single-specialist-workflow","inputSchemaRef":"jsonschema://models/runtime/message-input","outputSchemaRef":"jsonschema://models/runtime/message-output","auditRequired":true},{"id":"message-role-workflow-single-specialist-workflow-review-regulated-output-request-human-review","sourceRoleId":"role-workflow-single-specialist-workflow","targetRoleId":"review-regulated-output","inputSchemaRef":"jsonschema://models/runtime/message-input","outputSchemaRef":"jsonschema://models/runtime/message-output","auditRequired":true},{"id":"message-role-workflow-review-workflow-review-regulated-output-request-human-review","sourceRoleId":"role-workflow-review-workflow","targetRoleId":"review-regulated-output","inputSchemaRef":"jsonschema://models/runtime/message-input","outputSchemaRef":"jsonschema://models/runtime/message-output","auditRequired":true}],"x-no-invented-endpoints":true}
- schemas: {"id":"data-contracts-enterprise-knowledge-assistant","ontologyCompatibility":"JSOntology-compatible","sourceModels":["DiagnosticExport","ArchitectureFigure","DigitalTwin","AgentRuntimePlan"],"contracts":[{"id":"data-contract-authority-decision-log","architectureObjectId":"authority-decision-log","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/authority-decision-log","title":"decision log Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"authority-decision-log"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleAuthorityDecisionLogContract {\n  id: string;\n  architectureObjectId: \"authority-decision-log\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-authority-escalation-owner","architectureObjectId":"authority-escalation-owner","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/authority-escalation-owner","title":"escalation owner Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"authority-escalation-owner"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleAuthorityEscalationOwnerContract {\n  id: string;\n  architectureObjectId: \"authority-escalation-owner\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-authority-human-approval-before-action","architectureObjectId":"authority-human-approval-before-action","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/authority-human-approval-before-action","title":"human approval before action Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"authority-human-approval-before-action"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleAuthorityHumanApprovalBeforeActionContract {\n  id: string;\n  architectureObjectId: \"authority-human-approval-before-action\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-deploy-cloud-reasoning","architectureObjectId":"deploy-cloud-reasoning","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/deploy-cloud-reasoning","title":"Cloud Reasoning Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"deploy-cloud-reasoning"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleDeployCloudReasoningContract {\n  id: string;\n  architectureObjectId: \"deploy-cloud-reasoning\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-deploy-local-boundary","architectureObjectId":"deploy-local-boundary","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/deploy-local-boundary","title":"Local Boundary Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"deploy-local-boundary"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleDeployLocalBoundaryContract {\n  id: string;\n  architectureObjectId: \"deploy-local-boundary\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-external-architecture-council","architectureObjectId":"external-architecture-council","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/external-architecture-council","title":"architecture council Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"external-architecture-council"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleExternalArchitectureCouncilContract {\n  id: string;\n  architectureObjectId: \"external-architecture-council\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-external-audit-evidence-store","architectureObjectId":"external-audit-evidence-store","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/external-audit-evidence-store","title":"audit evidence store Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"external-audit-evidence-store"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleExternalAuditEvidenceStoreContract {\n  id: string;\n  architectureObjectId: \"external-audit-evidence-store\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-external-ontomax-governs","architectureObjectId":"external-ontomax-governs","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/external-ontomax-governs","title":"OntoMax:governs Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"external-ontomax-governs"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleExternalOntomaxGovernsContract {\n  id: string;\n  architectureObjectId: \"external-ontomax-governs\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-external-ontomax-policy","architectureObjectId":"external-ontomax-policy","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/external-ontomax-policy","title":"OntoMax:Policy Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"external-ontomax-policy"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleExternalOntomaxPolicyContract {\n  id: string;\n  architectureObjectId: \"external-ontomax-policy\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-external-policy-registry","architectureObjectId":"external-policy-registry","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/external-policy-registry","title":"policy registry Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"external-policy-registry"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleExternalPolicyRegistryContract {\n  id: string;\n  architectureObjectId: \"external-policy-registry\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-governance-boundary","architectureObjectId":"governance-boundary","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/governance-boundary","title":"Governance Boundary Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"governance-boundary"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleGovernanceBoundaryContract {\n  id: string;\n  architectureObjectId: \"governance-boundary\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-knowledge-documents","architectureObjectId":"knowledge-documents","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/knowledge-documents","title":"documents Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"knowledge-documents"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleKnowledgeDocumentsContract {\n  id: string;\n  architectureObjectId: \"knowledge-documents\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-knowledge-enterprise-systems","architectureObjectId":"knowledge-enterprise-systems","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/knowledge-enterprise-systems","title":"enterprise-systems Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"knowledge-enterprise-systems"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleKnowledgeEnterpriseSystemsContract {\n  id: string;\n  architectureObjectId: \"knowledge-enterprise-systems\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-knowledge-knowledge-base","architectureObjectId":"knowledge-knowledge-base","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/knowledge-knowledge-base","title":"knowledge-base Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"knowledge-knowledge-base"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleKnowledgeKnowledgeBaseContract {\n  id: string;\n  architectureObjectId: \"knowledge-knowledge-base\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-org-enterprise-knowledge-assistant","architectureObjectId":"org-enterprise-knowledge-assistant","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/org-enterprise-knowledge-assistant","title":"Enterprise Knowledge Assistant Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"org-enterprise-knowledge-assistant"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleOrgEnterpriseKnowledgeAssistantContract {\n  id: string;\n  architectureObjectId: \"org-enterprise-knowledge-assistant\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-review-low-confidence","architectureObjectId":"review-low-confidence","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/review-low-confidence","title":"low confidence Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"review-low-confidence"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleReviewLowConfidenceContract {\n  id: string;\n  architectureObjectId: \"review-low-confidence\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-review-regulated-output","architectureObjectId":"review-regulated-output","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/review-regulated-output","title":"regulated output Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"review-regulated-output"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleReviewRegulatedOutputContract {\n  id: string;\n  architectureObjectId: \"review-regulated-output\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-review-tool-action","architectureObjectId":"review-tool-action","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/review-tool-action","title":"tool action Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"review-tool-action"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleReviewToolActionContract {\n  id: string;\n  architectureObjectId: \"review-tool-action\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-review-user-dispute","architectureObjectId":"review-user-dispute","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/review-user-dispute","title":"user dispute Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"review-user-dispute"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleReviewUserDisputeContract {\n  id: string;\n  architectureObjectId: \"review-user-dispute\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-risk-audit-failure","architectureObjectId":"risk-audit-failure","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/risk-audit-failure","title":"audit failure Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"risk-audit-failure"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleRiskAuditFailureContract {\n  id: string;\n  architectureObjectId: \"risk-audit-failure\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-risk-retention-boundary-gaps","architectureObjectId":"risk-retention-boundary-gaps","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/risk-retention-boundary-gaps","title":"retention boundary gaps Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"risk-retention-boundary-gaps"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleRiskRetentionBoundaryGapsContract {\n  id: string;\n  architectureObjectId: \"risk-retention-boundary-gaps\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-risk-unreviewed-regulated-output","architectureObjectId":"risk-unreviewed-regulated-output","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/risk-unreviewed-regulated-output","title":"unreviewed regulated output Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"risk-unreviewed-regulated-output"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleRiskUnreviewedRegulatedOutputContract {\n  id: string;\n  architectureObjectId: \"risk-unreviewed-regulated-output\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-risk-workflow-collision","architectureObjectId":"risk-workflow-collision","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/risk-workflow-collision","title":"workflow collision Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"risk-workflow-collision"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleRiskWorkflowCollisionContract {\n  id: string;\n  architectureObjectId: \"risk-workflow-collision\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-system-audit-system","architectureObjectId":"system-audit-system","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/system-audit-system","title":"audit system Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"system-audit-system"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleSystemAuditSystemContract {\n  id: string;\n  architectureObjectId: \"system-audit-system\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-system-evaluation-system","architectureObjectId":"system-evaluation-system","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/system-evaluation-system","title":"evaluation system Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"system-evaluation-system"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleSystemEvaluationSystemContract {\n  id: string;\n  architectureObjectId: \"system-evaluation-system\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-system-intake-system","architectureObjectId":"system-intake-system","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/system-intake-system","title":"intake system Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"system-intake-system"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleSystemIntakeSystemContract {\n  id: string;\n  architectureObjectId: \"system-intake-system\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-system-knowledge-system","architectureObjectId":"system-knowledge-system","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/system-knowledge-system","title":"knowledge system Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"system-knowledge-system"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleSystemKnowledgeSystemContract {\n  id: string;\n  architectureObjectId: \"system-knowledge-system\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-system-workflow-system","architectureObjectId":"system-workflow-system","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/system-workflow-system","title":"workflow system Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"system-workflow-system"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleSystemWorkflowSystemContract {\n  id: string;\n  architectureObjectId: \"system-workflow-system\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-tool-citation-checker","architectureObjectId":"tool-citation-checker","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/tool-citation-checker","title":"citation checker Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"tool-citation-checker"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleToolCitationCheckerContract {\n  id: string;\n  architectureObjectId: \"tool-citation-checker\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-tool-quality-gate","architectureObjectId":"tool-quality-gate","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/tool-quality-gate","title":"quality gate Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"tool-quality-gate"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleToolQualityGateContract {\n  id: string;\n  architectureObjectId: \"tool-quality-gate\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-tool-retrieval-index","architectureObjectId":"tool-retrieval-index","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/tool-retrieval-index","title":"retrieval index Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"tool-retrieval-index"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleToolRetrievalIndexContract {\n  id: string;\n  architectureObjectId: \"tool-retrieval-index\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-workflow-review-workflow","architectureObjectId":"workflow-review-workflow","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/workflow-review-workflow","title":"review workflow Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"workflow-review-workflow"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleWorkflowReviewWorkflowContract {\n  id: string;\n  architectureObjectId: \"workflow-review-workflow\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]},{"id":"data-contract-workflow-single-specialist-workflow","architectureObjectId":"workflow-single-specialist-workflow","jsonSchema":{"$schema":"https://json-schema.org/draft/2020-12/schema","$id":"jsonschema://models/implementation/module/workflow-single-specialist-workflow","title":"single specialist workflow Contract","type":"object","required":["id","architectureObjectId","evidence"],"properties":{"id":{"type":"string"},"architectureObjectId":{"const":"workflow-single-specialist-workflow"},"status":{"enum":["planned","implemented","validated","blocked","deprecated"]},"evidence":{"type":"array","items":{"type":"string"}}}},"typescriptInterface":"export interface ModuleWorkflowSingleSpecialistWorkflowContract {\n  id: string;\n  architectureObjectId: \"workflow-single-specialist-workflow\";\n  status?: \"planned\" | \"implemented\" | \"validated\" | \"blocked\" | \"deprecated\";\n  evidence: string[];\n}","validationRefs":["validateArchitectureFigure","validateRuntimePlan","validateImplementationPackage"]}]}
