WP006 v1.3 — Master Edition EN — RA-153.1-2
Changelog — WP006 v1.3 / RA-153.1-2
- Introduction of an independent Semantic Resolution Engine oriented toward needs and capabilities rather than direct model selection.
- Introduction of a Cognitive Routing Engine to determine the required processing approach: direct response, research, tools, multi-step reasoning, comparison, verification, simulation or human escalation.
- Repositioning of the Governance Engine: it authorizes, constrains, refuses, suspends or escalates proposed strategies; execution is never sovereign.
- Normative separation between semantic need, cognitive strategy, governance and selection of an execution target.
- Retention of EXECUTE, ABSTAIN, REFUSE and ESCALATE governance outcomes and the Trust Passage / Attestation connection.
- Editorial clarification: developments after WP006 / RA-153.1 v1.0 are now presented without reference to a particular software implementation.
- v1.3 related work reviewed and expanded through 12 August 2026: semantic routing, capability resolution, cognitive-paradigm selection, structural governance, agent authorization, evidence and attestation.
- Narrowed originality claim: RA-153.1-2 claims none of these building blocks individually; the proposed contribution concerns their explicit separation and composition into a governed passage chain.
Changelog — WP006 v1.1
Version 1.1 is an editorial and epistemic revision of Master Edition v1.0. It retains the thesis and reference architecture while clarifying their status and reducing repetition.
- New reading contract: asserts / does not assert / remains to be demonstrated.
- Generative bridge from Key 153 → RA-153.1-2 made explicit at the start of the document.
- Epistemic status visible for each part.
- Repetitive technology-versus-RA-153.1-2 comparisons removed from individual chapters; synthesis retained in the matrix.
- Composite Score weights explicitly identified as proposed, uncalibrated values.
- PGBS explicitly identified as a proposed, not yet validated benchmark suite.
- Empirical validation framed as the next research step.
- Internal assembly and source notes removed.
Contents
- EDITORIAL NOTICE v1.3 — READING CONTRACT
- Part I — Preamble
- Chapter 00.01 — Beyond AI Routing: Governance as Infrastructure
- Part II — Foundations
- Chapter 01.01 — AI’s Inflection Point
- Chapter 01.02 — From Models to Infrastructure
- Chapter 01.03 — The End of the Single-Model Paradigm
- Chapter 01.04 — Why Routing Becomes Strategic
- Chapter 01.05 — Governance Instead of Configuration
- Chapter 01.06 — Economic Drivers
- Chapter 01.07 — Regulatory Drivers
- Chapter 01.08 — Infrastructure Drivers
- Chapter 01.09 — Organizational Drivers
- Chapter 01.10 — Conclusions
- Part III — State of the Art
- Chapter 02.01 — State of the Art: the Emerging AI Infrastructure Landscape
- Chapter 02.02 — OpenRouter: Provider Abstraction and Unified Access
- Chapter 02.03 — LiteLLM: A Unified Model Gateway
- Chapter 02.04 — LangChain: Application Orchestration and Agent Workflows
- Chapter 02.05 — vLLM: High-Performance Inference Infrastructure
- Chapter 02.06 — Ollama: Local Inference and Sovereign AI
- Chapter 02.07 — Hugging Face: the Open AI Ecosystem
- Chapter 02.08 — Ray Serve & KServe: Production AI Serving Platforms
- Chapter 02.09 — SGLang & NVIDIA Dynamo: High-Performance AI Runtimes
- Chapter 02.10 — Model Context Protocol (MCP): Standardizing AI Interoperability
- Chapter 02.11 — Comparative Matrix of Existing AI Infrastructure Solutions
- Chapter 02.11A — 2026 Update: Runtime Governance, Authorization, Evidence and Attestation
- Chapter 02.11B — Functional Precedents of RA-153.1-2
- Chapter 02.12 — Analysis of Architectural Gaps
- Chapter 02.13 — Toward a Governance-Centered Reference Architecture
- Part IV — RA-153.1-2 Reference Architecture
- Chapter 03.01 — RA-153.1-2 Design Principles
- Chapter 03.02 — RA-153.1-2 Conceptual Architecture
- Chapter 03.03 — The Policy Engine
- Chapter 03.03A — The Cognitive Routing Engine
- Chapter 03.04 — The Decision Router
- Chapter 03.05 — Observability, Audit and Institutional Accountability
- Chapter 03.06 — The Complete Governance Lifecycle
- Chapter 03.07 — Policy-Driven Routing Algorithms
- Chapter 03.08 — Reference Deployment Models
- Chapter 03.09 — Sovereign AI Infrastructure Scenarios
- Chapter 03.10 — Chapter Conclusion
- Part V — Implementation Framework
- Chapter 04.01 — Implementation Principles
- Chapter 04.02 — Interoperability Architecture
- Chapter 04.03 — Extensibility and Governance Modules
- Chapter 04.04 — Incremental Adoption Strategy
- Chapter 04.05 — Governance Maturity Model
- Chapter 04.06 — Governance Metrics and Indicators
- Chapter 04.07 — Chapter Conclusion
- Part VI — Evaluation Framework
- Chapter 05.01 — Evaluation Framework
- Chapter 05.02 — Reference Scenarios (Benchmark)
- Chapter 05.03 — Governance Scoring Methodology
- Chapter 05.04 — Reproducibility Protocols
- Chapter 05.05 — Comparative Evaluation Framework
- Chapter 05.06 — Empirical Validation and Experimental Roadmap
- Part VII — Governance Engineering and Outlook
- Chapter 06.01 — Future Research Directions
- Chapter 06.02 — Toward Institutional AI Ecosystems
- Chapter 06.03 — Policy-Native AI Infrastructure
- Chapter 06.04 — Governance as an Engineering Discipline
- General Conclusion
- Part VIII — Appendices
- Appendix A — RA-153.1-2 Reference Glossary
- Appendix B — RA-153.1-2 Reference Architecture Diagrams
- Appendix C — Policy Pack Examples
- Appendix D — RA-153.1-2 Policy Governance Benchmark Suite (PGBS)
- Appendix E — Governance Design Patterns
- Appendix F — Alignment with Existing Standards
- Appendix H — LCZ-ZS1 License
Policy-Driven Orchestration, Governance and Routing — with RA-153.1-2 as a Reference Architecture
EDITORIAL NOTICE v1.3 — READING CONTRACT
This revision retains WP006’s central thesis. It corrects three weaknesses in v1.1: editorial repetition, insufficient visibility of proposals’ epistemic status, and presentation of the relationship between ZEON Key 153 and RA-153.1-2 as a conceptual seam rather than architectural genesis.
PROPOSED — Sovereign AI infrastructure is not reducible to model location or ownership.
It requires the ability to govern the conditions under which organizational intention becomes
AI execution: applicable policies, eligibility, authority, route selection, evidence, audit and revision.
HYPOTHETICAL — Operational usefulness, implementation simplicity, security, interoperability,
policy robustness, PGBS relevance and the value of proposed weights must be
evaluated through prototypes, benchmarks, comparison and independent replication.
Level 1 — ZEON. ZEON is a generative interpretive architecture. It supplies generative operators—the Keys—and transduction structures. It is neither a software platform nor an alternative scientific theory.
Level 2 — ZEON Key 153. Key 153 carries the operation: “Preserve coherence while enabling intentions, capabilities, structures or organizations to pass through a transformation.”
Level 3 — RA-153.1-2. RA-153.1-2 is the first engineering reference architecture formalized in WP006 for an application domain generated from Key 153: governing passage from organizational intention to heterogeneous AI execution.
The ZEON/RA-153.1-2 relationship must not be read as adding a conceptual framework to an already constituted technical architecture. The research direction is reversed: Key 153 led to a reformulation of routing.
A router asks: “Which target should receive this request?”
RA-153.1-2 asks: “Under what conditions can this intention traverse multiple execution worlds without losing coherence, legitimacy or traceability?”
Intention ↓ Context and responsibility ↓ Applicable policies ↓ Passage conditions ↓ Eligibility and authorization ↓ Governed decision ↓ Execution ↓ Evidence ↓ Audit and policy learning
RA-153.1-2 routes intentions, capabilities and responsibilities—not merely requests.
OBSERVED: documented fact, standard, published capability or established engineering practice.
PROPOSED: architectural choice or protocol advanced by WP006.
HYPOTHETICAL: research direction or expected effect still to be demonstrated.
General contents — continued
- Part IV — RA-153.1-2 Reference Architecture
- Part contents
- Chapter 03.01 — RA-153.1-2 Design Principles
- Chapter 03.02 — RA-153.1-2 Conceptual Architecture
- Chapter 03.03 — The Policy Engine
- Chapter 03.04 — The Decision Router
- Chapter 03.05 — Observability, Audit and Institutional Accountability
- Chapter 03.06 — The Complete Governance Lifecycle
- Chapter 03.07 — Policy-Driven Routing Algorithms
- Chapter 03.08 — Reference Deployment Models
- Chapter 03.09 — Sovereign AI Infrastructure Scenarios
- Chapter 03.10 — Chapter Conclusion
- Transition to Chapter 04
- Part V — Implementation Framework
- Part contents
- Chapter 04.01 — Implementation Principles
- Chapter 04.02 — Interoperability Architecture
- Chapter 04.03 — Extensibility and Governance Modules
- Chapter 04.04 — Incremental Adoption Strategy
- Chapter 04.05 — Governance Maturity Model
- Chapter 04.06 — Governance Metrics and Indicators
- Chapter 04.07 — Chapter Conclusion
- Part VI — Evaluation Framework
- Chapter 05.01 — Evaluation Framework
- Chapter 05.02 — Reference Scenarios (Benchmark)
- Chapter 05.03 — Governance Scoring Methodology
- Chapter 05.04 — Reproducibility Protocols
- Chapter 05.05 — Comparative Evaluation Framework
- Chapter 05.06 — Empirical Validation and Experimental Roadmap
- Part VII — Governance Engineering and Outlook
- Chapter 06.01 — Future Research Directions
- Chapter 06.02 — Toward Institutional AI Ecosystems
- Chapter 06.03 — Policy-Native AI Infrastructure
- Chapter 06.04 — Governance as an Engineering Discipline
- General Conclusion
- Part VIII — Appendices
- Appendix A — RA-153.1-2 Reference Glossary
- Appendix B — RA-153.1-2 Reference Architecture Diagrams
- Appendix C — Policy Pack Examples
- Appendix D — RA-153.1-2 Policy Governance Benchmark Suite (PGBS)
- Appendix E — Governance Design Patterns
- Appendix F — Alignment with Existing Standards
- Appendix G — RA-153.1-2, ZEON Systems and the ZEON Engine
- Appendix H — LCZ-ZS1 License
Part I — Preamble
Architecting Sovereign AI Infrastructure. Policy-Driven Orchestration, Governance and Routing — with RA-153.1-2 as a Reference Architecture
Abstract
Rapid proliferation of foundation models, inference providers, local runtimes, specialized agents and regulatory constraints is transforming artificial intelligence from model selection into infrastructure governance. Organizations increasingly need to determine not only which model can answer a request, but which execution environment is authorized, appropriate, affordable, available, explainable and compatible with organizational policy.
This Working Paper examines an emerging policy-driven orchestration layer for AI. It reviews the contemporary routing and serving ecosystem, identifies capabilities still absent from most available stacks and develops RA-153.1-2 as a reference architecture for governing heterogeneous AI resources across public cloud, private cloud, local, edge and isolated environments. It argues that sovereignty should not be reduced to model ownership or hosting location. It should also include the ability to define, execute, inspect and revise the policies assigning AI workloads to models, providers, agents and infrastructures.
This document is written for engineers, architects, researchers, public institutions and organizational decision-makers. It distinguishes established technical facts, architectural proposals and open research hypotheses. Its aim is not to promote a universal router, but establish a rigorous framework for discussing sovereign, auditable, resilient AI orchestration.
Executive Summary
Artificial intelligence is becoming organizational infrastructure. Yet most organizations still interact with it as a collection of disconnected models, APIs and tools.
During initial large-language-model adoption, the dominant question was model capability: which model produced the best answer, generated the most reliable code, understood the longest context or supported the required modality? This remains important, but insufficient. A production environment may simultaneously include commercial APIs, open-weight models, internally fine-tuned systems, retrieval services, agents, gateways, safety filters, vector databases, identity services and observability components. Every component introduces dependencies and
constraints. The result is not a single AI system but a heterogeneous execution field.
In this field, every request becomes a decision. Should it leave the organization? Can it be processed outside a defined jurisdiction? Does it contain personal, medical, industrial or security-sensitive information? Is an expensive frontier model justified? Can a smaller local model meet the task? Is the preferred provider currently available? Must the answer be reproducible? What evidence must be retained for audit? Can cached knowledge be reused? What happens when the optimal route is unavailable?
PROPOSED
The central challenge is no longer merely accessing intelligence. It is governing the conditions under which intelligence is mobilized.
Existing tools already solve important parts of this problem. Model gateways normalize APIs. Inference engines improve throughput. Serving frameworks deploy models at scale. Agent frameworks coordinate tools and workflows. Cloud-native systems provide scheduling, resilience and observability. These capabilities are necessary. They do not, however, automatically create an explicit, auditable organizational decision layer.
Policy-driven Rules on confidentiality, sovereignty, quality, cost, latency, energy and availability are represented explicitly.
Model-agnostic Applications are decoupled from particular providers, models and execution environments.
Hybrid Cloud, private, local, edge and isolated resources are treated as governed execution targets.
Auditable Decisions can record policy, eligible candidates, selected route, rationale and result.
Resilient Fallback and graceful-degradation strategies preserve organizational intention during failures.
Evolvable Policies, models and deployment targets can change without rewriting every application.
Sovereignty as operational capability. This paper uses sovereignty in a concrete architectural sense. It implies neither technological isolation nor local development of every component. Sovereignty is an organization’s or ecosystem’s ability to understand dependencies, define AI execution rules, retain meaningful alternatives, preserve continuity and verify that decisions are applied.
This interpretation is particularly relevant in Europe. The EU AI Act entered into force on 1 August 2024 and reaches broad applicability on 2 August 2026, subject to phased exceptions. European investment in AI Factories and high-performance computing simultaneously expands shared compute access. These developments make infrastructure governance practical rather than purely conceptual. They create a need for architectures linking regulatory obligations, organizational policy and technical execution without reducing governance to a final compliance checklist.
Trustworthiness cannot be delegated to the model. NIST AI Risk Management Framework treats AI risk management as an organizational activity covering governance, mapping, measurement and management. This is compatible with this paper’s thesis: trustworthiness is not inferable from model identity alone. It emerges from the system in which the model is selected, configured, supplied with context, monitored and used.
A powerful model may be used in an inappropriate context. A local model may preserve confidentiality while producing inadequate results. A cheap route may silently degrade service quality. Redundancy may still fail if alternatives depend on the same provider or region. Routing decisions must therefore sit within a wider governance process.
Chapter 00.01 — Beyond AI Routing: Governance as Infrastructure
PROPOSED Editorial role of this chapter. Between the Executive Summary and detailed problem statement, this chapter supplies an explicit interpretive framework for the rest of WP006: read it as progressive specification of a governance layer, not a more sophisticated router.
Purpose and Central Proposition
RA-153.1-2 is not original primarily because it routes a request to one model rather than another. Its originality lies in making the governance of that decision an explicit, independent, inspectable AI infrastructure layer.
Modern AI stacks already contain gateways, model routers, inference engines, agent frameworks, serving platforms, observability systems and deployment schedulers. They make heterogeneous AI resources accessible and operational. Yet rules linking institutional intention to execution frequently remain scattered across application code, provider configuration, security controls, procurement choices, undocumented practices and human judgment.
RA-153.1-2 proposes externalizing this fragmented decision logic as reusable governance architecture. Routing becomes the operational consequence of policy evaluation rather than the system’s primary function.
PROPOSED
RA-153.1-2 does not start with “Which model should receive this request?” It starts with “Under which conditions can organizational intention be translated into AI execution?”
1. The Most Likely Misunderstanding: “Another AI Router”
“Routing” immediately risks reduction. Readers may interpret RA-153.1-2 as a gateway choosing providers by cost, latency, capability or availability. Those functions are useful and RA may use them, but they do not define its architectural contribution.
A conventional router generally receives a request, evaluates technical/economic parameters and selects an execution target. Even with advanced constraints, decision logic often remains tied to the implementing gateway, deployment platform or application.
RA-153.1-2 changes the level at which the problem is framed. It treats every AI execution as materialization of an institutional decision. The target matters, but so do the deciding authority, applied policy version, constraints disqualifying alternatives, final-route rationale, retained evidence and conditions for later revision.
Key distinction. A router selects a path. RA-153.1-2 governs that selection’s legitimacy, coherence and traceability.
