nyami.fr

/ architecture lab

Architecture Lab

Independent reference architectures — proposed target-state designs based on enterprise AI and regulated-platform experience. Where a pattern actually runs on this site, it is linked; where it is proposed, it says so. Nothing here claims prior tenant ownership.

01

Power Platform Governance Blueprint

proposed reference architecture

Target-state governance for a Power Platform estate: environment landscape, DLP classification, ALM promotion, maker segmentation and a Center of Excellence operating model — the frame that turns citizen development into an asset instead of shadow IT.

Environment landscape & ALM flow

flowchart LR
  PERS["Personal<br/>sandbox · default DLP"] --> TEAM["Team<br/>shared maker envs"]
  TEAM --> DEPT["Department<br/>governed pre-prod"]
  DEPT -->|"pipelines · approvals<br/>env variables · connection refs"| PROD["Managed production<br/>managed solutions"]

DLP classification matrix

Connector class Examples Policy
Business Dataverse, SharePoint, approved LOB APIs Combine freely within class
Non-Business Personal productivity connectors Never combined with Business
Blocked Consumer / unvetted connectors Unavailable in all environments
Custom Internal APIs via custom connectors Approval workflow + owner + review date

Operating model

  • Dataverse roles and access model per environment class; application ownership registered — orphaned apps detected and re-assigned or retired.
  • Managed solutions only beyond dev; environment variables and connection references make promotion reproducible.
  • Center of Excellence: telemetry on makers/apps/flows, maturity model for maker segmentation, playbooks for support.
  • Explicit transition criteria from citizen development to professional IT: data sensitivity, user count, availability needs, integration depth.

Reference architecture — not presented as prior tenant ownership.

02

Enterprise AI Governance Operating Model

proposed reference architecture

Organisation, roles, policies and process for AI at enterprise scale — not just technology. Every use case flows through one lifecycle with named owners, risk classification and cost accountability.

Use-case lifecycle

flowchart LR
  A["Idea"] --> B["Classification"] --> C["Architecture"] --> D["Risk review"] --> E["Pilot"]
  E --> F["Readiness review"] --> G["Production"] --> H["Monitoring"] --> I["Retirement"]

Operating model components

  • Intake: every AI use case registered with a business owner AND a technical owner — no orphaned experiments.
  • Risk classification decides the path: approved data categories, approved model catalogue, review depth.
  • Approval boards with security review and production-readiness gates; exception management with expiry dates, not permanent waivers.
  • Cost ownership per use case; monitoring and incident response wired before go-live; model retirement as a first-class phase.

Reference architecture — not presented as prior tenant ownership.

03

Multi-LLM Selection and Routing Framework

proposed reference architecture

A decision method — not a vendor ranking. Model choice becomes an explicit, revisable matrix; routing, fallback and migration are architecture, so a provider change never becomes a rewrite.

Selection matrix (method — values are use-case-specific)

Criterion Frontier API models Regional / hosted Local / open-weights
Reasoning quality evaluated per task evaluated per task evaluated per task
Sensitive data depends on residency terms strong fit strongest fit
Latency network-bound region-bound infra-bound
Cost at scale per-token per-token / capacity capacity + ops
Tool calling benchmark before commit benchmark before commit varies widely

Routing & lifecycle

  • Task classification + data sensitivity decide the candidate set; quality benchmarks per task family, not global leaderboards.
  • Routing with fallback chains and circuit breakers; version pinning with declared migration windows.
  • Deprecation and rollback plans written at adoption time; consumption budgets per workload.

Reference architecture — not presented as prior tenant ownership.

04

Responsible AI Control Library

proposed reference architecture

Controls mapped to lifecycle phases — a library to instantiate per use case, not a compliance PDF. The framework demonstrates how to build the program, without claiming to have directed an enterprise-wide one.

Controls per phase

Phase Controls
Design risk classification · threat model · data category approval
Build grounding · secure prompts · tool allowlists · PII detection
Test jailbreak & prompt-injection suites · bias/fairness assessment · adversarial evaluation
Deploy gates · versioning · canary · rollback criteria written BEFORE launch
Operate telemetry · content filtering · output validation · human fallback · incident escalation
Retire archival · access removal · audit trail retention

Reference architecture — not presented as prior tenant ownership.

05

LLM Observability & SLOs

proposed reference architecture

What to measure before scale measures you: tracing, quality, safety and cost as one scorecard with alert thresholds and rollback triggers.

Telemetry spine

flowchart TD
  REQ["Request"] --> TR["Trace<br/>prompt ver · model ver · tools"]
  TR --> TOK["Tokens · cost"]
  TR --> QUAL["Quality<br/>groundedness · retrieval · tool success"]
  TR --> SAFE["Safety<br/>filter hits · escalations"]
  TOK --> SLO["SLO evaluation"]
  QUAL --> SLO
  SAFE --> SLO
  SLO --> AL["Alerts · rollback thresholds"]

Example scorecard

  • Availability · P95 latency · cost per successful task
  • Grounded answer rate · tool success rate · drift vs baseline
  • Human escalation rate · critical safety incidents (target: zero)
  • Every SLO has an owner, an alert threshold and a rollback trigger.

Reference architecture — not presented as prior tenant ownership.

06

From Solution Delivery to Enterprise Architecture

proposed reference architecture

The leadership operating model: principles, reference architectures, reviews and standards that let many teams move fast without diverging.

Model components

  • Architecture principles + reference architectures as the shared language; standards catalogue with an explicit exception process.
  • Design reviews from documents (ADRs), not slides — decisions recorded, revisited, escalated when needed.
  • Reusable components and platform ownership; technical debt tracked with the same seriousness as features.
  • Architecture community across streams; roadmap alignment so local optimisation never beats global coherence.

Design-review checklist (excerpt)

  • Is the decision recorded as an ADR with alternatives and trade-offs?
  • Identity, data classification and audit path defined before build?
  • Cost model and SLOs stated? Rollback path tested, not just written?
  • Can another team operate this without its authors?

Reference architecture — not presented as prior tenant ownership.

Delivery-level blueprints (GenAI platform layering, RAG pipeline, agentic orchestration) are documented through the case studies and the live agent on this site — see /leadership and /implementations.