- dependencies: {"nodes":[{"id":"task-discovery-architecture-review","label":"Approve architecture scope","phase":"Discovery","category":"Documentation"},{"id":"task-discovery-constraints","label":"Document constraints and acceptance criteria","phase":"Discovery","category":"Documentation"},{"id":"task-foundation-authentication","label":"Define authentication boundary","phase":"Foundation","category":"Security"},{"id":"task-foundation-infrastructure","label":"Provision implementation environments","phase":"Foundation","category":"Infrastructure"},{"id":"task-foundation-ontology","label":"Map OntoMax concepts and evidence vocabulary","phase":"Foundation","category":"Ontology"},{"id":"task-foundation-permissions","label":"Implement permissions model","phase":"Foundation","category":"Security"},{"id":"task-core-human-review","label":"Implement human review workflow","phase":"Core Platform","category":"Backend"},{"id":"task-core-recommendation","label":"Implement deterministic recommendation adapters","phase":"Core Platform","category":"AI"},{"id":"task-core-workflows","label":"Build workflow orchestration path","phase":"Core Platform","category":"Backend"},{"id":"task-core-frontend","label":"Build operator-facing implementation surface","phase":"Core Platform","category":"Frontend"},{"id":"task-integration-knowledge","label":"Connect knowledge sources","phase":"Integrations","category":"Integration"},{"id":"task-integration-tools","label":"Connect controlled tool interfaces","phase":"Integrations","category":"Integration"},{"id":"task-validation-audit-evidence","label":"Validate audit evidence and retention controls","phase":"Validation","category":"Security"},{"id":"task-validation-evaluation","label":"Build evaluation and acceptance test suite","phase":"Validation","category":"Testing"},{"id":"task-validation-security","label":"Run security and governance validation","phase":"Validation","category":"Security"},{"id":"task-deployment-package","label":"Package deployment candidate","phase":"Deployment","category":"Deployment"},{"id":"task-deployment-runbook","label":"Prepare release runbook","phase":"Deployment","category":"Documentation"},{"id":"task-operations-monitoring","label":"Set monitoring and operational ownership","phase":"Operations","category":"Infrastructure"},{"id":"task-operations-maintenance","label":"Define maintenance and review cadence","phase":"Operations","category":"Documentation"}],"edges":[{"from":"task-discovery-constraints","to":"task-foundation-authentication","type":"blocks"},{"from":"task-discovery-architecture-review","to":"task-foundation-infrastructure","type":"blocks"},{"from":"task-discovery-architecture-review","to":"task-foundation-ontology","type":"blocks"},{"from":"task-foundation-authentication","to":"task-foundation-permissions","type":"blocks"},{"from":"task-foundation-permissions","to":"task-core-human-review","type":"blocks"},{"from":"task-core-workflows","to":"task-core-human-review","type":"blocks"},{"from":"task-foundation-ontology","to":"task-core-recommendation","type":"blocks"},{"from":"task-foundation-infrastructure","to":"task-core-recommendation","type":"blocks"},{"from":"task-core-recommendation","to":"task-core-workflows","type":"blocks"},{"from":"task-foundation-permissions","to":"task-core-workflows","type":"blocks"},{"from":"task-core-recommendation","to":"task-core-frontend","type":"blocks"},{"from":"task-core-workflows","to":"task-integration-knowledge","type":"blocks"},{"from":"task-foundation-permissions","to":"task-integration-tools","type":"blocks"},{"from":"task-core-workflows","to":"task-integration-tools","type":"blocks"},{"from":"task-validation-security","to":"task-validation-audit-evidence","type":"blocks"},{"from":"task-integration-knowledge","to":"task-validation-evaluation","type":"blocks"},{"from":"task-integration-tools","to":"task-validation-evaluation","type":"blocks"},{"from":"task-foundation-permissions","to":"task-validation-security","type":"blocks"},{"from":"task-validation-evaluation","to":"task-validation-security","type":"blocks"},{"from":"task-core-human-review","to":"task-validation-security","type":"blocks"},{"from":"task-validation-evaluation","to":"task-deployment-package","type":"blocks"},{"from":"task-validation-security","to":"task-deployment-package","type":"blocks"},{"from":"task-validation-audit-evidence","to":"task-deployment-package","type":"blocks"},{"from":"task-deployment-package","to":"task-deployment-runbook","type":"blocks"},{"from":"task-deployment-package","to":"task-operations-monitoring","type":"blocks"},{"from":"task-operations-monitoring","to":"task-operations-maintenance","type":"blocks"}]}