2. Architectural Inversion
Dominant model-centered architecture treats the model/provider as central. Applications are built around its interface, capabilities, limitations and commercial terms. Governance is then added through configuration, filters, contractual controls or compliance procedures.
RA-153.1-2 proposes the reverse order:
Traditional model-centered order
Application → Provider Configuration → Model → Controls → Logs
RA-153.1-2 governance-centered order
Institutional Intention
↓
Explicit Governance Policies
↓
Eligibility and Authorization
↓
Decision and Rationale
↓
Execution Target
↓
Evidence, Audit and Policy Learning
In this second order, models, providers, runtimes and infrastructures become governed resources. They remain technically essential, but no longer define the system’s organizational logic.
The model becomes replaceable. Governance capability remains.
This reversal has a strategic consequence. Technology can evolve rapidly without requiring organizations to abandon the principles for selecting, authorizing and overseeing it.
3. The Operational Governance Layer
RA-153.1-2’s architectural space can be described as an Operational Governance Layer between organizational intention and heterogeneous AI execution resources.
This does not mean a conventional operating system, nor does RA replace security, identity, legal review, risk management, model evaluation or human accountability. It identifies a missing coordination responsibility: translating these inputs into executable, auditable decisions.
Intention interpretation Identify workload purpose, context, requester, sensitivity and expected result.
Policy evaluation Determine applicable legal, institutional, technical, economic and ethical constraints.
Eligibility filtering Exclude models, providers, agents or environments failing mandatory conditions.
Decision arbitration Compare eligible routes by quality, cost, latency, energy, resilience and dependency.
Execution delegation Translate the authorized decision into calls to gateways, runtimes, agents or serving platforms.
Decision memory Retain sufficient evidence to explain, audit, evaluate and improve future governance.
RA-153.1-2 therefore sits neither inside the model nor solely inside the application. It coordinates institutional authority and technical execution.
4. Policies as Durable Architectural Assets
RA-153.1-2’s most important object is not the model catalog. It is the policy system expressing organizational conditions for AI execution.
A policy may represent confidentiality, jurisdictional limits, user permissions, budgets, quality thresholds, sustainability, continuity obligations, logging restrictions, human oversight or domain prohibitions. These are not merely documents. They are intended to become inspectable, versioned, operational objects.
Element Conventional treatment RA-153.1-2 treatment
Rule Document, procedure or implicit organizational convention Explicit policy object
Model selection Embedded in application logic Consequence of policy evaluation
Provider change Application migration Governed substitution of an execution resource
Exception Manual bypass or hidden condition Declared, authorized, traceable decision
Audit evidence Operational logs assembled afterward Decision trace designed as part of execution
Learning Local technical optimization Institutional revision of policies and decision criteria
Strategic implication. Models, providers and runtimes may become commodities or interchangeable capabilities. Organizational policy, decision history and governance maturity become durable institutional assets.
5. How RA-153.1-2 Differs from Existing Infrastructure
RA-153.1-2 is designed to complement the existing ecosystem rather than replace it. Its difference is best understood through architectural responsibility rather than a feature list.
Infrastructure family Primary responsibility Typical question Relationship to RA-153.1-2
API gateway Normalize access, authentication, quotas and traffic. How can this service be reached? Used as an execution connector.
Model router Select models/providers. Which available target best meets routing criteria? Routing constrained and authorized through policy outcomes.
Inference engine Run models efficiently. How can this model execute at high performance? Treated as a governed execution resource.
Serving platform Deploy, scale and operate model endpoints. How can this workload remain available and scalable? Execution delegated after governance decisions.
Agent framework Coordinate tools, models and multi-step workflows. How should a task be decomposed and executed? Govern which agents, tools and actions are authorized.
Observability platform Collect traces, metrics and operational events. What happened during execution? Adds policy context and
rationale explaining why it occurred.
Compliance tooling Evaluate controls and produce evidence. Does the system meet requirements? Links compliance requirements to execution decisions.
RA-153.1-2 Govern translation of institutional intention into AI execution. Should execution occur here, now, under these conditions, and how can the decision be evidenced? Coordinates other layers without subsuming them.
The distinction is not absolute. Existing platforms can implement policy features and future products may converge on governance-centered capabilities. RA-153.1 does not claim no comparable feature exists. Its proposed originality is making this responsibility the organizing principle of the entire reference architecture.
6. Sovereignty as Decision Capability
Sovereign AI debates often focus on model ownership, national origin, data location, open weights or compute access. All matter, but none alone is sufficient.
An organization may host locally yet depend on opaque policies, unavailable expertise or an uncontrolled software supply chain. Conversely, it may use external resources while retaining strong contractual, technical and operational control over usage conditions.
RA-153.1-2 therefore defines sovereignty as operational capabilities:
knowing resources and dependencies; defining usage conditions; excluding unacceptable execution paths; preserving alternatives and continuity; inspecting and explaining execution decisions; revising policies without rebuilding applications; retaining institutional knowledge as technology changes.
Sovereignty is not possession of a model. It is retained ability to govern the relationship between organizational intention and technological execution.
7. Key 153’s Contribution
◆ ZEON Conceptual Framework — theoretical foundation, distinct from engineering claims
From Request Routing to Passage between Worlds. In ZEON architecture, Key 153 is the transition operator between understanding and action. It preserves intention across heterogeneous domains, actors and interpretation levels.
Applied to RA-153.1-2, this conceptual origin broadens routing. The system does more than transport a request to a compute target. It mediates organizational purpose, human responsibility, policy constraints, artificial capabilities and technical infrastructure.
RA-153.1-2 routes intentions, capabilities and responsibilities—not merely requests.
This conceptual contribution explains why coherence is central. Technically successful routing may be institutionally incoherent if it violates confidentiality, weakens accountability, creates hidden dependence, prevents future alternatives or moves risk elsewhere.
The engineering architecture and evaluation criteria remain independently evaluable. Adopting ZEON is not required to implement or assess RA. Key 153’s complete architectural application is developed in Chapter 03.01 (Part IV); this section introduces it for first-time readers. Key 153 generates a broader family of application domains, of which AI execution governance is one example; see the preceding Editorial Notice.
8. The Original Contribution of RA-153.1-2
RA-153.1-2’s proposed original contribution can be stated through five related claims.
Claim 1 — Governance precedes routing. Routing is policy evaluation’s operational result rather than isolated optimization.
Claim 2 — Policy is infrastructure. Organizational rules become reusable, versioned, executable architectural assets rather than hidden configuration or external documentation.
Claim 3 — Decision traces are first-class objects. The system retains not only execution, but authority, policy context, eligible alternatives and decision rationale.
Claim 4 — Sovereignty is portable across technologies. Institutional control is intended to persist as models, providers, runtimes and deployment environments change.
Claim 5 — Governance becomes a learning loop. Execution evidence informs audit, evaluation and policy evolution, turning operational experience into institutional intelligence.
PROPOSED
If Internet routing standardized packet movement across heterogeneous networks, RA-153.1-2 explores expressing, executing and inspecting governance decisions across heterogeneous AI infrastructures.
The analogy is deliberately limited. RA is not presented as an established protocol or universal standard. It identifies a comparable architectural ambition: separate durable coordination from rapidly evolving underlying technology.
9. Research Limits and Transition
These claims define an architectural proposal, not an empirical conclusion. Their value must be evaluated through implementation, comparison and testing.
Future validation should examine whether an operational governance layer can:
represent sufficiently expressive policies without becoming unmanageable; explain decisions without exposing sensitive data; remain interoperable across heterogeneous infrastructures; avoid excessive latency, cost and operational complexity;
preserve human authority and clear accountability; support deterministic controls where required and adaptive behavior where justified; demonstrate measurable sovereignty, resilience and auditability gains.
Editorial role. Give readers an explicit framework for interpreting WP006. Subsequent chapters can be read as progressive specification of governance for sovereign AI infrastructure rather than a more sophisticated router.
Execution makes AI available. Orchestration makes it usable. Governance makes its mobilization accountable, revisable and sovereign.
1. The Problem Addressed
1.1 Fragmentation. AI infrastructure is rapidly fragmenting. Organizations may use general frontier models for complex reasoning, smaller models for volume, multimodal systems for documents/images, specialized code/science models, local models for sensitive workloads and agents for multi-step operations. Resources expose incompatible interfaces, pricing, context limits, service guarantees and governance regimes.
1.2 Hidden decision logic. Routing often lives in application code, prompt templates, ad hoc conditionals or provider configuration. Basic governance questions become difficult: Who defined the rule? Which version was active? Why this model? Which alternatives were rejected? Did the decision respect confidentiality/budget policy? Can it be reproduced?
1.3 Conflicting objectives. AI execution is multi-objective. Quality, cost, latency, confidentiality, sovereignty, sustainability and availability can favor different routes. A single static model ranking is insufficient. Appropriate choice depends on request, user, organizational context, current infrastructure and policy.
Objective Typical Question Potential Conflict
Quality Which eligible system is most capable for this task? Higher capability may increase cost, latency or dependence.
Confidentiality May data leave the controlled environment? Local execution may offer lower performance.
Sovereignty Which jurisdictions, providers and dependencies are acceptable? Restrictions may reduce available capability.
Cost What budget is proportionate? Minimizing cost may degrade output quality.
Latency How quickly is the result needed? Fast routes may offer less reasoning depth.
Resilience What if the preferred route fails? Fallback may violate original assumptions unless governed in advance.
Energy Can a lower-compute route meet the requirement? Lower energy may affect performance or response time.
1.4 The governance gap. Many stacks optimize throughput, compatibility or developer convenience. This paper examines absence of a shared, inspectable layer translating organizational intention into execution decisions. Such a layer must be technically realistic: it cannot replace identity, security engineering, legal analysis, model evaluation or human accountability. It must connect them.
2. Working Paper Contribution
This document makes five main contributions.
Contribution 1 — A structured review. Maps API normalization, routing, inference serving, model deployment, agent orchestration, tool connectivity, observability and cloud-native scheduling. It clarifies each family’s architectural problem rather than ranking products.
Contribution 2 — Precise description of the missing layer. Distinguishes technical and governed routing; analyzes explicit policy objects, multi-objective arbitration, hybrid execution, decision memory, auditability, policy lifecycle and organizational accountability.
Contribution 3 — RA-153.1-2 as a reference architecture. RA is developed as modular architecture including request analysis, policy evaluation, eligibility filtering, decision scoring, token/credential management, execution adapters, caching, observability, fallback and audit.
Contribution 4 — Sector and territorial applications. The paper examines how shared architectural principles vary across public administration, healthcare, industry, research, defense-sensitive contexts, local authorities and small/medium organizations.
Contribution 5 — An open research program. Final chapters identify unresolved questions about adaptive policies, distributed governance, multi-agent coordination, energy-aware orchestration, human oversight and infrastructure decision memory.
Scope limit. This paper does not claim RA is already a complete, validated or universally deployable standard. It presents a reference architecture and research direction. Implementation claims require independent prototypes, benchmarks, security reviews and domain-specific validation.
3. Method and Epistemic Discipline
3.1 Three statement statuses. For clarity, this document distinguishes three statement categories:
Status Meaning Expected Support
Observed A documented feature, standard, regulatory fact or established engineering practice. Primary documentation, official standards or peer-reviewed research where available.
Proposed An RA-153.1 reference-architecture element or architectural recommendation. Explicit reasoning, comparison with
alternatives and declared hypotheses.
Hypothetical An open research direction whose value remains to be demonstrated. Research question, possible evaluation method and explicit uncertainty.
Implementation status (v1.1). This taxonomy is an internal editorial discipline: it governs claim formulation throughout the document and the support each claim type should carry. It is not yet systematically displayed on every individual statement. The first visible status labels appear on the two highlighted quotations above (Executive Summary and Central Thesis), marked PROPOSED. Extending explicit visible labeling to the rest—starting with remaining
highlighted quotations—is planned for a future revision and will be recorded in the revision history described in Section 4.2.
3.2 Source policy. Technical descriptions should prioritize primary sources: official documentation, standards bodies, project repositories and original research. Regulatory descriptions should rely on official institutional sources. Marketing language is not independent evidence. Comparisons of rapidly evolving tools should specify dates and versions because capabilities may change quickly.
3.3 Evaluation criteria. Architectures and tools are examined through common criteria:
3.4 Audience. Readers do not share one vocabulary. Engineers need implementable components and interface boundaries. Researchers need explicit hypotheses and evaluation criteria. Decision-makers need dependency, risk and governance understanding. Public institutions need traceability, legal compatibility and continuity. The document combines technical depth with explanation without claiming one level can substitute for another.
Research Question
↓
Technical Development
↓
Architectural Exploration
↓
AI-Assisted Dialogue
↓
Critical Review
↓
Formalization
↓
Working Paper
AI was used as a research instrument rather than an autonomous author: it supported architectural exploration, literature synthesis, conceptual comparison, drafting, restructuring and critical review. Research direction, architectural choices, hypothesis validation and editorial decisions remained under human responsibility throughout.
Methodological principle. Human expertise supplies intention, experience, judgment and responsibility. AI contributes exploration, formalization, comparison and iterative refinement. The resulting paper emerges from collaborative research beyond production of a single document: humans and AI cooperate while preserving explicit attribution and scientific accountability.
This paper documents both governance architecture for AI infrastructure and a research methodology for developing coherent sociotechnical architectures through human–AI collaboration.
4. Version 1.3 Structure
Chapter Title Purpose
00 Cover, Executive Summary and Editorial Framework Define thesis, scope, method and reading contract.
01 Why AI Infrastructure Becomes Strategic Explain transition from isolated model use to governed ecosystems.
02A State of the Art — Gateways, Routers and Inference Engines Analyze API normalization, routing and high-performance serving.
02B State of the Art — Orchestration, Deployment and Protocols Analyze agents, cloud-native deployment, local runtimes and tool protocols.
03 What Is Still Missing Formalize governance, sovereignty and auditability gaps.
04A RA-153.1-2 — Architectural Vision and System Boundaries Define principles, actors, trust zones and core components.
04B Policy Engine and Decision Architecture Specify policy representation, eligibility, scoring and decision traces.
04C Deployment, Cache, Resilience and Governance Specify operating models and lifecycle governance.
05 Representative Use Cases Apply architecture to concrete organizational contexts.
06 Toward European Sovereign AI Infrastructure Position policy-driven orchestration within European infrastructure.
07 Research Directions Define open questions and potential evaluation programs.
Appendices Technology Atlas, Policy Schemas, Glossary and Bibliography Supply reusable technical/documentary resources.
4.1 Chapter-based HTML publication. Version 1.1 is designed as standalone HTML pages rather than one
monolithic file. Each chapter can be independently reviewed, corrected, translated, cited and updated. A final index will assemble the publication through stable navigation, shared metadata and unified visual identity.
4.2 Versioning. Versions apply to the full paper and each chapter. A chapter may receive minor revisions without immediately republishing all others. Substantial technical changes, new regulatory facts and major architectural changes should be recorded in revision history.
5. Central Thesis
PROPOSED
Sovereign AI infrastructure is defined not only by where models are hosted, but by the ability to govern, execute, inspect and revise decisions connecting organizational intention to AI resources.
This has several consequences. First, organizations must know available resources and their usage conditions. Second, policy should be externalized from individual applications wherever practical. Third, routing decisions must be traceable without unnecessary sensitive-data exposure. Fourth, resilience must preserve policy intention, not merely connectivity. Fifth, sovereignty must be measurable through operational capabilities rather than asserted as a label.
RA is a proposed response. Its relevance depends on sufficient simplicity, security and interoperability. Subsequent chapters examine conceptual appeal, engineering constraints and potential failure modes.
6. Foundational References for Chapter 00
These references establish regulatory/infrastructure context. Detailed product, protocol and research references appear in relevant review chapters.
7. Citation and Reuse
ZEON Systems Research. « Architecting Sovereign AI Infrastructures: Policy-Driven Orchestration, Governance and Routing — Chapter 00: Cover, Executive Summary and Editorial Framework. » Working Paper 006, Version 1.3, August 2026.
Trends are described from the state of the field; interpreting them as requiring an explicit governance layer is a WP006 proposal.
Part II — Foundations
Chapter 01.01 — AI’s Inflection Point
Purpose. This section establishes why artificial intelligence has entered a structural transition. Its aim is not to describe the latest models, but to explain why organizations are moving from experimentation to infrastructure.
1. A Change of Scale
Between 2022 and 2026, generative AI moved from a collection of impressive demonstrations to an operational capability embedded in software products, enterprise platforms and public services. In the first phase, most discussions concerned model quality: reasoning performance, coding ability, multilingual competence and context length.
