Architecture Thesis

Architecture and Intent

The system diagram is only half the architecture.

Your architecture diagram shows what the system can reach. It usually does not show what the system should trust, who has authority, how contradictions are resolved, what may be changed, or how far the consequences can spread.

Artifact record

Architecture and Intent

Publication

Author: Tony Malott
Published: July 17, 2026
Format: Architecture Thesis
Privacy: public-safe
JavaScript: artifact-local

Provenance

owner-approved-public-safe-presentation-family-v02

This package uses generalized examples involving architecture records, policies, controls, services, operational assets, repositories, databases, evidence, incidents, approvals, lifecycle, and organizational knowledge. It contains no employer or customer names, private estate counts, regulated records, internal control identifiers, private topology, internal URLs, named private owners, credentials, secrets, or security-sensitive production configuration. The artifact expresses Tony Malott's architecture doctrine and a proposed review method. It does not claim enterprise approval, regulatory certification, or universal applicability.

Public sources5

NIST AI 600-1: Generative Artificial Intelligence Profile
Current authoritative risk-management context for governance, provenance, testing, information integrity, information security, and human-AI configuration.
Open source
OWASP LLM01: Prompt Injection
Current security guidance for direct and indirect prompt injection, including retrieved external content and the limits of RAG as a mitigation.
Open source
OWASP LLM06: Excessive Agency
Current security guidance for narrow tools, least privilege, downstream authorization, human approval for high-impact actions, monitoring, and rate limiting.
Open source
Regulation (EU) 2024/1689, Artificial Intelligence Act
Current legal authority for risk-proportionate human oversight, including interpretation, override, reversal, interruption, and safe stopping.
Open source
W3C PROV Overview
Foundational provenance authority retained as an explicit evidence-floor exception for entities, activities, derivation, versioning, reproducibility, and trust assessment.
Open source

Share or reuse

Send the page or take its public context with you.

What’s included

The agent package contains the canonical public HTML, public metadata, receipt, plain-text context, package guide, and member-hash manifest.

Agent context is a generated public-safe plain-text projection. It is not canonical Markdown and does not replace the artifact or its versioned authority.