- implementationPhases: [{"id":"phase-discovery","title":"Discovery","description":"Confirm scope, constraints, and acceptance criteria.","estimatedDuration":"2 weeks","dependencies":[],"deliverables":["Approve architecture scope","Document constraints and acceptance criteria"],"risks":["Keep architecture review and acceptance criteria current."]},{"id":"phase-foundation","title":"Foundation","description":"Prepare infrastructure, identity, permissions, and ontology foundations.","estimatedDuration":"3 weeks","dependencies":["Discovery"],"deliverables":["Define authentication boundary","Provision implementation environments","Map OntoMax concepts and evidence vocabulary","Implement permissions model"],"risks":["Validate permission boundary before integrations are enabled."]},{"id":"phase-core-platform","title":"Core Platform","description":"Build deterministic planning, workflow, and interface components.","estimatedDuration":"6 weeks","dependencies":["Foundation"],"deliverables":["Implement human review workflow","Implement deterministic recommendation adapters","Build workflow orchestration path","Build operator-facing implementation surface"],"risks":[]},{"id":"phase-integrations","title":"Integrations","description":"Connect knowledge, tools, data, and offline paths.","estimatedDuration":"3 weeks","dependencies":["Core Platform","Foundation"],"deliverables":["Connect knowledge sources","Connect controlled tool interfaces"],"risks":["Validate permission boundary before integrations are enabled."]},{"id":"phase-validation","title":"Validation","description":"Verify quality, security, governance, and acceptance evidence.","estimatedDuration":"5 weeks","dependencies":["Integrations","Foundation","Core Platform"],"deliverables":["Validate audit evidence and retention controls","Build evaluation and acceptance test suite","Run security and governance validation"],"risks":["Require review evidence for all governance-sensitive workflow paths.","Validate audit evidence, retention controls, and human approval before release."]},{"id":"phase-deployment","title":"Deployment","description":"Package and release the selected deployment path.","estimatedDuration":"3 weeks","dependencies":["Validation"],"deliverables":["Package deployment candidate","Prepare release runbook"],"risks":["Stage deployment behind acceptance and rollback runbook.","Track blocked deployment candidates so fallback paths do not bypass constraints."]},{"id":"phase-operations","title":"Operations","description":"Assign monitoring, maintenance, and review ownership.","estimatedDuration":"3 weeks","dependencies":["Deployment"],"deliverables":["Set monitoring and operational ownership","Define maintenance and review cadence"],"risks":["Assign operational owner before deployment package is approved.","Document review cadence and maintenance owner."]}]

Evidence: implementationPackage, runtimePlan, implementationPlan

## Governance Handbook

Audience: Governance

- policies: [{"schemaVersion":"models-governance-policy.v1","id":"GOV-AUTH-001","name":"No consequential action without authority","category":"Authority","description":"Consequential actions require explicit authority policy coverage.","severity":"Critical","enabled":true,"conditions":["Runtime has tool or consequential action"],"requiredEvidence":["authorityPolicies"],"exceptions":[],"blocking":true,"owner":"governance owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-HUMAN-001","name":"High-risk actions require human approval","category":"Human Review","description":"High-risk actions must require human approval.","severity":"Critical","enabled":true,"conditions":["High-risk action exists"],"requiredEvidence":["approverRoleIds"],"exceptions":[],"blocking":true,"owner":"human review owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-AUDIT-001","name":"Regulated deployments require audit","category":"Audit","description":"Regulated deployments require audit evidence.","severity":"High","enabled":true,"conditions":["Regulated or high compliance sensitivity"],"requiredEvidence":["auditRequired"],"exceptions":[],"blocking":true,"owner":"audit owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-KNOW-001","name":"Sensitive knowledge requires controlled access","category":"Knowledge","description":"Sensitive knowledge sources require controlled access and provenance.","severity":"High","enabled":true,"conditions":["Sensitive or high privacy inputs"],"requiredEvidence":["privacyConstraint","provenanceRequirement"],"exceptions":[],"blocking":true,"owner":"privacy owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-AUTH-002","name":"Execution authority requires evidence","category":"Authority","description":"Execution authority may not be granted without evidence.","severity":"Critical","enabled":true,"conditions":["Execution permission is allowed"],"requiredEvidence":["evidence"],"exceptions":[],"blocking":true,"owner":"security owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-DELEGATE-001","name":"Circular delegation prohibited","category":"Runtime","description":"Delegation graph must be acyclic.","severity":"Critical","enabled":true,"conditions":["Delegations exist"],"requiredEvidence":["delegationGraph"],"exceptions":[],"blocking":true,"owner":"runtime owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-OWNER-001","name":"Missing owner prohibited","category":"Governance","description":"Policies and