As adoption accelerated, organizations discovered that deploying AI at scale involved far more than selecting the most powerful model. They needed governance, observability, security, routing, cost management, deployment flexibility and regulatory compliance.
The strategic question shifted from “Which model is best?” to “How should an organization govern many AI capabilities simultaneously?”
2. The Three Waves of Adoption
Wave Main concern Typical technologies
Experimentation Discovering model capabilities. Public APIs, chat interfaces.
Integration Embedding AI in products. RAG, agents, workflow automation.
Infrastructure Governing heterogeneous AI resources. Routers, gateways, policy engines, observability, hybrid deployment.
3. Why Infrastructure Matters
An enterprise rarely relies on a single AI system. Production environments combine commercial APIs, open-weight models, local inference, cloud services, vector databases, identity systems and monitoring platforms. Every additional component increases architectural complexity.
Key observation. Complexity grows faster than model capability. Infrastructure therefore becomes a competitive capability in its own right.
4. The Limits of Model-Centered Thinking
A model-centered strategy assumes that choosing the most powerful model is sufficient. In practice, organizations face conflicting requirements: confidentiality, cost, latency, legal constraints, resilience, sustainability and availability. Static model rankings cannot optimize these objectives simultaneously.
Routing decisions therefore become contextual. The same request may legitimately be processed by different models under different organizational policies.
5. Toward Policy-Driven AI
The central hypothesis developed throughout this Working Paper is that AI infrastructure needs an explicit governance layer. Rather than embedding routing logic in applications, organizations should express policies as inspectable, versioned objects.
Who may access which models? Which data may leave organizational boundaries? Which providers satisfy sovereignty constraints? How should failures be handled? Which decisions must remain auditable?
6. Transition to the Next Section
The next section examines how this transition turns artificial intelligence from a collection of models into a genuine infrastructure layer comparable to cloud computing, networks and operating systems.
This is section 01.01 of Version 1.1. The complete Chapter 01 will eventually assemble ten sections into a single HTML publication.
Chapter 01.02 — From Models to Infrastructure
Purpose. This section explains why large language models should increasingly be understood as components of a wider infrastructure rather than isolated intelligent systems.
1. A Historical Perspective
Every major computing revolution eventually produced an infrastructure layer. Personal computers required operating systems. The Internet required routing protocols and cloud platforms. Similarly, generative AI is moving beyond individual models toward an ecosystem of interoperable services.
Era Main asset Infrastructure challenge
Mainframe Compute power Resource sharing
Internet Connectivity Global networking
Cloud Elastic compute Distributed operations
Generative AI Cognitive capabilities Policy-driven orchestration
2. Models Become Building Blocks
A production AI application rarely consists of a single model invocation. Instead, requests traverse identity services, security filters, retrieval systems, routing layers, observability platforms and logging services before reaching a model.
User │ Identity │ Policy │ Router │ Retrieval │ Model │ Validation │ Observability
The model remains essential, but it no longer defines the complete system.
3. Infrastructure Characteristics
Infrastructure differs from applications because it must remain reusable, interoperable and resilient. AI infrastructure therefore requires:
provider independence; stable interfaces; deployment flexibility; operational monitoring; security boundaries; continuous evolution.
4. The Rise of AI Platforms
Organizations increasingly combine frontier APIs, open-weight models, local inference engines and specialized services. This hybrid landscape creates architectural diversity that application code alone cannot manage effectively.
Infrastructure introduces abstraction. Applications express intention while infrastructure determines the most appropriate execution path under explicit organizational policies.
Infrastructure separates business intention from implementation details.
5. Architectural Consequences
The transition from model-centered software to infrastructure-centered systems has several consequences:
Traditional approach Infrastructure approach
Applications select models. Policies determine eligible execution targets.
Routing logic is embedded. Routing policies become reusable assets.
Optimization is local. Optimization is organizational.
Failures interrupt workflows. Fallback strategies preserve continuity.
6. Preparing the Next Transition
Once AI becomes infrastructure, another transformation follows naturally: organizations stop searching for a single “best model” and begin coordinating portfolios of complementary capabilities. The next section explores this transition toward multi-model ecosystems.
in the complete Chapter 01.
Chapter 01.03 — The End of the Single-Model Paradigm
Purpose. Explain why production AI systems are evolving toward coordinated ecosystems of complementary models rather than relying on a single general-purpose model.
1. The Universal Model Myth
Early public adoption of generative AI encouraged the perception that an increasingly capable model could satisfy every use case. Production experience revealed a different reality. Organizations balance reasoning quality, response time, operating cost, confidentiality, legal constraints and service continuity. No single model optimizes every objective simultaneously.
The question is no longer “Which model is best?” but “Which model is appropriate for this request, under these constraints, at this moment?”
2. Functional Specialization
Need Typical preference
Complex reasoning Frontier reasoning model
High-volume automation Small, inexpensive model
Sensitive information Local or private deployment
Software engineering Code-specialized model
Offline resilience Local open-weight runtime
Multimodal analysis Vision-capable model
3. Portfolio Thinking
Organizations increasingly manage AI resources as portfolios rather than individual assets. Models become interchangeable execution options governed by organizational objectives. This resembles cloud resource management more than traditional application design.
A model portfolio increases flexibility, but only if selection criteria are explicit and operationally governed.
4. New Sources of Complexity Rapid model evolution. Provider-specific APIs. Changing pricing models. Regional availability constraints. Different license conditions. Operational failover requirements.
These factors make manual routing increasingly difficult to maintain over time.
5. Architectural Consequences
Business Intention
│
Organizational Policy
│
Eligibility Assessment
│
Model Portfolio
│
Execution
│
Audit
The portfolio is therefore governed rather than hard-coded. Applications express intention; infrastructure determines execution.
6. Transition
The next section examines why routing itself becomes a strategic capability. Once organizations operate multiple models, routing decisions become one of their most important architectural responsibilities.
Chapter 01.04 — Why Routing Becomes Strategic
Purpose. Show why routing evolves from a technical mechanism into a strategic organizational capability.
1. Beyond Load Balancing
Historically, routing distributed requests across equivalent resources. AI infrastructure introduces a different problem: execution targets are no longer equivalent. They differ in reasoning quality, confidentiality guarantees, jurisdiction, cost, latency, sustainability and operational resilience.
Choosing an execution path becomes an organizational decision rather than a simple technical optimization.
2. Every Request Is a Decision
Question Architectural consequence
May this data leave the organization? Evaluate confidentiality policy.
Is premium reasoning justified? Balance quality and cost.
Must execution remain in Europe? Enforce sovereignty constraints.
What if the preferred provider is unavailable? Activate governed fallback.
Must this decision be reproducible? Record the routing rationale.
3. Routing as Governance
Once several providers coexist, routing becomes the operational expression of organizational policy.
Business Intention
│
Organizational Policies
│
Eligibility Analysis
│
Candidate Assessment
│
Routing Decision
│
Execution
│
Audit Trace
The router should not invent policy. It should execute the explicit policies established by the organization.
4. Multi-Objective Trade-Offs
No single optimization criterion is sufficient. Modern AI infrastructures continually balance
multiple objectives.
Objective Possible trade-off
Quality Higher compute cost.
Latency Reduced reasoning depth.
Confidentiality Restricted model choice.
Resilience Additional infrastructure complexity.
Sustainability Alternative execution paths.
5. Strategic Consequences
Policies become reusable organizational assets. Applications become provider-independent. Governance becomes inspectable. Operational continuity improves through planned fallback. Infrastructure evolution becomes less disruptive.
6. Preparing for RA-153.1-2
The remaining sections establish why governance should replace hard-coded configuration. This transition provides the conceptual foundation for the RA-153.1-2 architecture introduced later in this Working Paper.
Chapter 01.05 — Governance Instead of Configuration
Purpose. Explain why organizational AI behavior should be governed by explicit policies rather than hidden configuration scattered across applications.
1. Configuration Does Not Scale
During the first wave of AI adoption, routing choices were frequently embedded directly in application code, prompt templates or environment variables. This approach is simple for prototypes but becomes increasingly fragile as organizations introduce multiple providers, deployment targets and regulatory constraints.
When organizational decisions remain hidden in application code, they cannot easily be reviewed, audited or improved.
2. From Settings to Policies
Configuration Governance
Hard-coded values Versioned policy objects
Application-specific Shared across systems
Difficult to audit Explicit decision trace
Developer ownership Joint technical and organizational ownership
Reactive maintenance Managed lifecycle
3. Policies as Organizational Knowledge
A routing policy expresses more than technical preferences. It captures organizational intention: which data may leave controlled environments, which providers are approved, acceptable budgets, continuity requirements, quality thresholds and compliance obligations.
Policies become reusable organizational assets rather than implementation details.
4. Governance Lifecycle
Policy Design
│
Validation
│
Approval
│
Deployment
│
Execution
│
Monitoring
│
Revision
Every stage should remain observable. Policy evolution is therefore treated as a managed process rather than an undocumented software change.
5. Organizational Benefits Reduced dependence on individual implementations. Consistent behavior across applications. Simpler regulatory audits. Controlled evolution of routing strategies. Better collaboration between technical and governance teams.
6. Toward the Policy Engine
This perspective naturally leads to the later architectural concept: a dedicated Policy Engine evaluating organizational rules before any routing decision is executed.
the complete HTML edition of Chapter 01.
Chapter 01.06 — Economic Drivers
Purpose. Explain why economics, as much as technology, drives the emergence of policy-driven AI infrastructure.
1. AI Has Become an Operating Expense
Unlike traditional software, generative AI incurs recurring inference costs. Every prompt, retrieval step, tool invocation and reasoning cycle consumes compute resources. As organizations expand AI adoption, operating expenditure becomes a primary architectural concern.
AI infrastructure is no longer optimized for capability alone. It must optimize sustainable capability.
2. The Cost Triangle
Dimension Main question
Quality What reasoning capability is required?
Cost Which execution path minimizes unnecessary expenditure?
Latency How quickly must a response be delivered?
No single model maximizes all three dimensions simultaneously.
Economic optimization is therefore a routing problem rather than a model-selection problem.
3. Heterogeneous Economics
Organizations increasingly combine commercial APIs, private infrastructure, open-weight models and specialized services. Each option has different economic characteristics in licensing, hardware investment, maintenance effort and operational flexibility.
Execution mode Typical advantage Typical limitation
Commercial API Rapid access to frontier models Recurring usage costs
Private cloud Governance and flexibility Infrastructure management
On-premises Data sovereignty Capital investment
Open-weight models Provider independence Operational complexity
4. Dynamic Cost Governance
Production environments require dynamic allocation strategies. Premium reasoning may be justified for complex analytical tasks, while routine operations can run efficiently on smaller models.
Infrastructure therefore becomes responsible for balancing economic efficiency with organizational objectives.
5. Beyond Direct Costs Energy consumption. GPU utilization. Model-switching overhead. Operational resilience. Provider dependence.
Future migration costs.
These indirect factors often exceed the apparent cost of individual model invocations.
6. Strategic Implications
Organizations increasingly compete through the quality of their orchestration strategies rather than exclusive access to individual models. Economic intelligence becomes embedded in infrastructure policies.
Chapter 01.07 — Regulatory Drivers
Purpose. Explain why regulatory developments are turning AI infrastructure into governance infrastructure.
1. Regulation Changes the Design Problem
For many years, software architecture primarily optimized functionality, scalability and cost. Artificial intelligence introduces additional requirements: transparency, accountability, explainability, human oversight and traceability. These expectations increasingly arise from legislation, industry standards and organizational governance.
Compliance is no longer an external activity. It becomes an architectural property.
2. Beyond Technical Performance
Deploying the most capable model is insufficient if an organization cannot demonstrate why a particular decision path was chosen, which policies were applied or how sensitive information was protected.
Regulatory expectation Architectural consequence
Traceability Record routing decisions and execution history.
Accountability Identify responsible policies and operators.
Transparency Expose governance mechanisms.
Risk management Evaluate execution before inference.
Human oversight Enable review and intervention.
Regulatory compliance increasingly depends on infrastructure behavior rather than application behavior alone.
3. Sovereignty and Jurisdiction
Organizations increasingly need to determine where data may be processed, which providers satisfy jurisdictional requirements and how cross-border execution should be governed. Infrastructure therefore becomes responsible for enforcing organizational sovereignty policies.
4. Auditability by Design
Auditability should not be added after deployment. Every routing decision should be reproducible through explicit policies, recorded evidence and versioned governance rules.
Policy version. Execution target. Eligibility criteria. Fallback rationale. Decision timestamp.
5. From Compliance to Trust Organizations able to explain how AI decisions are governed will generally inspire greater trust among customers, regulators and partners than those relying on opaque implementation choices.
Trust emerges when governance is observable.
6. Preparing the Infrastructure Perspective
The following sections extend this analysis by examining the technical infrastructure needed to operationalize governance at scale. Routing, policies, observability and orchestration converge into a unified architectural layer.
Chapter 01.08 — Infrastructure Drivers
Purpose. Demonstrate that AI infrastructure evolution is driven not only by model innovation but by the operational requirements of deploying reliable, secure and scalable systems.
1. Infrastructure Becomes the Differentiator
As frontier models become widely accessible, competitive advantage increasingly shifts from model access to infrastructure quality. Reliability, governance, interoperability and operational resilience become strategic assets.
Models generate intelligence. Infrastructure makes that intelligence reliable.
2. Operational Requirements
Requirement Infrastructure capability
High availability Redundancy and failover
Security Identity, isolation and policy enforcement
Scalability Elastic routing and load distribution
Observability Metrics, tracing and audit logs
Portability Provider-independent execution
Resilience Graceful degradation and recovery
3. Hybrid AI Environments
Most organizations will operate hybrid environments combining cloud APIs, private infrastructure, local inference engines and specialized AI services. Infrastructure must coordinate these heterogeneous resources while preserving a unified operating model.
Hybrid execution becomes the default architecture rather than an exception.
4. Observability as a Core Capability
Infrastructure must provide continuous visibility into execution paths, latency, costs, failures, policy evaluations and resource use. Without observability, governance cannot be verified and optimization becomes speculative.
Intention │ Policy Evaluation │ Routing │ Execution │ Telemetry │ Continuous Improvement
5. Infrastructure Independence
Long-term sustainability requires reducing dependence on a single AI provider. Provider independence allows organizations to adopt future models, migrate workloads and respond to technological change without redefining business applications.
6. Toward a Unified Infrastructure Layer
These operational forces naturally converge toward a dedicated orchestration layer capable of applying policies, selecting execution paths, recording decisions and coordinating heterogeneous AI resources.
Chapter 01.09 — Organizational Drivers
Purpose. Show that AI transformation is fundamentally organizational. Sustainable AI adoption depends on governance, responsibilities and institutional learning as much as technology.
1. AI Changes Organizations Early AI projects were often launched by isolated technical teams. As adoption expands, AI affects legal departments, security teams, compliance officers, business units, procurement, operations and executive management. Infrastructure therefore becomes an
organizational platform rather than a technical component.
Successful AI adoption is measured by organizational coherence, not model capability alone.
2. Emerging Roles
Role Main responsibility
Executive management Strategic direction and accountability.
Architecture teams Infrastructure design and interoperability.
Governance office Policies, risk management and oversight.
Operations Reliability, monitoring and continuity.
Business units Operational objectives and value creation.
3. Shared Decision-Making
Routing policies increasingly encode organizational choices rather than technical preferences. Decisions on confidentiality, acceptable cost, sovereignty, sustainability and resilience require collaboration across disciplines.
Policy-driven infrastructure encourages a common language among technical, operational and governance teams.
4. Organizational Learning Every routing decision generates operational knowledge. Observability and auditability turn infrastructure into a learning system capable of continually refining organizational policies.
5. Governance as a Capability
Organizations should treat governance as a core capability that evolves alongside applications and models. Governance is not a constraint imposed on innovation; it is the mechanism that allows innovation to develop safely.
6. Preparing the Conclusion
The combined technological, economic, regulatory and organizational forces described throughout this chapter show that AI is entering an infrastructure era. The conclusion synthesizes these forces and introduces the architectural perspective developed in the rest of this Working Paper.
Chapter 01.10 — Conclusions
Purpose. Synthesize the forces examined throughout Chapter 01 and establish the architectural transition toward policy-driven AI infrastructure.
1. A Structural Transition
The preceding sections described seven complementary forces shaping the next generation of AI systems: technological evolution, infrastructure requirements, multi-model orchestration, governance, economics, regulation and organizational transformation. Taken together, these forces reveal a structural transition rather than a passing technological trend.
Artificial intelligence is becoming infrastructure. Infrastructure requires governance.
2. The Emerging Consensus
Observation Architectural implication
Multiple models coexist. Routing becomes essential.
