AI Executive Office — CXO Assistant Platform  ·  View 07 of 30  ·  3 · Structure

Layered Architecture

What depends on what, and the one dependency that is deliberately allowed to point the other way.

Editable source SVG draw.io All views
Experience Teams app brief · approve Executive web React on Container Apps Mobile Intune managed Tenant console config, not code Edge and API Front Door + WAF TLS 1.3 · DDoS API Management per-tenant quota Experience API one contract per surface Orchestration Executive Orchestrator intent · plan · compose Specialist agents finance · risk · projects Decision engine situation to options Investigation runner Durable Functions Conversation state Redis · 24 h Grounding Tool plane typed contracts only Retrieval service hybrid + trimming Metric service the only KPI path Prediction service forecast · anomaly Guardrail service ground · abstain AI platform Azure OpenAI reasoning · routing · embed AI Foundry agents · evals · tracing Azure AI Search vector + BM25 Content Safety shields · groundedness Prompt registry versioned · pinned Data and analytics OneLake medallion Fabric warehouse canonical model Semantic model DAX measures Entity graph Cosmos DB Gremlin Azure ML managed endpoints Real-Time Intelligence KQL signals Integration Data Factory batch + CDC Eventstream events in Service Bus action queue Logic Apps execution plane Connector identities one per system Cross-cutting Entra ID OBO · PIM · CA Key Vault mHSM per-tenant CMK Purview catalogue · lineage Azure Monitor traces · cost Defender + Sentinel posture · SIEM Azure Policy landing-zone guardrails one call per turn typed tool call DAX only filtered query outcome callback Layered Architecture — What Depends on What Application we own Interface / broker Data store Security / platform Queue / topic synchronous event / async Dependencies point down. The one upward arrow is the execution plane reporting an outcome, and it is asynchronous by design. v 1.0 · owner Data & AI Global Practice · date 2026-09

The layering rule

  • A layer may call the layer below it and nothing above. The single upward arrow — the execution plane reporting an outcome to the decision engine — is asynchronous and passes through a queue, so it is a message rather than a dependency
  • Grounding is a layer of its own, between orchestration and the AI platform. Collapsing it into the orchestrator is the mistake that makes tool authorisation impossible to audit later
  • The metric service is the only component permitted to compute a KPI. Every other path to a number is a defect, and a test enforces it

Deliberate omissions

  • The cross-cutting band is drawn as a layer because the generator stacks bands. It is not a bottom layer: identity, keys, policy and monitoring touch every layer above
  • Individual specialist agents are one box. Ten capability packs share one runtime — view 16

Risks

  • Eight layers is a lot of indirection for a first release. The mitigation is that the grounding and orchestration layers ship as one deployable in the prototype and separate only when a second consumer appears