operating models require named owners.","severity":"High","enabled":true,"conditions":["Operating model or policy exists"],"requiredEvidence":["owner"],"exceptions":[],"blocking":true,"owner":"governance owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-RUNTIME-001","name":"Runtime plan required before approval","category":"Runtime","description":"Governance approval requires a runtime plan.","severity":"Critical","enabled":true,"conditions":["Operating model exists"],"requiredEvidence":["runtimePlan"],"exceptions":[],"blocking":true,"owner":"runtime owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-VALIDATION-001","name":"Validation must pass before deployment","category":"Deployment","description":"Deployment approval requires validation with no blocking issues.","severity":"Critical","enabled":true,"conditions":["Deployment requested"],"requiredEvidence":["validationSummary"],"exceptions":[],"blocking":true,"owner":"validation owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-DEPLOY-001","name":"Deployment must satisfy privacy constraints","category":"Privacy","description":"Recommended deployment must satisfy privacy and offline constraints.","severity":"Critical","enabled":true,"conditions":["Deployment selected"],"requiredEvidence":["privacyFit"],"exceptions":[],"blocking":true,"owner":"deployment owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-AGENT-001","name":"Every agent requires a purpose","category":"Runtime","description":"Every runtime agent role must have a purpose.","severity":"High","enabled":true,"conditions":["Agent role exists"],"requiredEvidence":["purpose"],"exceptions":[],"blocking":true,"owner":"architecture owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-WORKFLOW-001","name":"Every workflow requires an owner","category":"Operations","description":"Every workflow must have an accountable owner.","severity":"High","enabled":true,"conditions":["Workflow exists"],"requiredEvidence":["workflowOwner"],"exceptions":[],"blocking":true,"owner":"operations owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-EXT-001","name":"Every external dependency requires governance","category":"Governance","description":"External dependencies require governance evidence.","severity":"High","enabled":true,"conditions":["External dependency exists"],"requiredEvidence":["implementationPlan"],"exceptions":[],"blocking":true,"owner":"integration owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-EXCEPTION-001","name":"Every exception must be documented","category":"Governance","description":"Policy exceptions require justification, approver, expiration, and audit trail.","severity":"High","enabled":true,"conditions":["Exception exists"],"requiredEvidence":["businessJustification","approver","expiration","auditTrail"],"exceptions":[],"blocking":true,"owner":"governance owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"},{"schemaVersion":"models-governance-policy.v1","id":"GOV-APPROVAL-001","name":"Every blocked policy prevents approval","category":"Governance","description":"Any unresolved blocking policy prevents approval.","severity":"Critical","enabled":true,"conditions":["Policy evaluation completed"],"requiredEvidence":["blockingPolicies"],"exceptions":[],"blocking":true,"owner":"governance owner","version":{"major":1,"minor":0,"patch":0,"label":"1.0.0","previousVersion":null,"supersedes":null},"lifecycleStatus":"Active","ruleVersion":"models-governance-policy-rules.v1"}]
- authority: [{"id":"authority-role-workflow-single-specialist-workflow-recommend","subjectAgentRoleId":"role-workflow-single-specialist-workflow","action":"recommend","resource":"workflow-single-specialist-workflow","permission":"allow","conditions":["must include evidence","must stay inside role scope"],"approvalRequired":false,"approverRoleIds":[],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001","RT-AUDIT-001"]},{"id":"authority-role-workflow-single-specialist-workflow-draft","subjectAgentRoleId":"role-workflow-single-specialist-workflow","action":"draft","resource":"workflow-single-specialist-workflow","permission":"allow","conditions":["draft only","no execution","approval required before consequential use"],"approvalRequired":true,"approverRoleIds":["review-regulated-output","review-tool-action","review-low-confidence","review-user-dispute"],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-DRAFT-001","RT-HUMAN-001","RT-AUDIT-001"]},{"id":"authority-role-workflow-single-specialist-workflow-execute-deny","subjectAgentRoleId":"role-workflow-single-specialist-workflow","action":"execute","resource":"workflow-single-specialist-workflow","permission":"deny","conditions":["explicit architecture and authority evidence missing"],"approvalRequired":true,"approverRoleIds":["review-regulated-output","review-tool-action","review-low-confidence","review-user-dispute"],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-HUMAN-001","RT-READONLY-001"]},{"id":"authority-role-workflow-review-workflow-recommend","subjectAgentRoleId":"role-workflow-review-workflow","action":"recommend","resource":"workflow-review-workflow","permission":"allow","conditions":["must include evidence","must stay inside role scope"],"approvalRequired":false,"approverRoleIds":[],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-READONLY-001","RT-AUDIT-001"]},{"id":"authority-role-workflow-review-workflow-draft","subjectAgentRoleId":"role-workflow-review-workflow","action":"draft","resource":"workflow-review-workflow","permission":"allow","conditions":["draft