Providers evolve continually. Applications must remain provider-independent.
Regulation increases. Policies must become explicit and auditable.
Operational complexity grows. Infrastructure becomes a strategic capability.
Organizations diversify AI use. Governance must extend across domains.
3. From Configuration to Architecture The central conclusion is that governance cannot remain distributed across application code, deployment scripts and undocumented operational practices. It must become a first-class architectural layer capable of evaluating policies before execution decisions are made.
The next generation of AI systems will be distinguished less by the intelligence of individual models than by the quality of the infrastructure coordinating them.
4. Positioning RA-153.1-2
This conclusion prepares the conceptual space for RA-153.1-2. Rather than introducing another model or orchestration framework, RA-153.1-2 is presented as a policy-driven reference architecture designed to connect organizational intention, governance policies and heterogeneous AI execution environments.
5. Transition to Chapter 02 Before introducing the architecture itself, the next chapter reviews the current state of the art. Existing routing frameworks, gateways, orchestration platforms and serving infrastructures are analyzed to identify their contributions, limits and remaining architectural gaps.
Only by understanding today’s ecosystem can we properly position tomorrow’s infrastructure.
Chapter 01 complete. Together, its ten sections establish the rationale for a new generation of sovereign, policy-driven AI infrastructure. They provide the theoretical foundation for the detailed architectural analysis in the remainder of Working Paper 006.
Working Paper 006 · Master Edition · Part II · Complete assembly preserving sources
The capabilities reviewed derive from primary sources; their positioning against RA-153.1-2 is not empirical.
Part III — State of the Art
RA-153.1-2 — Architecting Sovereign AI Infrastructure. Editorial status. This page assembles the thirteen detailed source sections supplied for Chapter 02. Text, tables, citations, notes and diagrams are preserved. Only the outer document structure, navigation and shared presentation have been added.
Chapter 02.01 — State of the Art: the Emerging AI Infrastructure Landscape
Purpose. Establish the current technology landscape before introducing RA-153.1-2. Rather than comparing models, this chapter compares infrastructure philosophies.
1. From Models to Platforms
The first generation of generative AI emphasized model performance. The current generation is increasingly defined by infrastructure platforms responsible for routing, deployment, orchestration, serving, observability and lifecycle management. This shift has created a rich ecosystem of complementary technologies.
The market is no longer organized around individual models but around the infrastructure coordinating them.
2. Main Categories
Category Representative technologies Main focus
Model routing OpenRouter, LiteLLM Provider abstraction and access.
Application frameworks LangChain, LlamaIndex Workflow composition.
Inference engines vLLM, SGLang Efficient model serving.
Deployment platforms Ray Serve, KServe Production operations.
Local AI Ollama Workstation and private execution.
Model ecosystems Hugging Face Distribution and collaboration.
Although these platforms solve important operational problems, they generally optimize execution rather than organizational governance.
3. Shared Strengths
Rapid integration with multiple models. Operational scalability. Increasing ecosystem maturity. Developer productivity. Broad cloud compatibility.
4. Shared Architectural Gap
Most current platforms expose configuration mechanisms, routing strategies and operational controls. Far fewer provide a first-class governance layer capable of expressing organizational intention as reusable, auditable, versioned policy objects.
Infrastructure orchestration is maturing. Governance orchestration remains an open research field.
5. Positioning the Remaining Review
The following sections analyze each major platform individually. Their purpose is not to rank technologies, but to identify the architectural capabilities they provide and the remaining governance gaps. This comparative analysis prepares the introduction of RA-153.1-2 as a complementary reference architecture.
PROPOSED Comparison methodology. Each following “Position Relative to RA-153.1-2” section conceptually compares documented capabilities of a deployed technology (see its cited primary source) with design principles RA-153.1 proposes in Part IV. This is not empirical or practical comparison: RA has not been directly compared under shared conditions. Chapter 05.06 specifies empirical work’s current status. Interpret the two-column tables as observed-versus-proposed positioning, not measured results.
Next section: Chapter 02.02 — OpenRouter: Provider Abstraction and Unified Access.
Chapter 02.02 — OpenRouter: Provider Abstraction and Unified Access
Purpose. Examine OpenRouter as an important step in AI infrastructure evolution and identify both its architectural contributions and remaining governance limitations.
OBSERVED Primary source: OpenRouter — official documentation.
1. Architectural Role
OpenRouter introduces a unified API exposing models from multiple providers through a consistent interface. This abstraction reduces application dependence on provider-specific APIs and simplifies experimentation across a rapidly evolving ecosystem.
OpenRouter primarily solves the access problem. It does not seek to solve the wider problem of organizational governance.
2. Main Contributions
Capability Contribution
Unified API Common interface across providers.
Model catalog Rapid access to numerous frontier and open models.
Developer experience Reduced integration effort.
Flexibility Easier provider comparison.
3. Architectural Strengths
Accelerates adoption of heterogeneous AI services. Reduces provider dependence at API level. Encourages modular application design. Supports rapid technological evolution.
OpenRouter demonstrates that provider abstraction is becoming an essential infrastructure capability.
4. Remaining Challenges
Provider abstraction alone does not express organizational intention. Questions of sovereignty, regulatory compliance, acceptable cost, confidentiality and organizational priorities remain external to the routing layer.
Question Typically outside OpenRouter’s scope
Why was this model selected? Governance policy.
Who approved the routing rule? Policy lifecycle.
Which legal constraints apply? Organizational governance.
How is the decision audited? Decision traceability.
Chapter 02.03 — LiteLLM: A Unified Model Gateway
Purpose. Analyze LiteLLM as a gateway layer for heterogeneous AI providers and
clarify where operational orchestration ends and governance begins.
OBSERVED Primary source: LiteLLM — official documentation.
1. Architectural Position
LiteLLM provides a unified programming interface for many commercial and open-source language models. Beyond API normalization, it introduces gateway capabilities that simplify production deployment and operational management.
LiteLLM addresses operational complexity by standardizing access to diverse model providers.
2. Core Capabilities
Capability Contribution
Unified API Common interface across providers.
Gateway Centralized request management.
Fallback Automatic provider substitution.
Load balancing Traffic distribution across models.
Usage monitoring Operational visibility and quotas.
Caching Reduced latency and cost.
3. Operational Strengths
Improves production resilience. Facilitates multi-provider deployment. Reduces integration effort. Supports cost-optimization strategies. Provides operational observability.
LiteLLM significantly extends provider abstraction by introducing execution-management capabilities expected in production environments.
4. Governance Boundaries
LiteLLM already includes access-control primitives beyond execution alone: virtual keys and team/user budgets, and guardrails such as content filtering or personal-information masking. These are access and cost controls, however, rather than organizational policy objects: they do not carry authorship, approval workflows, review cycles or a traceable link to the institutional decision justifying them. LiteLLM generally assumes the underlying strategy—why a particular budget, key scope or filter was chosen—has already been decided elsewhere.
Operational gateway Governance layer
Performs routing and enforces configured limits. Defines why a particular limit or routing rule should exist.
Enforces access control by key, team or user. Evaluates the organizational policy behind that access authorization.
Optimizes execution and cost. Optimizes institutional objectives.
Manages infrastructure and guardrail configuration. Manages the policy lifecycle: authorship, approval, review, audit.
Chapter 02.04 — LangChain: Application Orchestration and Agent Workflows
Purpose. Analyze LangChain as one of the most influential application-orchestration frameworks and distinguish workflow orchestration from governance orchestration.
OBSERVED Primary source: LangChain — official documentation.
1. Architectural Perspective
LangChain emerged to help developers compose language models with prompts, memory, retrieval systems, external tools and agents. Rather than focusing on infrastructure management, it focuses on application construction.
LangChain orchestrates cognitive workflows. It does not define institutional governance.
2. Main Capabilities
Capability Contribution
Chains Composable processing pipelines.
Agents Dynamic tool selection.
Tool integration Connection to external systems.
Memory Conversation and state management.
RAG support Knowledge-retrieval integration.
3. Architectural Strengths
Rapid AI application prototyping. Rich integration ecosystem.
Flexible agent-based workflows. Support for complex application logic.
LangChain has become an application framework rather than an infrastructure governance platform.
4. Architectural Limits
LangChain assumes that execution environments, routing strategies and organizational constraints already exist. Governance policies generally remain external to the framework.
LangChain Governance layer
Coordinates application logic. Coordinates organizational intention.
Builds workflows. Evaluates policies.
Runs agents. Constrains execution.
Optimizes application behavior. Optimizes institutional behavior.
Chapter 02.05 — vLLM: High-Performance Inference Infrastructure
Purpose. Analyze vLLM as a reference implementation for efficient model serving at scale and distinguish inference optimization from governance orchestration.
OBSERVED Primary source: vLLM — official documentation.
1. Architectural Perspective
vLLM addresses a major operational challenge of generative AI: efficiently serving large language models at production scale. Rather than introducing new reasoning capabilities, it optimizes how existing models consume GPU memory and compute resources.
vLLM improves how models run. It does not determine why a particular model should run.
2. Main Contributions
Capability Contribution
PagedAttention Efficient KV-cache memory management.
High throughput Improved request concurrency.
GPU utilization Better hardware efficiency.
Scalable serving Production-oriented inference engine.
Open ecosystem Broad compatibility with modern LLMs.
vLLM demonstrates that inference infrastructure has become a specialized engineering discipline in its own right.
3. Operational Strengths
Higher throughput under production load. Reduced GPU memory fragmentation. More efficient large-model serving. Lower operating cost per inference. A strong foundation for enterprise deployment.
4. Architectural Boundaries
vLLM intentionally focuses on execution performance. Questions of organizational priorities, regulatory constraints, sovereignty, approval workflows and policy evaluation remain outside its scope.
Inference layer Governance layer
Optimizes execution speed. Evaluates organizational policies.
Allocates GPU resources. Selects eligible execution paths.
Serves models efficiently. Determines which models may be served.
Improves infrastructure performance. Improves institutional decision quality.
Chapter 02.06 — Ollama: Local Inference and Sovereign AI
Purpose. Analyze local inference as a strategic architectural option and examine Ollama as one of the most influential technologies supporting sovereign AI deployments.
OBSERVED Primary source: Ollama — official website.
1. The Return of Local Computing
For more than a decade, cloud computing dominated enterprise architecture. Generative AI introduces a partial reversal of that trend. Growing concerns about confidentiality, latency, operational resilience and digital sovereignty encourage organizations to run some models directly on local infrastructure.
The future of AI is unlikely to be exclusively cloud-based. It will be hybrid.
2. Ollama’s Architectural Contribution Ollama simplifies deployment and execution of open-weight language models on local workstations, servers and edge devices. By reducing operational complexity, it makes local inference accessible to developers, researchers and organizations without requiring specialized serving infrastructure.
Capability Contribution
Local execution Runs models without external API dependence.
Simple deployment Rapid installation and model management.
Developer workflow Consistent local experimentation.
Confidentiality Data remains under organizational control.
Offline capability Continues operating without Internet connectivity.
Ollama lowers the operational barrier to local AI and thereby strengthens technological sovereignty.
3. Strategic Advantages
Protection of sensitive information. Reduced dependence on external providers. Lower network latency. Improved operational continuity. Greater control over infrastructure evolution.
4. Remaining Challenges
Local execution does not automatically solve governance problems. Organizations must still determine which models may be deployed, who may use them, how versions are validated and how execution decisions remain traceable across distributed environments.
Local infrastructure Governance requirement
Runs models locally. Determines which models are authorized.
Protects local data. Defines organizational data policy.
Executes requests. Evaluates institutional constraints.
Supports edge deployment. Coordinates hybrid environments.
Chapter 02.07 — Hugging Face: the Open AI Ecosystem
Purpose. Examine Hugging Face as the reference ecosystem for open artificial intelligence and explain how collaborative AI ecosystems differ from governance infrastructure.
OBSERVED Primary source: Hugging Face Hub — official documentation.
1. Beyond a Model Repository
Although Hugging Face is often described as a model hub, it has evolved into a comprehensive ecosystem supporting models, datasets, evaluation benchmarks, documentation, demonstrations, collaborative development and deployment workflows.
Hugging Face is not simply a repository. It is infrastructure for open AI collaboration.
2. Ecosystem Components
Component Main contribution
Models Distribution of open and commercial model artifacts.
Datasets Reusable training and evaluation resources.
Spaces Interactive demonstrations and rapid experimentation.
Libraries Standardized tools for developers and researchers.
Community Collaborative innovation and knowledge sharing.
Hugging Face’s success shows that open ecosystems accelerate innovation by lowering barriers to experimentation and collaboration.
3. Architectural Strengths
Broad model availability. Strong framework interoperability. Rapid research dissemination. A large collaborative community. Support for reproducible experimentation.
4. Governance Challenges
Open ecosystems maximize accessibility, but organizations remain responsible for validating licenses, assessing model quality, enforcing security requirements, evaluating regulatory constraints and determining operational eligibility.
Open ecosystem Governance requirement
Publishes models. Selects approved models.
Shares datasets. Validates legal and ethical use.
Encourages experimentation. Controls production deployment.
Accelerates innovation. Manages institutional risk.
Chapter 02.08 — Ray Serve & KServe: Production AI Serving Platforms
Purpose. Analyze two leading production-serving platforms and distinguish deployment orchestration from organizational governance.
OBSERVED Primary source: Ray Serve — official documentation.
OBSERVED Primary source: KServe — official documentation.
1. Industrializing AI Deployment As AI moves from prototypes to critical services, organizations need deployment platforms capable of scaling inference, managing versions, ensuring resilience and
integrating with cloud-native environments. Ray Serve and KServe represent two influential approaches to this challenge.
Serving platforms industrialize model execution. They do not define institutional decision policies.
2. Comparative Perspective
Capability Ray Serve KServe
Scalable serving Native distributed execution Kubernetes-native serving
Autoscaling Built in Built in
Model lifecycle Application-centered Kubernetes-centered
Cloud integration Strong Strong
Production operations High High
3. Architectural Contributions
Reliable deployment at scale. Elastic resource allocation. Version management. Operational resilience. Cloud-native integration.
These platforms address operational excellence, allowing AI systems to function reliably in production.
4. Governance Gap
Neither platform is primarily responsible for evaluating organizational intention. Regulatory eligibility, sovereignty, confidentiality, acceptable providers and institutional priorities remain external to deployment orchestration.
Serving platform Governance layer
Deploys models. Selects eligible models.
Scales workloads. Evaluates organizational constraints.
Maintains availability. Maintains policy coherence.
Runs infrastructure. Guides infrastructure decisions.
Chapter 02.09 — SGLang & NVIDIA Dynamo: High-Performance AI Runtimes
Purpose. Examine specialized AI runtimes designed to maximize inference efficiency and explain why runtime optimization remains distinct from governance orchestration.
OBSERVED Primary source: NVIDIA Dynamo — official documentation.
1. The Rise of AI Runtime Engineering
As foundation models grow in size and complexity, execution efficiency becomes a strategic concern. Modern AI runtimes optimize scheduling, memory allocation, batching and hardware utilization to provide higher throughput while reducing operating costs.
Runtime engineering optimizes computation. Governance engineering optimizes organizational decisions.
2. Two Complementary Approaches
Technology Main focus
SGLang Efficient execution of complex LLM workflows and structured generation, using RadixAttention for automatic prefix-cache reuse across requests.
NVIDIA Dynamo Distributed multi-node inference orchestration: disaggregated prefill/decode serving, KV-cache-aware request routing and accelerated cache transfers across GPU, CPU and storage tiers through NIXL (NVIDIA Inference tranXfer Library).
OBSERVED Dynamo separates compute-bound prefill from memory-bound decode on independently scaled workers and can use SGLang, vLLM or TensorRT-LLM as its underlying execution engine—illustrating that runtime engineering and inference-engine choice are themselves becoming a distinct architectural layer, preceding the governance question addressed by this Working Paper.
3. Architectural Contributions Advanced request scheduling, including disaggregated prefill/decode execution. Optimized GPU utilization and dynamic scheduling based on real-time demand. Reduced inference latency through KV-cache-aware routing that avoids redundant recomputation. Higher throughput through accelerated RDMA-based transfers (NIXL) across memory tiers. Production-scale AI serving across multiple inference engines (SGLang, vLLM, TensorRT-LLM).
These technologies represent a new generation of runtime software in which software and hardware architecture evolve together.
4. Architectural Boundaries
Neither SGLang nor NVIDIA Dynamo evaluates institutional priorities, regulatory constraints or organizational trust policies. Their responsibility begins after execution decisions have already been made.
Runtime layer Governance layer
Optimizes execution. Selects execution policies.
Schedules computation. Schedules organizational intention.
Uses hardware efficiently. Uses AI resources responsibly.
Improves performance. Improves accountability.
Chapter 02.10 — Model Context Protocol (MCP): Standardizing AI Interoperability
Purpose. Analyze Model Context Protocol (MCP) as an interoperability standard and distinguish protocol standardization from governance orchestration.
OBSERVED Primary source: Model Context Protocol — official specification.
1. From APIs to AI Protocols
As AI systems increasingly rely on external tools, enterprise data, software services and autonomous workflows, interoperability becomes a strategic architectural concern. MCP introduces a common protocol enabling language models to interact with external capabilities in a standardized way.
MCP standardizes communication between AI systems and tools. It does not determine whether that communication should take place.
2. Architectural Contributions
Capability Contribution
Standardized interfaces Common interaction model between models and tools.
Tool discovery Structured description of available capabilities.
Context exchange Consistent transmission of information.
Ecosystem growth Interoperability across heterogeneous AI environments.
Protocols reduce integration complexity by allowing independent systems to communicate through shared conventions rather than custom interfaces.
3. Strategic Value
Improves AI application portability. Encourages reusable tool ecosystems. Facilitates enterprise integration. Supports modular AI architectures. Promotes long-term interoperability.
4. Governance Perspective
MCP remains intentionally neutral toward organizational policies. It specifies how interactions occur, not whether they are authorized, compliant, auditable or strategically appropriate.
MCP RA-153.1-2
Standardizes communication. Governs communication policies.
Defines protocol semantics. Defines organizational rules.
Enables interoperability. Evaluates authorization.
Connects systems. Coordinates institutional intention.
Individual analyses first describe each technology’s documented capabilities. Comparison
with RA-153.1-2 is centralized in the matrix in Chapter 02.11. This positioning remains conceptual:
it is not a benchmark result comparing a proposed architecture with deployed systems.
Chapter 02.11 — Comparative Matrix of Existing AI Infrastructure Solutions
Purpose. Synthesize the state of the art by positioning major AI infrastructure technologies according to their primary architectural responsibilities.
1. Comparative View
Technology Primary role Main strength Governance scope
OpenRouter Provider abstraction Unified model access Limited
LiteLLM Gateway & routing Operational flexibility Limited
LangChain Application workflows Agent orchestration External
vLLM Inference engine Execution performance None
Ollama Local inference Sovereign execution Local only
Hugging Face Open ecosystem Knowledge sharing External
Ray Serve Serving platform Scalable deployment Infrastructure only
KServe Kubernetes serving Cloud-native serving Infrastructure only
SGLang AI runtime Workflow execution None
NVIDIA Dynamo Runtime acceleration Hardware optimization None
MCP Interoperability protocol Standardized communication Protocol only
The comparison reveals a highly mature execution ecosystem covering access, orchestration, serving, runtime optimization and interoperability.
2. Emerging Architectural Pattern
Despite their diversity, these technologies naturally form complementary architectural layers:
Access and provider abstraction. Application orchestration. Inference execution. Serving infrastructure. Runtime optimization. Interoperability protocols.
Together, they form an increasingly complete operational stack for enterprise AI.
3. A Missing Architectural Layer One observation consistently emerges across the original review: while execution capabilities have become highly sophisticated, explicit organizational governance remains largely external to the execution stack.
Current infrastructures address how AI systems operate. They rarely formalize why a particular operational decision is institutionally appropriate.
4. Transition
The following chapter examines this architectural gap and motivates a governance-centered
reference architecture.
Since WP006 was first written, a distinct front of runtime agent governance has taken shape. Runtime governance, authorization and attestation are no longer empty fields.
Chapter 02.11A — 2026 Update: Runtime Governance, Authorization, Evidence and Attestation
Purpose. RA must be compared not only with routers, gateways, inference engines and orchestration frameworks, but architectures operationalizing policy, authorization, evidence and attestation during execution.
1. Runtime Governance Becomes an Explicit Category
OBSERVED. In April 2026, Microsoft published Agent Governance Toolkit, an open-source runtime security/governance project for autonomous agents. It emphasizes deterministic enforcement, identity, isolation and audit. Governance becomes an execution-control-plane responsibility.
Primary source : Microsoft Open Source, « Introducing the Agent Governance Toolkit: Open-source runtime security for AI agents », April 2, 2026 — https://opensource.microsoft.com/blog/2026/04/02/introducing-the-agent-governance-toolkit-open-source-runtime-security-for-ai-agents/
2. Agents Become Explicit Authorization Subjects
OBSERVED. OpenFGA documents agents as principals with their own permissions. OpenID Foundation’s AuthZEN develops authorization profiles for agent architectures and MCP. “Who or what can perform which action, in which context?” becomes standardizable.
Sources : https://openfga.dev/docs/modeling/agents — https://openid.net/openid-foundation-advances-authorization-for-the-agent-era-with-new-authzen-working-group-drafts/
3. Evidence Moves Closer to Action
OBSERVED. PCAA proposes portable certificates linking policy, authority, approval, execution and evidence to agent actions. CAVA—Canonical Action Verification and Attestation—proposes canonical representation to verify and attest actions across heterogeneous runtimes.
Sources : https://arxiv.org/abs/2606.04104 — https://arxiv.org/abs/2607.13716
4. Attestation and Execution Evidence
OBSERVED. 2026 research explores execution evidence and composition of agent evidence packages with hardware attestation such as IETF RATS. This strengthens execution verification without itself determining upstream decisions’ institutional legitimacy.
Sources : https://arxiv.org/abs/2607.05397 — https://arxiv.org/abs/2608.00801
5. Updated Comparative Matrix
FAMILY MAIN QUESTION MAIN CONTRIBUTION Runtime governance How is policy enforced during execution? Enforcement, identity, audit Authorization Who/what may act? Permissions, principals, context Proof-carrying actions What should execute, with what evidence? Certificates, receipts, replay Canonical attestation How is action verified across runtimes? Canonical identity, binding, attestation RA-153.1-2 Should intention become execution? End-to-end governed passage
6. How the 2026 Review Changes RA’s Claim
PROPOSED. RA must no longer claim runtime governance alone as its main distinction. That direction is explicitly occupied. Its distinctive proposal is the complete passage from institutional intention to execution: authority, policies, passage conditions, eligibility, decision, possible non-passage, any route, evidence, audit and revision.
Authorization architecture can determine permission. Runtime governance can enforce policy. Evidence architecture can demonstrate execution. RA asks the connecting question: is there here, now, under these conditions, a sufficiently legitimate, coherent passage from intention to action?
7. Architectural Consequence
The 2026 front narrows originality claims possible without benchmarking. RA must be tested on composing specialized mechanisms into an inspectable institutional decision chain.
Methodological limit. “No complete equivalent identified” means only none matching this decomposition was found in the corpus examined through 12 August 2026. It proves neither uniqueness nor universal priority. Relevant new publications must be able to revise this positioning.
9. Conclusion of the Precedence Search
| RA-153.1-2 function | Reviewed precedents | Proximity | Implication for RA |
|---|---|---|---|
| Semantic resolution / intention | When to Reason ; Context Kubernetes | High | Do not claim semantic analysis as a novelty. |
| Capability resolution | A2A Agent Cards ; MCP Tools ; MetaCogAgent | Strong functional precedent | Position RA on intention → capability requirements → admissibility, not discovery alone. |
| Cognitive-strategy selection | Select-then-Solve ; Arbiter-K ; Governed Reasoning | Very strong | Cognitive routing exists; the question concerns its architectural status and governance. |
| Governance before effect | Arbiter-K ; Context Kubernetes ; Governed Reasoning ; Microsoft Agent Governance Toolkit | Very strong | Do not claim Governance-First in isolation. |
| Agent authorization | OpenFGA Agents ; OpenID AuthZEN / COAZ-MCP ; IGAC | Very strong | RA must compose with authorization standards rather than replace them. |
| Policies cross-layer | Semantic Router DSL 2026 | Very strong | Cross-layer policy is not RA-specific. |
| Non-passage / review / escalation | Governed Reasoning ; IGAC ; PCAA | High | RA must specify semantics and traceability of EXECUTE / ABSTAIN / REFUSE / ESCALATE. |
| Evidence / attestation | PCAA ; CAVA ; Proof of Execution ; RATS composition | Very strong | Trust Passage must remain composable, not an attestation-invention claim. |
| Complete intention → capabilities → cognition → governance → execution → evidence chain | No complete equivalent identified in the corpus reviewed through 12 August 2026 | Partial / not demonstrated as unique | Frame as architecture to compare and benchmark, never universal absence of equivalents. |
8. Architectural Precedence Matrix
OBSERVED. Proof of Execution formalizes planning/enforcement/effect/recordkeeping separation and produces an attestation certificate when execution invariants hold. August 2026 work also explores software-evidence packages composed with hardware trust roots based on IETF RATS. Proof of Execution — arXiv:2607.05397 · Hardware-rooted attestation — arXiv:2608.00801
OBSERVED. PCAA (June 2026) organizes runtime governance around portable action certificates, admissibility/approval checkpoints, receipts and replayable evidence. CAVA (July 2026) supplies underlying canonical action identity and binds approval, receipts and attestation. These clarify governed decision/action/evidence boundaries beyond conventional observability. PCAA — arXiv:2606.04104 · CAVA — arXiv:2607.13716
7. Action Governance, Evidence and Attestation
OBSERVED. From Inference Routing to Agent Orchestration: Declarative Policy Compilation with Cross-Layer Verification (March 2026) extends declarative policies from per-request LLM routing to multi-step workflows, MCP/A2A gates and Kubernetes artifacts, with structured audit traces. It closely matches cross-layer policy ambitions. Primary source — arXiv:2603.27299
6. Cross-Layer Policies: Routing, Orchestration and Infrastructure
OBSERVED. A2A Agent Cards describe identity, capabilities, skills and interaction requirements for suitable-agent discovery. MCP exposes named tools with schema metadata discoverable by models/clients. These provide strong discovery building blocks without alone defining governed transformation from institutional intention to capability requirements. A2A Specification · MCP 2026-07-28 — Tools
5. Capability Resolution: Agent and Tool Discovery
OBSERVED. Context Kubernetes (April 2026) highlights tension in LLM-assisted semantic routing and places a Permission Engine beneath the router: classification error may reduce relevance but must not leak authorization. This closely matches RA’s routing-not-authority invariant. Primary source — arXiv:2604.11623
OBSERVED. Arbiter-K (April 2026) organizes Governance-First architecture around Cognitive, Memory, Execution, Normative and Meta-cognitive cores. Probabilistic outputs are explicitly untrusted; a deterministic kernel enforces constraints. This is a strong precedent for cognition not being sovereign over effects. Primary source — arXiv:2604.18652
4. Governance-First: Separating Probability and Authority
OBSERVED. MetaCogAgent (May 2026) introduces metacognitive task/capability self-assessment and delegates low-confidence tasks to other agents; Metacognitive Policy Optimization for Multi-Agent LLMs also treats autonomous solving versus human deference as metacognitive policy. MetaCogAgent — arXiv:2605.17292 · HILA — arXiv:2603.07972
OBSERVED. Governed Reasoning for Institutional AI (April 2026) proposes typed cognitive primitives, metacognitive reflection, demand-driven delegation, governed execution substrate and review levels as structural execution conditions. Proximity to RA is strong in cognition, delegation, governance and non-autonomous execution. Primary source — arXiv:2604.10658
3. Metacognition, Delegation and Structural Governance
CONSEQUENCE. RA must not claim invention of dynamic reasoning-strategy selection. Any contribution concerns that decision’s architectural position and separation from governance authority.
OBSERVED. Select-then-Solve: Paradigm Routing as Inference-Time Optimization for LLM Agents (April 2026) compares Direct, Chain-of-Thought, ReAct, Plan-Execute, Reflection and ReCode, proposing lightweight selection of the most suitable paradigm per task. This directly precedes “choose how to process a task cognitively”. Primary source — arXiv:2604.06753
2. Cognitive-Paradigm Selection: A Direct Cognitive-Routing Precedent
OBSERVED. vLLM Semantic Router and its 2026 work extend this toward signal-/policy-driven decisions and multi-step orchestration. Publications vLLM Semantic Router
OBSERVED. When to Reason: Semantic Router for vLLM (2025) classifies reasoning needs and selectively enables useful reasoning mode. Semantic routing already goes beyond provider/model choice to inference depth or mode. Primary source — arXiv:2510.08731
1. Semantic Routing: From Model Selection to Reasoning Need
Purpose. Check significant precedents in published work and available protocols for RA’s added/explicit functions: semantic resolution, capability resolution, cognitive-strategy selection, pre-execution governance and evidence.
This section searches functional equivalents even under different vocabularies. It distinguishes comparable building blocks from a complete equivalent architecture.
Chapter 02.11B — Functional Precedents: Semantic Routing, Capabilities and Cognitive Routing
Chapter 02.12 — Analysis of Architectural Gaps
Purpose. Identify not a supposedly absent function in the state of the art, but the open composition question linking interpretation of intention, capabilities, cognition, authority, execution and evidence.
1. An Ecosystem Now Rich in Governance
The 2026 state of the art no longer permits runtime governance, agent authorization, semantic routing, cognitive-strategy selection or attestation to be described as largely vacant fields. Distinct projects and research cover each function with varying maturity, formalization and validation.
The architectural problem therefore shifts: it is no longer merely about adding governance to an execution stack, but about determining how semantic, capability, cognitive, normative and operational decision planes can cooperate without confusing capability, preference and authority.
2. The Composition Question
An infrastructure may correctly understand intention yet select an unauthorized capability. It may choose a suitable cognitive strategy yet produce an institutionally illegitimate effect. It may execute an authorized action but fail to produce portable evidence. Conversely, an authorization layer may be correct without understanding the cognitive quality of a proposed strategy.
3. Residual Gaps to Test
| Residual question | Why it remains open |
|---|---|
| Boundaries between resolution and authority | Neighboring systems often combine functions or place policies directly in the router/orchestrator. |
| Decision portability | Decisions must survive replacement of models, agents, runtimes and providers. |
| First-class non-passage | ABSTAIN, REFUSE and ESCALATE must be specified as governed, auditable outcomes rather than secondary errors. |
| Composition with standards | RA must be able to use A2A, MCP, AuthZEN, policy engines, PCAA/CAVA or other mechanisms without absorbing them. |
| Governance reproducibility | Two conformant implementations should be comparable using the same invariants and scenarios. |
| Empirical evaluation | The value of RA’s decomposition remains to be demonstrated through prototypes, benchmarks, ablations and comparisons with neighboring architectures. |
4. Revised Architectural Interpretation
RA-153.1-2 is therefore not justified by a lack of routing or governance tools. It is proposed as a way to make responsibility boundaries between these functions explicit and organize their composition around a governed passage.
This remains an architectural hypothesis. Its value depends on reducing coupling, making decisions more auditable, preserving institutional authority and composing with existing standards and engines without adding complexity that exceeds the benefits.
5. Transition to RA-153.1-2
The next chapter presents RA-153.1-2 as this decomposition/composition proposal. It no longer starts from a governance “void”, but from a landscape rich in specialized mechanisms whose articulation remains a research and engineering question.
Chapter 02.13 — Toward a Governance-Centered Reference Architecture
Purpose. Conclude the review by precisely formulating what RA-153.1-2 still proposes after considering 2025–2026 work on semantic routing, reasoning paradigms, governance-first, authorization and attestation.
1. From the “Missing Layer” to Plane Composition
The review now identifies strong solutions for execution, semantic routing, agent coordination, authorization, runtime control and evidence. WP006 can therefore no longer present a generic governance layer as missing from the landscape.
The question becomes composition: how can inspectable boundaries between interpretation, capabilities, cognitive strategy, normative decision, effect and evidence be preserved while allowing each layer to evolve independently?
2. RA-153.1-2 Architectural Proposal
Institutional intention
↓
Semantic resolution
↓
Capability resolution
↓
Cognitive resolution / strategy
↓
Governance passage
↓
EXECUTE / ABSTAIN / REFUSE / ESCALATE
↓
[if EXECUTE] Governed execution
↓
Evidence / receipts / attestation
↓
Audit and policy revisionThe first three layers produce interpretations, possibilities and strategies. They do not, on their own, confer authority to produce an effect. The governance passage turns—or refuses to turn—a possibility into an execution mandate.
3. Central Invariant
4. Revised Scientific Positioning
RA-153.1-2 does not claim individual invention of semantic routing, capability resolution, cognitive routing, governance-first, agent authorization, non-passage or attestation. Significant precedents exist for each function.
WP006 proposes a reference architecture that separates them into composable responsibilities and organizes their relationship as a governed passage from institutional intention to verifiable effect. This contribution remains PROPOSED: it must be evaluated against neighboring architectures identified in the review.