only","no execution","approval required before consequential use"],"approvalRequired":true,"approverRoleIds":["review-regulated-output","review-tool-action","review-low-confidence","review-user-dispute"],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-DRAFT-001","RT-HUMAN-001","RT-AUDIT-001"]},{"id":"authority-role-workflow-review-workflow-execute-deny","subjectAgentRoleId":"role-workflow-review-workflow","action":"execute","resource":"workflow-review-workflow","permission":"deny","conditions":["explicit architecture and authority evidence missing"],"approvalRequired":true,"approverRoleIds":["review-regulated-output","review-tool-action","review-low-confidence","review-user-dispute"],"delegationAllowed":false,"auditRequired":true,"expiration":null,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-HUMAN-001","RT-READONLY-001"]}]
- exceptions: []
- audit: {"ontomax":{"domain":"governance","classes":["Authority","Policy","Boundary","QualityGate"]},"agentOntology":["Agent","Delegation","Authority","Capability","RuntimePlan"],"civilOntology":["Governance","Policy","Exception","Approval","Audit"]}
- oversight: [{"id":"human-oversight-primary","trigger":"before consequential execution or external action","agentRoleIds":["role-workflow-single-specialist-workflow","role-workflow-review-workflow"],"actionTypes":["draft","tool-use","policy-exception"],"reviewerRole":"regulated output","reviewMode":"pre-approval","responseDeadline":"24h","fallbackOnTimeout":"deny action and escalate","auditRequired":true,"evidence":["REC-MICRO-ARCHITECTURE-001","REC-MICRO-HUMAN-001"],"ruleIds":["RT-HUMAN-001","RT-AUDIT-001"]}]
- approvals: {"approved":false,"blockedBy":["GOV-KNOW-001","GOV-EXT-001","GOV-APPROVAL-001"],"exceptionCount":0,"status":"approved","approvedAt":"2026-07-12T00:00:00.000Z","source":"CanonDocs publication approval fixture"}

Evidence: governanceReport, runtimePlan, executiveDecision

## Appendix

Audience: All

- evidenceReferences: [{"id":"REC-MACRO-ARCHITECTURE-001","source":"diagnostic","rule":"MODELS-ENTERPRISE-001","evidence":["organizationType=enterprise","estimatedUsage=enterprise","industry=finance","complianceSensitivity=regulated","organizationType=enterprise","primaryUseCase=knowledge-assistant","intendedUsers=internal-teams"],"assumptions":["OntoMax:Policy","OntoMax:governs","architecture council","policy registry","audit evidence store","OntoMax:QualityGate","risk owner","OntoMax:System","OntoMax:contains","OntoMax:Boundary","project owner"]},{"id":"REC-MACRO-COMPLIANCE-001","source":"diagnostic","rule":"MODELS-COMPLIANCE-001","evidence":["industry=finance","complianceSensitivity=regulated"],"assumptions":["OntoMax:QualityGate","risk owner"]},{"id":"REC-MICRO-ARCHITECTURE-001","source":"diagnostic","rule":"MODELS-KNOWLEDGE-ASSISTANT-001","evidence":["primaryUseCase=knowledge-assistant","availableDataSources=documents+knowledge-base+enterprise-systems","humanOversightRequirement=required","complianceSensitivity=regulated"],"assumptions":["OntoMax:Evidence","OntoMax:supports","OntoMax:challenges","document index","source citation policy","answer evaluator","OntoMax:Boundary","review queue","decision log"]},{"id":"REC-MICRO-HUMAN-001","source":"diagnostic","rule":"MODELS-HUMAN-OVERSIGHT-001","evidence":["humanOversightRequirement=required","complianceSensitivity=regulated"],"assumptions":["OntoMax:Boundary","review queue","decision log"]},{"id":"REC-MINI-DEPLOYMENT-001","source":"diagnostic","rule":"MODELS-BASE-001","evidence":["organizationType=enterprise","primaryUseCase=knowledge-assistant","intendedUsers=internal-teams"],"assumptions":["OntoMax:System","OntoMax:contains","OntoMax:Boundary","project owner"]},{"id":"exec-source-project","source":"Project","rule":"1.0.0","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-diagnostic","source":"Diagnostic","rule":"models-diagnostic-rules.2026-07-12","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-architecture","source":"Architecture","rule":"models-architecture-figure.v1","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-blueprint","source":"Blueprint","rule":"1.0.0","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-deployment","source":"DeploymentComparison","rule":"models-diagnostic-rules.2026-07-12","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-implementationPlan","source":"ImplementationPlan","rule":"1.0.0","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-validation","source":"ReadinessValidation","rule":"models-diagnostic-rules.2026-07-12","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-runtimePlan","source":"RuntimePlan","rule":"models-agent-runtime-rules.v1","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-operatingModel","source":"OperatingModel","rule":"1.0.0","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-governance","source":"GovernanceReport","rule":"models-governance-policy-rules.v1","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-cost","source":"CostModel","rule":"models-tco-roi-rules.v1","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-knowledge","source":"KnowledgeHealth","rule":"models-knowledge-health-report.v1","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-implementationPackage","source":"ImplementationPackage","rule":"1.0.0","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