5. Architectural Falsifiability Criterion
The proposal would be weakened if an existing or future architecture demonstrated functionally equivalent decomposition with comparable guarantees and better simplicity, interoperability or performance. It would be strengthened if independent prototypes showed that RA’s separation measurably improves auditability, policy portability, non-passage quality or dependency control without disproportionate operational cost.
6. Transition to Chapter 03
Chapter 03 now specifies RA-153.1-2 within this narrower frame: not as “the missing router”, but as a proposal for boundaries and composition among semantic, capability, cognitive, normative, execution and evidence planes.
End of Chapter 02 — State of the Art
This part specifies RA as reference architecture; components/interfaces still require implementation validation.
Part IV — RA-153.1-2 Reference Architecture
Contents
Contents — Part IV
- Chapter 03.01 — RA-153.1-2 Design Principles
- Chapter 03.02 — RA-153.1-2 Conceptual Architecture
- Chapter 03.03 — The Policy Engine
- Chapter 03.03A — The Cognitive Routing Engine
- Chapter 03.04 — The Decision Router
- Chapter 03.05 — Observability, Audit and Institutional Accountability
- Chapter 03.06 — The Complete Governance Lifecycle
- Chapter 03.07 — Policy-Driven Routing Algorithms
- Chapter 03.08 — Reference Deployment Models
- Chapter 03.09 — Sovereign AI Infrastructure Scenarios
- Chapter 03.10 — Chapter Conclusion
Chapter 03.01 — RA-153.1-2 Design Principles
Purpose. Introduce architectural principles defining RA as governance-centered reference architecture for sovereign AI infrastructure.
◆ ZEON Conceptual Framework — theoretical foundation, external to the technical architecture below
Key 153 — The Bridge between Worlds. PROPOSED
Within ZEON, Key 153 operates the transition between understanding and action. Rather than deciding itself, it establishes conditions for human, organizational and artificial intelligences to converge in shared coherence. As systemic mediator, it preserves intention, links interpretation levels, enables transduction across domains and cooperation without sacrificing sovereignty. In RA it supplies the principle transforming routing into infrastructure for resonance, governance and distributed cooperation.
RA routes not only requests but intentions, capabilities and responsibilities so each interaction increases coherence of the whole system.
This section states the conceptual origins of “RA-153.1-2” in ZEON. Subsequent engineering principles, components and evaluation criteria are autonomous and do not depend on accepting ZEON. Chapter 00.01 offers an earlier shorter introduction. As the Editorial Notice states, RA is one application domain among several generated by Key 153 and does not exhaust its meaning.
1. Architectural Premise
RA rests on a simple observation: execution technologies improve rapidly while organizational intention remains fragmented across applications, scripts
and provider-specific configurations. Its aim is to make governance a first-class architectural concern.
AI systems should run not only efficiently, but coherently with institutional intention.
2. Fundamental Design Principles
Principle Description
Policy First Execution decisions derive from explicit organizational policies.
Provider Independence Governance remains independent of model providers and runtimes.
Hybrid by Design Cloud, private and local infrastructures are treated uniformly.
Explainability Every routing decision should be inspectable and auditable.
Sovereignty Organizations retain strategic AI execution control.
Composability Policies can evolve without execution-system redesign.
RA complements existing platforms by governing their use, not replacing technical capabilities.
3. Architectural Position
RA sits above model gateways, inference engines, serving platforms and interoperability protocols. It evaluates organizational policies before selecting the execution path best satisfying institutional objectives.
Execution infrastructure asks “can this run?” RA asks “should it run here, now, under these conditions?”
4. Transition
The next section introduces conceptual architecture and relationships between policy evaluation, decision routing and execution infrastructure.
Chapter 03.02 — RA-153.1-2 Conceptual Architecture
Purpose. Present RA’s conceptual architecture and explain explicit governance linking institutional intention to heterogeneous execution infrastructure.
1. Architectural Vision
RA introduces governance as an autonomous concern. Instead of embedding policies in individual applications, it creates a reusable layer evaluating organizational intention before execution decisions.
Policies become reusable architectural assets rather than hidden implementation details.
2. Conceptual Architecture
Institutional Intention
↓
Governance Policies
↓
Policy Engine
↓
Decision Router
├── Local / Private
└── Cloud Providers
↓
Execution Layer
↓
Observability • Audit • Metrics
RA separates policy evaluation from execution, enabling governance to evolve independently of AI infrastructure.
3. Core Components
Component Responsibility
Policy Repository Stores explicit organizational rules.
Policy Engine Evaluates applicable governance policies.
Decision Router Selects the authorized execution path.
Execution Layer Invokes gateways, runtimes and serving platforms.
Observability Captures metrics, traces and operational events.
Audit Layer Supplies explainability and institutional accountability.
4. Architectural Properties
Provider-neutral governance. Hybrid cloud/edge deployment. Explicit, inspectable routing decisions. Separate governance/execution lifecycles. Support for sovereign infrastructure.
Execution engines may change over time. Governance continuity should not.
5. Transition
The next section formalizes the Policy Engine’s evaluation model, rule hierarchy and decision lifecycle.
6. RA-153.1-2 Extension — Three Engines, Four Planes
The Semantic Resolution Engine asks “Which capabilities does this need require?” It produces a governable representation: intentions, semantic objects, constraints, ambiguities, sensitivity, required capabilities and confidence. It does not select a model directly.
The Cognitive Routing Engine asks “Which processing approach is appropriate?” It develops candidate strategies: direct response, source retrieval, tools, multi-step reasoning, decomposition, model comparison, critique, verification, simulation or human involvement.
The Governance Engine asks “Is this passage legitimate, authorized and sufficiently justified under applicable policies?” It may authorize conditionally, impose obligations, narrow admissible strategies or return ABSTAIN, REFUSE or ESCALATE.
Intention / Request
↓
Semantic Resolution
(need → required capabilities)
↓
Candidate Cognitive Strategies
(how should the need be processed?)
↓
Governance
(policies, authority, risks, obligations)
↓
EXECUTE / ABSTAIN / REFUSE / ESCALATE
↓ [if EXECUTE]
Eligible-resource resolution
↓
Delegated execution
↓
Evidence → Attestation → AuditRA invariant. Technical capability alone does not make a resource admissible. Cognitive relevance alone does not authorize a strategy. Optimization operates only within governance-defined admissibility.
7. Semantic Resolution Engine — Capability Resolution
The reference semantic router is not a model router. Its canonical output is a Need Descriptor or Capability Requirement Set, not a provider/model identifier. This avoids fixing understanding to the current catalog and makes semantics independently testable.
NEED intents[] semantic_objects[] required_capabilities[] constraints[] ambiguities[] sensitivity evidence_requirements[] confidence provenance
This requirement covers internal taxonomies, embeddings, classifiers, scores, ranking rules, selection heuristics, prompt structures, learning mechanisms, routing graphs and other implementation details. Later convergence is acceptable only if the mechanism is publicly documented, explicitly adopted as a shared interface/standard and remains replaceable.
Chapter 03.03 — The Policy Engine
Purpose. Describe the Policy Engine, the central component translating organizational intention into explicit, explainable, reusable execution decisions.
1. Purpose. The Policy Engine evaluates governance before any model invocation. It separates institutional reasoning from technical execution, allowing governance to evolve independently of underlying infrastructure.
The Policy Engine evaluates intention before infrastructure is engaged.
Policies become executable organizational knowledge rather than scattered implementation rules.
2. Decision Lifecycle
Stage Responsibility
Context Acquisition Collect request, identity, workload and environment context.
Policy Selection Identify applicable governance rules.
Policy Evaluation Resolve permissions, obligations and constraints.
Decision Production Select the authorized execution strategy.
Trace Generation Produce auditable rationale metadata.
3. Policy Hierarchy
Layer Examples
Institutional Mission, ethics, sovereignty.
Regulatory Legal and compliance requirements.
Operational Cost, latency, resilience.
Contextual User role, sensitivity, workload.
4. Conflict Resolution
Several policies may apply simultaneously. Explicit precedence rules resolve conflicts, preserving transparency and deterministic behavior rather than hidden implementation logic.
Governance becomes inspectable because policy conflicts are resolved explicitly rather than implicitly.
5. Outputs
Authorized execution target. Applicable governance rationale. Audit metadata. Compliance status. Decision confidence and traceability.
6. Transition
The next section presents the Decision Router, translating validated governance decisions into concrete paths across heterogeneous AI infrastructure.
Chapter 03.03A — The Cognitive Routing Engine
Purpose. Formalize the layer transforming a semantically described need into candidate processing strategies without independently deciding legitimacy or final resource.
1. Responsibility
The Cognitive Routing Engine selects a cognitive/orchestration approach, not a provider. It can propose direct response, document research, tool use, subtask decomposition, sequential chains, parallel execution, multi-system comparison, critique, verification, simulation or human intervention.
2. Output Contract
Each candidate describes capabilities, dependencies, stages, evidence needs, stop conditions, known risks and rationale. Governance retains authority to modify, constrain or prohibit it.
3. Invariant
The Cognitive Routing Engine holds neither institutional authority nor execution rights. It proposes strategies. Governance decides passage. Execution acts only under an authorized mandate.
Chapter 03.04 — The Decision Router
Purpose. Explain how Policy Engine governance decisions become concrete execution paths across heterogeneous infrastructure.
1. From Governance to Execution
The Decision Router is the operational bridge between governance and execution. It does not evaluate organizational intention—that belongs to the Policy Engine. It materializes validated decisions by selecting a policy-satisfying execution path.
The Policy Engine decides what is authorized. The Decision Router determines how that authorization executes.
Separating policy evaluation from execution routing lets governance evolve independently of infrastructure technology.
2. Routing Inputs
Input Description
Policy Decision Authorized governance outcome.
Execution Context User, workload, sensitivity, latency requirements.
Infrastructure State Availability, health, capability and resilience.
Business Constraints Cost, locality, contractual obligations.
3. Routing Targets
Local execution (e.g. Ollama). Private enterprise infrastructure. Cloud-hosted inference. Multi-provider gateways. Specialized high-performance runtimes.
4. Decision Properties
Property Purpose
Deterministic The same policies produce the same routing outcome.
Explainable Every routing decision can be justified.
Adaptive Infrastructure changes without changing governance.
Auditable The complete execution trace is preserved.
Routing becomes an explicit architectural responsibility rather than hidden application
logic.
5. Architectural Scope
The Decision Router lets organizations replace execution technologies without rewriting governance policy. Separation preserves long-term institutional continuity while enabling continuous technological evolution.
6. First-Class Governance Outcomes — v1.3
A governed decision need not produce a route. Non-passage can be valid.
EXECUTE → passage authorized and sufficiently justified; a route may be selected. ABSTAIN → insufficient information; no execution. REFUSE → policy, prohibition or unmet condition; no execution. ESCALATE → decision transferred to designated authority; no execution before resolution.
ABSTAIN, REFUSE and ESCALATE are not routing errors. They preserve intention and responsibility when no acceptable passage exists.
7. Transition
The next section introduces Observability and Audit, completing governance through transparency, traceability and institutional accountability.
Chapter 03.05 — Observability, Audit and Institutional Accountability
Purpose. Present observability/audit capabilities making AI decisions transparent, explainable and continuously improvable.
1. Beyond Execution Monitoring
Traditional observability covers infrastructure health, latency, throughput and failures. RA extends it to observable governance. Organizations can monitor performance and inspect why particular governance decisions were taken.
Trustworthy AI infrastructure must expose not only what happened, but why.
Observability becomes a governance capability rather than purely operational.
2. Governance Trace Model
Trace element Purpose
Request Context Capture the operational situation.
Applied Policies Record evaluated rules.
Routing Decision Document the selected path.
Execution Result Link governance to operational outcomes.
Audit Record Supply long-term institutional evidence.
3. Explainability and Accountability
Every governance decision generates structured metadata describing applicable policies, evaluated constraints, selected target and rationale for final authorization. Records support compliance, organizational learning and independent audit.
Explainability is not optional. It is a governance obligation.
4. Continuous Governance Improvement
Identify recurring policy conflicts.
Measure governance effectiveness. Improve organizational rules over time. Detect emerging operational risks. Strengthen institutional trust.
5. Architectural Scope
Observability closes the loop: policies guide execution, execution produces evidence, evidence improves governance. RA therefore treats governance as continuous institutional learning rather than static configuration.
Governance is complete only when decisions can be observed, explained, audited and improved.
6. Trust Passage / Attestation Protocol — Architectural Connection
WP006 presents no established standard here. It identifies a research interface between governed decisions and emerging evidence/attestation mechanisms.
RA determines whether passage may occur and under which conditions. A Trust Passage portably describes passage/non-passage: relevant intention/context, authority, policy versions, evaluated conditions, admissible candidates, outcome, any route and evidence requirements. Attestation then binds this declaration to observables enabling verification of actual authorization and execution.
Intention ↓ RA-153.1-2 governed decision ↓ EXECUTE / ABSTAIN / REFUSE / ESCALATE ↓ Trust Passage ↓ [if EXECUTE] Execution ↓ Evidence / receipts / traces ↓ Attestation ↓ Independent verification ↓ Audit & policy revision
The connection remains modular: RA presupposes no unique signature, tamper-resistant log, Trusted Execution Environment, RATS, action certificate or replay technology.
7. Transition
The next section introduces the full governance lifecycle and policy evolution from institutional intention to continuous organizational learning.
Chapter 03.06 — The Complete Governance Lifecycle
Purpose. Describe the complete RA governance lifecycle from institutional intention to continuous learning.
1. Governance as a Continuous Process
RA treats governance as living process rather than static configuration. Each execution decision begins with institutional intention, passes explicit policy evaluation and produces operational evidence continually improving future governance.
Governance is a closed learning loop connecting intention, execution and institutional knowledge.
Unlike configuration-centered architectures, RA assumes governance evolves continuously as organizations, regulations and technologies change.
2. Governance Lifecycle
Institutional Intention
↓
Policy Definition
↓
Policy Evaluation
↓
Decision Routing
↓
Execution
↓
Observability
│
↓
Audit & Compliance
↓
Institutional Learning
↓
Policy Evolution
3. Lifecycle Responsibilities
Stage Main result
Institutional Intention Strategic objectives and principles.
Policy Definition Formal governance rules.
Policy Evaluation Explicit authorization decision.
Decision Routing Execution-path selection.
Execution Operational AI processing.
Observability Operational and governance traces.
Audit Accountability evidence.
Learning Continuous governance improvement.
4. Architectural Benefits
Institutional continuity despite technological change. Progressive policy refinement. Transparent accountability. Continuous regulatory adaptation. Long-term preservation of institutional knowledge.
Execution generates experience. Governance turns experience into institutional intelligence.
5. Transition
The next section formalizes policy-driven routing algorithms and consistent governance-rule evaluation across heterogeneous infrastructure.
Chapter 03.07 — Policy-Driven Routing Algorithms
Purpose. Formalize the decision process translating policies into deterministic routing decisions across heterogeneous infrastructure.
1. Architectural Principle
RA does not route directly from technical parameters. Routing follows explicit governance evaluation. The algorithm therefore operates on policy outcomes rather than isolated infrastructure metrics.
Routing is not infrastructure-first. It is policy-first.
Execution targets are selected only after organizational intention is evaluated through explicit governance rules.
2. Conceptual Decision Flow
Request ↓ Context Analysis ↓ Policy Evaluation ↓ Constraint Resolution ↓ Candidate Selection ↓ Route Optimization ↓ Authorized Execution
3. Evaluation Criteria
Criterion Purpose
Regulatory Compliance Respect legal and institutional obligations.
Data Sovereignty Keep sensitive workloads within approved domains.
Security Level Select infrastructure matching required protection.
Operational Efficiency Balance latency, availability and cost.
Business Policy Apply organization-specific priorities.
4. Algorithmic Properties
Deterministic under identical policies. Explainable through explicit rule evaluation. Provider-independent. Adaptable to changing infrastructure. Composable through reusable policy modules.
5. Reference Pseudocode
context = acquireContext(request) policies = evaluatePolicies(context) constraints = resolveConflicts(policies) targets = discoverEligibleTargets(constraints) route = optimize(targets, context) execute(route) recordAudit(route, policies)
Optimization never overrides governance. It operates only within governance-approved alternatives.
6. Transition
The next chapter presents deployment models integrating RA with cloud-native, hybrid and sovereign infrastructure.
Chapter 03.08 — Reference Deployment Models
Purpose. Illustrate deployment across heterogeneous infrastructure while preserving one governance model.
1. Deployment Independence
RA is deliberately infrastructure-neutral. Governance stays stable as execution technology evolves, allowing provider migration, new runtimes or local execution without policy redesign.
Governance portability matters as much as workload portability.
The same policies can simultaneously coordinate cloud services, private infrastructure and edge environments.
2. Reference Deployment Models
Model Description Typical use
Cloud Native Central governance with public AI providers. Rapid enterprise adoption.
Private AI Governance of private inference clusters. Sensitive organizational data.
Sovereign Hybrid Policy-driven cloud/local routing. Balance of sovereignty and scale.
Multi-Provider Governance across providers. Resilience and provider independence.
Edge AI Local execution under central policies. Industrial and disconnected environments.
3. Logical Architecture
Governance Layer (RA-153.1-2)
↓
Policy Engine + Decision Router
├── Cloud AI
├── Private AI
└── Local / Edge AI
↓
Audit • Metrics • Learning
4. Architectural Benefits
Infrastructure evolution without governance redesign. Consistent policies. Provider-neutral execution. Incremental sovereign AI adoption. Unified audit across heterogeneous environments.
Execution infrastructure may diversify. Governance should remain unified.
5. Transition
The next section explores representative sovereign-AI scenarios for public institutions, regulated industries and mission-critical organizations.
Chapter 03.09 — Sovereign AI Infrastructure Scenarios
Purpose. Demonstrate consistent application across institutional contexts while preserving governance, sovereignty and accountability.
1. Public Administration
Government agencies require explicit policy enforcement, compliance and comprehensive auditability. RA routes workloads under institutional rules while preserving operational flexibility.
2. Healthcare
Medical settings combine strict confidentiality with high-performance AI. Policies determine whether data stays local, is anonymized or may be processed externally.
3. Critical Industry. Industrial infrastructure needs resilient hybrid deployment. Local inference ensures continuity; cloud remains available for nonsensitive workloads.
4. Research and Universities
Research organizations often combine open-source models, commercial APIs and local compute clusters. RA supplies unified governance over heterogeneous resources.
5. Regional and Territorial AI
Local authorities increasingly seek sovereign digital infrastructure. RA enables municipal, regional and national service governance while respecting local constraints.
6. Cross-Sector Comparison
Sector Main governance objective Typical routing strategy
Public Sector Compliance and transparency Policy-driven routing
Healthcare Patient confidentiality Local-first execution
Industry Operational resilience Hybrid routing
Research Scientific flexibility Multi-provider orchestration
Territories Digital sovereignty Regional governance policies
Execution infrastructures differ substantially, but governance principles remain stable. RA separates institutional intention from technological implementation.
Sovereignty is not achieved by choosing a particular model, but by governing model selection, composition and oversight.
7. Transition
The next section concludes Chapter 03, synthesizing RA’s architectural contribution and positioning governance as modern infrastructure’s missing layer.
Chapter 03.10 — Chapter Conclusion
Chapter 03 introduced RA as governance-centered reference architecture for heterogeneous infrastructure. Rather than competing with inference engines, orchestration frameworks or serving platforms, RA occupies the layer translating institutional intention into operational decisions.
Major Contributions
Contribution Architectural Value
Policy Engine Explicit evaluation of organizational policies.
Decision Router Translation of governance into execution paths.
Governance Lifecycle Continuous institutional learning.
Observability & Audit Explainability, accountability and compliance.
Deployment Models Infrastructure-neutral implementation.
Sovereign Scenarios Applicability across institutional contexts.
RA’s central proposal is first-class governance independent of any particular model, cloud provider or execution technology.
A New Architectural Layer
Earlier chapters showed powerful existing execution capabilities. RA complements them with explicit governance evaluating institutional intention, applying policies and preserving sovereignty through changing ecosystems.
Execution makes AI operational. Governance makes AI trustworthy.
Research Perspective
RA is a reference architecture rather than a fixed implementation. Future work could formalize policy languages, governance ontologies, interoperability standards and benchmarking for objective comparison of governance-driven infrastructure.
Transition to Chapter 04
After conceptual/architectural foundations, the next chapter examines implementation, interoperability and research needed for large-scale adoption.
Infrastructure’s next evolution will be defined not only by more capable models, but by architectures governing them responsibly.
Assembled from supplied HTML sections 03.01 to 03.10, without condensation.
Implementation and maturity models describe possible realization paths, not consolidated operational experience.
Part V — Implementation Framework
Contents
Contents — Part V
Chapter 04.01 — Implementation Principles
Purpose. Translate RA-153.1-2’s conceptual architecture into practical implementation principles for enterprise, public-sector and sovereign AI infrastructure.
1. From Architecture to Implementation
RA-153.1-2 deliberately separates conceptual governance from implementation technology. This allows organizations to deploy the same governance architecture across programming languages, cloud providers, inference engines and orchestration frameworks.
Architecture defines responsibilities. Implementations realize them.
A reference architecture should remain stable while implementations evolve continually.
2. Fundamental Components
Component Responsibility
Policy repository Persistent governance knowledge.
Policy Engine Policy evaluation and authorization.
Decision Router Execution-target selection.
Connector layer Integration with providers and runtimes.
Observability services Tracing, metrics and audit ledgers.
3. Design Principles
Loose coupling between governance and execution. Technology-independent interfaces. Composable policy modules. Immutable audit records. Incremental deployment and migration.
4. Reference Layering
Applications │ RA-153.1-2 Governance │ Connectors / Protocols │ Inference Engines & AI Services │ Infrastructure
Governance should evolve more slowly than execution technology.
5. Transition
The next section examines interoperability mechanisms allowing RA-153.1-2 to coordinate heterogeneous AI ecosystems without imposing proprietary dependencies.
Chapter 04.02 — Interoperability Architecture
Purpose. Define how RA-153.1-2 interoperates with heterogeneous AI ecosystems while remaining independent of any particular provider, protocol or execution framework.
1. Interoperability as a Design Requirement
Modern AI infrastructure combines multiple APIs, inference engines, orchestration frameworks and deployment environments. RA-153.1-2 therefore adopts interoperability as a fundamental architectural requirement rather than an optional integration feature.
Governance should unify ecosystems without standardizing implementations.
RA-153.1-2 specifies governance responsibilities, not proprietary communication protocols.
2. Interoperability Layers
Layer Purpose
Applications Business services and AI-enabled workflows.
Governance Policy evaluation and routing decisions.
Protocol connectors Adapters to external APIs and standards.
Execution platforms Inference engines and orchestration systems.
Infrastructure Cloud, private data centers and edge devices.
3. Reference Integration Points Model Context Protocol (MCP). REST and gRPC APIs. Message-oriented middleware. Event-driven architectures. Cloud-native service meshes.
4. Logical Integration Model
Applications │ RA-153.1-2 Governance │ Protocol Adapters ├── MCP ├── REST ├── gRPC ├── Events │ Execution Platforms
5. Architectural Benefits
Provider independence. Incremental migration. Technological evolution without governance redesign. Unified policy enforcement. Long-term interoperability.
Interoperability preserves technological freedom. Governance preserves institutional coherence.
6. Transition The following section introduces extensibility mechanisms through which RA-153.1-2 can evolve using modular governance components and reusable policy packages.
Chapter 04.03 — Extensibility and Governance Modules
Purpose. Describe how RA-153.1-2 can evolve through modular governance components while preserving architectural coherence and long-term interoperability.
1. Modular Governance
RA-153.1-2 is designed as an extensible governance platform rather than a monolithic system. Governance capabilities can be added, replaced or refined without changing the architectural core.
Stable architecture. Evolving governance.
The governance core remains deliberately compact, while domain-specific capabilities are implemented as reusable modules.
2. Governance Module Categories
Module Responsibility
Compliance Enforcement of regulatory and legal policies.
Security Identity, trust and access policies.
Data sovereignty Jurisdiction and locality constraints.
Ethics Institutional ethical governance rules.
Optimization Cost, latency and resource-allocation policies.
Sector extensions Healthcare, finance, public sector, industry.
3. Extension Model
Core Governance │ Policy Engine │ Module Registry ├ Compliance ├ Security ├ Sovereignty ├ Ethics ├ Sector Packages │ Decision Router
4. Design Principles Composable policy packages. Independent module lifecycles. Backward-compatible interfaces. Standard governance contracts. Shared audit model.
5. Architectural Perspective
By separating the governance core from specialized modules, RA-153.1-2 allows organizations to adapt governance to new regulations, industries and technologies without fragmenting the overall architecture.
Governance diversity should emerge from modular policies, not incompatible architectures.
6. Transition
The next section presents implementation paths showing how organizations can progressively adopt RA-153.1-2 while minimizing operational disruption.
Chapter 04.04 — Incremental Adoption Strategy
Purpose. Present an incremental adoption strategy enabling organizations to deploy RA-153.1 without disrupting existing AI systems.
1. Evolution Rather Than Replacement
RA-153.1-2 is designed to coexist with existing infrastructure. Organizations can progressively introduce governance capabilities while preserving operational continuity.
Governance should be introduced incrementally rather than through disruptive replacement.
The architecture supports gradual migration from isolated AI deployments to policy-driven governance.
2. Reference Adoption Phases
Phase Objective
1. Assessment Inventory AI assets, providers and governance gaps.
2. Pilot Deploy the Policy Engine on selected workflows.
3. Integration Connect existing inference platforms through adapters.
4. Expansion Extend governance across organizational domains.
5. Optimization Continually improve policies through audit and feedback.
3. Migration Architecture
Existing Applications │ Legacy AI Services │ RA-153.1-2 Gateway │ Policy Engine │ Decision Router │ Current & Future AI Platforms
4. Success Factors
Executive sponsorship. Cross-functional governance teams. Reusable policy libraries. Incremental deployment metrics. Continuous organizational learning.
Successful adoption depends more on governance maturity than technological complexity.
5. Transition
The next section introduces governance metrics and maturity indicators to assess long-term adoption.
Chapter 04.05 — Governance Maturity Model
Purpose. Introduce a maturity model enabling organizations to assess, compare and progressively improve their AI governance capabilities.
1. Why a Maturity Model?
Technology adoption alone does not guarantee responsible AI. Sustainable governance requires measurable organizational capabilities. RA-153.1-2 therefore proposes a governance maturity model
describing progressive levels of institutional capability.
AI maturity should be assessed through governance capabilities rather than model sophistication.
The maturity model is an organizational roadmap, not a certification framework.
2. Governance Maturity Levels
Level Name Characteristics
Level 0 Ad hoc AI Isolated deployments, minimal governance.
Level 1 Managed AI Documented practices and initial policies.
Level 2 Policy-driven AI Centralized governance and explicit routing.
Level 3 Integrated governance Cross-organizational policy coordination.
Level 4 Adaptive governance Continuous learning and policy evolution.
Level 5 Institutional intelligence Governance embedded in strategic decision-making.
3. Assessment Dimensions
Policy management. Decision transparency. Auditability. Interoperability. Sovereignty. Organizational learning.
4. Organizational Progression
Progression between maturity levels should be driven by governance improvements rather than infrastructure replacement. Organizations can evolve incrementally while preserving existing operational investments.
Governance maturity is measured by institutional coherence, not technological complexity.
5. Transition
The next section introduces governance metrics and key performance indicators supporting continuous assessment of RA-153.1-2 deployments.
Chapter 04.06 — Governance Metrics and Indicators
Purpose. Define measurable indicators allowing organizations to continually monitor, assess and improve AI governance under RA-153.1-2.
1. Measuring Governance
Governance must be observable through objective indicators. RA-153.1-2 therefore distinguishes operational-performance metrics from governance-quality metrics. Both dimensions
are necessary, but answer different questions.
Performance measures how efficiently AI operates. Governance measures how responsibly AI operates.
Governance metrics should support decision-making, organizational learning and accountability rather than compliance reporting alone.
2. Fundamental Governance Indicators
Indicator Purpose Example
Policy-compliance rate Measure adherence to governance policies. % of compliant decisions
Decision explainability Measure trace completeness. % of fully explainable decisions
Audit coverage Assess auditability. % of requests with an immutable audit trail
Sovereignty compliance Verify locality constraints. % of workloads executed in approved domains
Policy-evolution velocity Track governance improvement. Validated policy revisions per quarter
3. Balanced Governance Dashboard
Compliance Transparency Risk Sovereignty Operational Efficiency Institutional Learning
4. Governance Feedback Loop
Indicators should feed directly into governance reviews. Metrics are not an end in themselves; they provide evidence for refining policies, improving routing decisions and strengthening institutional resilience.
The objective of governance metrics is continuous improvement, not continuous surveillance.
5. Transition
The next section concludes Chapter 04 by synthesizing implementation guidance and preparing the evaluation framework introduced in Chapter 05.
Chapter 04.07 — Chapter Conclusion
Chapter 04 has translated RA-153.1-2’s conceptual foundations into an implementation-oriented reference framework. It has shown how governance can be deployed incrementally, interoperably and independently of execution technologies.
Implementation Contributions
Section Contribution
Implementation principles Technology-independent governance architecture.
Interoperability Integration across heterogeneous AI ecosystems.
Governance modules Composable, extensible governance capabilities.
Adoption strategy Incremental deployment path.
Maturity model Organizational governance roadmap.
Metrics & indicators Continuous governance evaluation.
RA-153.1-2 is designed to evolve with AI ecosystems while preserving institutional coherence and long-term governance continuity.
From Architecture to Practice
The implementation framework confirms that governance is not an additional software component but an architectural capability spanning policy definition, execution control, observability and organizational learning.
Implementation succeeds when governance becomes an operational capability rather than a theoretical principle.
Preparing Evaluation
The next chapter introduces an evaluation framework designed to assess governance effectiveness through reference scenarios, measurable indicators and reproducible benchmarking methodologies.
A reference architecture reaches maturity only when it can be objectively evaluated and consistently reproduced.
The evaluation framework is specified to enable future testing. Results and weights are not presented as validated.
Part VI — Evaluation Framework
Chapter 05.01 — Evaluation Framework
Purpose. Establish a reproducible evaluation framework for assessing governance-centered AI architectures independently of their underlying execution technologies.
1. Why Evaluate Governance?
Traditional AI benchmarks primarily assess model quality, latency or computational efficiency. RA-153.1-2 introduces a complementary perspective: evaluating the effectiveness of governance itself.
A governance architecture should be evaluated by the quality of its decisions, not only by the speed of their execution.
The evaluation framework is technology-neutral and can be applied to cloud, hybrid or sovereign AI infrastructures.
2. Evaluation Dimensions
Dimension Question
Policy Accuracy Are governance policies applied consistently?
Decision Explainability Can every routing decision be justified?
Auditability Can every decision be reconstructed?
Sovereignty Are locality and regulatory constraints respected?
Adaptability Can governance evolve without an architectural redesign?
3. Reference Evaluation Cycle
Scenario │ Policy Evaluation │ Routing Decision │ Execution │ Audit Collection │ Governance Evaluation
4. Expected Outcomes
Objective comparison of governance strategies. Reproducible institutional benchmarks. Evidence-based policy refinement.
Cross-platform evaluation.
Evaluation transforms governance principles into measurable architectural evidence.
5. Transition
The following section defines reference scenarios suitable for comparing governance architectures across diverse institutional environments.
Chapter 05.02 — Reference Scenarios (Benchmark)
Purpose. Define representative reference scenarios for evaluating governance architectures under realistic operational conditions.
1. Principles
Reference scenarios should reproduce governance challenges rather than isolated technical workloads. Each scenario combines organizational intent, policy constraints, execution choices and measurable outcomes.
Governance benchmarks should evaluate decision quality before execution performance.
The same benchmark should be executable across different AI infrastructures, enabling an objective comparison of governance approaches.
2. Reference Scenarios
Scenario Governance Challenge Expected Evaluation
Cross-Border Data Respect data sovereignty rules. Correct routing and compliance.
Provider Failure Maintain policy consistency during failover. Governed resilience.
Conflicting Policies Resolve competing organizational constraints. Deterministic decisions.
Hybrid AI Choose between local and cloud inference. Policy-driven routing.
Regulatory Change Adapt without redesign. Governance adaptability.
3. Evaluation Sequence
Scenario │ Context │ Policy Evaluation │ Routing │ Execution │ Audit
│ Score
4. Benchmark Outcomes Governance accuracy. Explainability score. Audit completeness. Sovereignty compliance. Policy adaptability.
A benchmark becomes meaningful when identical governance questions produce comparable evidence across heterogeneous infrastructures.
5. Transition
The following section formalizes scoring methods and governance indicators that enable reproducible comparisons between implementations.
Chapter 05.03 — Governance Scoring Methodology
Purpose. Define a reproducible methodology for evaluating governance performance independently of model quality or infrastructure performance.
1. Governance Scoring Principles
The purpose of scoring is not to rank AI models, but to assess how consistently governance objectives are achieved across different operational contexts.
Governance scores measure decision quality, not computational capability.