-optimization","source":"OptimizationPlan","rule":"models-optimization-rules.v1","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-scenarioImprovement","source":"ScenarioComparison","rule":"models-architecture-scenario.v1","evidence":["artifact"],"assumptions":[]},{"id":"exec-source-scenarioRegression","source":"ScenarioComparison","rule":"models-architecture-scenario.v1","evidence":["artifact"],"assumptions":[]},{"id":"exec-evidence-costmodel-metrics-17","source":"CostModel","rule":"models-tco-roi-rules.v1","evidence":["metrics"],"assumptions":[]},{"id":"exec-evidence-deploymentcomparison-candidateresults-candidate-private-cloud-18","source":"DeploymentComparison","rule":"models-diagnostic-rules.2026-07-12","evidence":["candidateResults.candidate-private-cloud"],"assumptions":[]},{"id":"exec-evidence-readinessvalidation-overallscore-19","source":"ReadinessValidation","rule":"models-diagnostic-rules.2026-07-12","evidence":["overallScore"],"assumptions":[]},{"id":"exec-evidence-costmodel-metrics-20","source":"CostModel","rule":"models-tco-roi-rules.v1","evidence":["metrics"],"assumptions":[]}]
- canonDrawDiagrams: [{"id":"system","title":"System","sourceFigureId":"enterprise-knowledge-assistant-system-architecture","nodeCount":25,"edgeCount":26},{"id":"authority","title":"Authority","sourceFigureId":"enterprise-knowledge-assistant-authority-oversight","nodeCount":15,"edgeCount":14},{"id":"deployment","title":"Deployment","sourceFigureId":"enterprise-knowledge-assistant-system-architecture-deployment","nodeCount":17,"edgeCount":14},{"id":"workflow","title":"Workflow","sourceFigureId":"enterprise-knowledge-assistant-system-architecture-workflow","nodeCount":14,"edgeCount":13}]
- versionHistory: [{"twinRevision":1,"architectureRevision":1,"timestamp":"2026-07-12T00:00:00.000Z","reason":"created","delta":null}]
- assumptions: {"id":"assumptions-standard-tco","name":"Standard TCO assumptions","currency":"USD","engineeringRate":150,"operationsRate":110,"expectedUsers":500,"requestsPerDay":12000,"storageGrowth":80,"availabilityTarget":99.5,"timeHorizonMonths":36,"notes":["Fixture assumptions for deterministic model comparison."],"infrastructureMonthlyBase":1200,"infrastructureUnitMonthly":700,"inferenceUnitCostPer1000Requests":0.18,"storageCostPerGbMonth":0.09,"networkingCostPer1000Requests":0.025,"monitoringMonthlyBase":220,"securityMonthlyBase":320,"complianceMonthlyBase":420,"maintenancePercent":18,"thirdPartyMonthlyBase":150,"trainingInitial":2500,"operationsBaseHoursMonthly":10,"expectedMonthlySavings":8500,"expectedRevenueImpactMonthly":0,"createdAt":"2026-07-13T01:30:46.598Z","updatedAt":"2026-07-13T01:30:46.598Z"}
- glossary: [{"term":"Operating Model","definition":"A versioned representation of current state, target state, governance, implementation, and evidence."},{"term":"CanonDocs","definition":"The deterministic publisher for approved Operating Model documentation."},{"term":"CanonDraw","definition":"The existing architecture diagram export format embedded by reference in the document."},{"term":"Source Snapshot","definition":"Immutable source identity and version metadata captured at publication time."}]
- sourceReferences: {"diagnostic":{"id":"Unknown","version":"models-diagnostic-rules.2026-07-12","generatedAt":"2026-07-12T00:00:00.000Z","status":"Unknown"},"architecture":{"id":"enterprise-knowledge-assistant-system-architecture","version":"models-architecture-figure.v1","generatedAt":"2026-07-12T00:00:00.000Z","status":"Unknown"},"authorityArchitecture":{"id":"enterprise-knowledge-assistant-authority-oversight","version":"models-architecture-figure.v1","generatedAt":"2026-07-12T00:00:00.000Z","status":"Unknown"},"operatingModel":{"id":"opermodel-fixture-enterprise-knowledge-assistant","version":"1.0.0","generatedAt":"2026-07-12T00:00:00.000Z","status":"active"},"runtimePlan":{"id":"runtime-enterprise-knowledge-assistant","version":"models-agent-runtime-rules.v1","generatedAt":"2026-07-12T00:00:00.000Z","status":"valid"},"validation":{"id":"validation-enterprise-knowledge-assistant","version":"models-diagnostic-rules.2026-07-12","generatedAt":"2026-07-12T00:00:00.000Z","status":"Implementation Ready"},"governanceReport":{"id":"governance-report-enterprise-knowledge-assistant","version":"models-governance-policy-rules.v1","generatedAt":"2026-07-12T00:00:00.000Z","status":"approved"},"implementationPlan":{"id":"plan-enterprise-knowledge-assistant","version":"1.0.0","generatedAt":"2026-07-12T00:00:00.000Z","status":"Unknown"},"implementationPackage":{"id":"implementation-package-enterprise-knowledge-assistant","version":"1.0.0","generatedAt":"2026-07-12T00:00:00.000Z","status":"valid"},"executiveDecision":{"id":"executive-decision-enterprise-knowledge-assistant","version":"1.0.0","generatedAt":"2026-07-12T00:00:00.000Z","status":"approved"},"costModel":{"id":"cost-enterprise-knowledge-assistant","version":"models-tco-roi-rules.v1","generatedAt":"2026-07-12T00:00:00.000Z","status":"Unknown"}}

Evidence: diagnostic, architecture, operatingModel, executiveDecision

## CanonDraw Diagrams

- System: enterprise-knowledge-assistant-system-architecture (25 nodes, 26 edges)
- Authority: enterprise-knowledge-assistant-authority-oversight (15 nodes, 14 edges)
- Deployment: enterprise-knowledge-assistant-system-architecture-deployment (17 nodes, 14 edges)
- Workflow: enterprise-knowledge-assistant-system-architecture-workflow (14 nodes, 13 edges)