A governance score should remain comparable even when organizations use different models, providers or execution platforms.
2. Reference Scoring Dimensions
Dimension Description Example Metric
Policy Compliance Correct policy application. 0–100%
Explainability Availability of decision rationale. Evidence completeness
Audit Integrity Completeness of governance traces. Audit coverage
Sovereignty Respect for jurisdictional constraints. Compliant executions
Adaptability Ability to evolve without redesign. Policy-update success
The default weights are normative starting values intended to make the protocol testable.
They are neither empirically calibrated nor presented as optimal. Any publication of results must
display the weights used, publish dimensional scores separately and accompany the
composite score with a qualitative analysis.
3. Composite Governance Score
PROPOSED
Each of the five dimensions is first normalized to a common 0–1 scale before combination, because their native units differ (a percentage, a coverage ratio, a success rate). The composite score is a weighted sum:
GovernanceScore = Σ (w_i × normalized_i), i ∈ {Compliance, Explainability, Audit, Sovereignty, Adaptability}
with Σ w_i = 1
Dimension Normalization (raw → 0–1) Weight Rationale for Default Weight
Policy Compliance % of decisions matching the expected policy-defined outcome 0.30 Direct measure of whether governance is respected; receives the highest weight.
Sovereignty % of executions respecting declared jurisdictional constraints 0.25 A single violation can have regulatory consequences regardless of scale.
Audit Integrity Audit coverage ratio (traced decisions ÷ total decisions) 0.20 Without a trace, compliance and sovereignty claims cannot be verified after the fact.
Explainability Evidence completeness ratio (decisions with retrievable rationale ÷ total decisions) 0.15 Required for institutional accountability, secondary to the correctness of the decision itself.
Adaptability % of policy updates applied without architectural redesign 0.10 A longer-cycle property; matters less for a single benchmark run than for a longitudinal comparison.
PROPOSED These default weights express a reasonable ordering of governance priorities
(compliance and sovereignty first, adaptability last), rather than a claim of optimality. Any organization applying this framework should be able to substitute its own weights; the Comparative Evaluation Framework (Chapter 05.05) should always state which weights were used, because architecture rankings can change with the weighting.
Worked example. A hypothetical evaluation run yielding Compliance = 0.92, Sovereignty = 1.00, Audit = 0.87, Explainability = 0.78, Adaptability = 0.65 produces:
GovernanceScore = (0.30 × 0.92) + (0.25 × 1.00) + (0.20 × 0.87) + (0.15 × 0.78) + (0.10 × 0.65) = 0.276 + 0.250 + 0.174 + 0.117 + 0.065 = 0.882
This example is purely illustrative; it does not correspond to a measured run of RA-153.1-2 or any other architecture.
4. Interpretation
Higher scores indicate greater governance maturity. Scores support longitudinal improvement. Scores complement technical benchmarks. Scores should always be accompanied by qualitative analysis.
Quantitative indicators inform governance; they do not replace human judgment.
This scoring methodology is operationalized as the RA-153.1-2 Governance Reference Suite (PGBS-01 to PGBS-05) in Appendix D, which also defines an additional indicator (Operational Resilience) tracked outside this composite formula.
5. Transition
The following section introduces reproducibility protocols ensuring that governance evaluations can be independently replicated across organizations.
Chapter 05.04 — Reproducibility Protocols
Purpose. Define reproducible protocols enabling independent organizations to evaluate governance architectures under comparable conditions.
1. Why Reproducibility Matters
A governance framework becomes scientifically credible only when independent teams can reproduce evaluation results using equivalent scenarios, datasets and policy definitions.
Reproducibility transforms architectural proposals into scientific evidence.
The protocol evaluates governance behavior, not the intrinsic capabilities of AI models.
2. Required Evaluation Artifacts
Artifact Purpose
Scenario Specification Describe the governance situation.
Policy Package Define the applicable governance rules.
Execution Context Document infrastructure conditions.
Expected Outcomes Reference governance decisions.
Audit Dataset Verify trace completeness.
Policy Package — PROPOSED Minimum Schema
To be independently executable, a Policy Package must be a versioned, machine-readable object rather than a prose description. The minimum required fields are:
policy_package:
id: string # stable identifier, e.g. “PP-2026-014”
version: semver # e.g. “1.2.0”
author: string # person or team responsible for authoring
scope: string # organizational domain or applicable jurisdiction
approval_status: enum # draft | approved | superseded
approved_by: string # role or committee, required if status = approved
effective_date: date
superseded_by: string | null # replacement package id, if applicable
rules: [
{
rule_id: string
condition: string # machine-evaluable predicate
expected_action: string
rationale: string # why this rule exists — feeds the Explainability score
}
]
The approval_status and approved_by fields distinguish a Policy Package from a simple configuration file: they carry the institutional decision, not just the technical rule. A Policy Package without recorded approval cannot be scored for Policy Compliance under Chapter 05.03, since there is no reference decision against which execution can be compared.
3. Evaluation Workflow
Reference Scenario │ Policy Package │ Independent Execution │ Audit Verification │ Score Comparison │ Published Results
4. Comparison Methodology
PROPOSED
“Independent execution” and “comparable conditions” are the two terms this protocol most needs to operationalize, because a benchmark run by a single team on a single machine cannot support the reproducibility claim in Section 1.
Requirement Operational Definition
Minimum runs per scenario n ≥ 5 independent runs, no fewer; below this threshold, the variance-handling rule below cannot be meaningfully applied.
Independence Each run uses a distinct execution team or automated pipeline, a distinct infrastructure instance (no shared cache, no shared session state), and the same versioned Policy Package and Scenario Specification as inputs.
Comparable conditions Same Policy Package version, same Scenario Specification, same scoring formula (Chapter 05.03); infrastructure (cloud, local, hybrid) is the variable being compared, not a controlled constant.
Variance handling Report the median Governance Score and interquartile range (IQR) over the n runs, not only the mean. A scenario whose IQR exceeds 0.10 (on the 0–1 scale) should be flagged for qualitative review before use in any comparative ranking.
Non-reproducible runs A run that cannot be independently reproduced within the same IQR bound after two attempts is excluded from the published comparison and reported separately, with the discrepancy documented rather than silently discarded.
This methodology defines how a comparison should be conducted once evaluation runs exist. It is not itself a completed evaluation; see Chapter 05.06 for the current status of empirical validation.
5. Principles
Open benchmark definitions. Versioned policy packages. Transparent scoring methods. Repeatable execution conditions. Public documentation of discrepancies.
Scientific comparison requires reproducible governance experiments rather than isolated demonstrations.
6. Transition
The following section introduces comparative evaluation across governance architectures and institutional contexts.
Chapter 05.05 — Comparative Evaluation Framework
Purpose. Establish a common methodology for comparing governance architectures without bias toward a specific AI model, cloud provider or execution platform.
1. Principles of Fair Comparison
Comparative evaluation should isolate governance behavior from model capabilities. All evaluated systems should execute equivalent governance scenarios under equivalent policy constraints.
A governance framework should be compared on the consistency of its decisions rather than the power of its underlying models.
Comparisons should remain technology-neutral, allowing cloud, sovereign, hybrid and on-premises infrastructures to participate under identical governance conditions.
2. Comparative Matrix
Evaluation Axis Measured Property
Policy Consistency Uniform application of governance rules.
Decision Transparency Availability of explainable decisions.
Audit Completeness Integrity of governance evidence.
Operational Resilience Governed behavior during failures.
Evolution Capability Adaptation to policy changes.
3. Comparative Workflow
Reference Scenario │ Multiple Governance Architectures │ Independent Execution │ Governance Metrics │ Comparative Analysis │ Published Evidence
4. Expected Outcomes
Objective comparison of governance strategies. Identification of architectural strengths and limitations. Support for institutional procurement decisions. Continuous improvement of governance practices.
Fair comparison strengthens the credibility of governance research by separating technological performance from institutional decision quality.
5. Transition
The following section introduces empirical validation strategies and discusses future experimental campaigns for RA-153.1-2.
As of this edition, RA-153.1-2 is a proposed reference architecture. The benchmark mechanisms,
PGBS and composite score constitute a specified experimental program that has not yet been validated through an
independent campaign. The next research phase must produce prototypes, traces, measurements
and replications.
Chapter 05.06 — Empirical Validation and Experimental Roadmap
Purpose. Define a progressive experimental strategy for validating RA-153.1-2 through practical deployments, reproducible studies and collaborative research.
1. From Reference Architecture to Evidence
A reference architecture becomes scientifically valuable when its principles are tested under real operational conditions. Validation therefore combines controlled experimentation with progressively broader field deployments.
Scientific credibility emerges from repeatable observation, transparent reporting and independent replication.
The roadmap is designed for research laboratories, public institutions, industry partners and sovereign AI initiatives.
2. Validation Stages
Stage Objective Expected Outcome
Laboratory Prototype Validate fundamental governance mechanisms. Technical feasibility.
Pilot Deployment Evaluate governance in real workflows. Operational feedback.
Multi-site Experiment Compare independent implementations. Evidence of reproducibility.
Institutional Adoption Evaluate governance at organizational scale. Maturity assessment.
Open Research Program Encourage community validation. Shared benchmark corpus.
3. Experimental Cycle
Reference Architecture │ Prototype │ Pilot │ Evaluation │ Independent Replication │ Architectural Improvement
4. Research Priorities
Governance policy languages. Cross-platform interoperability. Audit automation. Sovereign AI deployments. Open governance benchmark suites.
Validation is not the end of architecture; it is the beginning of institutional learning.
5. Transition
The next chapter explores future research directions and the evolution of governance architectures for increasingly autonomous AI ecosystems.
This part describes research directions and possible consequences.
Part VII — Governance Engineering and Outlook
Chapter 06.01 — Future Research Directions
Purpose. Identify the main scientific and engineering challenges shaping the next generation of governance architectures for AI ecosystems.
1. Beyond Today’s AI Platforms
AI systems are evolving toward distributed, multimodal and increasingly autonomous infrastructures. Governance architectures must therefore evolve from static policy enforcement toward adaptive institutional coordination.
The future challenge is not merely to build more capable AI, but to govern increasingly capable AI responsibly.
RA-153.1-2 is presented as a reference architecture intended to evolve alongside future execution technologies rather than compete with them.
2. Research Priorities
Research area Open questions
Adaptive policy systems How can governance evolve while remaining auditable?
Distributed governance How can policies remain coherent across multiple institutions?
Machine-readable governance How should governance policies be represented formally?
Sovereign AI How can territorial and legal autonomy be preserved?
Governance benchmarks How can governance quality become an internationally measurable capability?
3. Long-Term Vision
Future governance architectures should support interoperability, transparency, institutional trust and continuous learning without constraining technological innovation.
Governance should become enabling infrastructure for trustworthy AI ecosystems.
4. Transition
The next section examines long-term evolution toward institutional AI ecosystems in which governance becomes a shared capability rather than an isolated software layer.
Chapter 06.02 — Toward Institutional AI Ecosystems
Purpose. Explore the evolution from isolated AI deployments toward interoperable institutional ecosystems governed by shared policies, transparent decisions and collaborative accountability.
1. From Systems to Ecosystems Most current AI deployments remain organization-centered. Future infrastructures will increasingly connect public institutions, businesses, research organizations and sovereign platforms. Governance must therefore become a shared architectural capability.
The next generation of AI will be connected not only through networks, but through governance.
Institutional ecosystems require common governance principles while preserving organizational autonomy and technological diversity.
2. Fundamental Capabilities
Capability Purpose
Shared policies Coordinate governance across organizations.
Interoperable trust Enable cooperation without centralized control.
Distributed audit Provide verifiable accountability across ecosystems.
Policy federation Respect local autonomy while ensuring global coherence.
Continuous learning Improve governance through accumulated evidence.
3. Conceptual Evolution
Independent AI Systems
│
Federated Governance
│
Institutional Cooperation
│
Trusted AI Ecosystems
4. Long-Term Perspective
Future governance architectures should allow institutions to cooperate while preserving sovereignty, transparency and accountability. Governance becomes infrastructure for collective intelligence rather than an operational constraint.
Institutional trust will increasingly depend on governance architecture quality as much as AI model quality.
5. Transition
The next section examines emerging governance paradigms and the long-term evolution toward policy-native AI infrastructure.
Chapter 06.03 — Policy-Native AI Infrastructure
Purpose. Explore an architectural paradigm in which governance policies become native AI infrastructure components rather than external constraints applied after deployment.
1. From Policy-Aware to Policy-Native
Many current AI systems are policy-aware: governance is added through gateways, filters or external services. A policy-native architecture integrates governance into the operational fabric from the start.
The most trustworthy AI infrastructures will not apply policy afterward; they will be designed around it from the outset.
RA-153.1-2 illustrates this transition by treating governance as a first-class architectural capability rather than an operational accessory.
2. Foundational Characteristics
Characteristic Architectural consequence
Policy by design Governance requirements shape system architecture.
Native explainability Every decision is explainable by construction.
Continuous auditability Evidence is produced throughout execution.
Adaptive governance Policies evolve without redesigning core systems.
Institutional portability Governance can move across infrastructures.
3. Conceptual Architecture
Institutional Intention
│
Governance Policies
│
Decision Orchestration
│
AI Services
│
Operational Evidence
4. Long-Term Implications
Policy-native infrastructure could enable interoperable public services, sovereign AI platforms and regulated industrial ecosystems where governance becomes a reusable architectural layer shared across institutions.
Policy-native architectures transform governance from a compliance burden into institutional infrastructure.
5. Transition
The next section examines governance as an emerging engineering discipline for trustworthy AI ecosystems.
Chapter 06.04 — Governance as an Engineering Discipline
Purpose. Argue that AI governance should evolve into a formal engineering discipline supported by reference architectures, measurable methods, reusable policy patterns and reproducible practices.
1. From Compliance to Engineering
Governance has often been treated as documentation, regulation or organizational oversight. Future AI ecosystems require governance to become an engineering activity with explicit design principles, implementation methods and verification protocols.
Designing trustworthy AI requires designing trustworthy governance.
A governance discipline complements software engineering rather than replacing it. It defines how institutional intention is translated into operational behavior.
2. Pillars of Governance Engineering
Pillar Purpose
Reference architectures Provide reusable structural patterns.
Policy engineering Specify and maintain machine-readable governance.
Governance metrics Objectively measure institutional quality.
Verification & audit Produce verifiable governance evidence.
Continuous improvement Evolve governance through operational feedback.
3. Engineering Lifecycle
Institutional Intention │ Architecture │ Policy Design │ Implementation │ Evaluation │ Continuous Improvement
4. Toward a Scientific Field
The long-term objective is a shared body of knowledge including standards, benchmark suites, policy languages, design patterns and educational curricula dedicated to governance engineering.
Governance engineering could become as fundamental to AI as software engineering became to computing.
5. Transition
The next section presents WP006’s general conclusion and summarizes RA-153.1-2’s architectural contributions.
General Conclusion
This working paper has proposed RA-153.1-2 as a governance reference architecture for sovereign, interoperable, policy-driven AI infrastructure. Rather than introducing another AI model or orchestration framework, RA-153.1-2 focuses on the architectural layer translating institutional intention into governed operational decisions.
Main Contributions
Contribution Description
Architectural positioning Governance as an independent architectural layer.
Reference Architecture Policy Engine, Decision Router and Observability as core components.
Implementation framework Incremental adoption, interoperability and modular governance.
Evaluation framework Benchmarks, scoring methods and reproducibility protocols.
Research vision Governance engineering as an emerging scientific discipline.
WP006’s central proposal is that trustworthy AI ecosystems require trustworthy governance architectures designed with the same rigor as software and infrastructure.
A Paradigm Shift
AI evolution is no longer defined solely by larger models or faster hardware. It increasingly depends on institutions’ ability to govern heterogeneous AI ecosystems transparently, explainably and auditably.
The future of AI will depend not only on intelligence, but on the quality of the governance architectures organizing that intelligence.
Future Work
The concepts introduced in this paper invite future work on policy languages, governance standards, benchmark suites, interoperability specifications and open-source reference implementations. These developments could contribute to a shared body of knowledge for governance engineering.
RA-153.1-2 is presented not as a final solution, but as a foundation for collaborative research on AI ecosystem governance.
Outlook
The appendices collect definitions, examples, diagrams and protocols; PGBS and certain models remain proposed.
Part VIII — Appendices
Appendix — Primary Sources for the v1.3 State-of-the-Art Update
Sources consulted and reviewed for the update through 12 August 2026. This list complements the references already present in the preceding chapters.
- When to Reason: Semantic Router for vLLM
- From Inference Routing to Agent Orchestration: Declarative Policy Compilation with Cross-Layer Verification
- Select-then-Solve: Paradigm Routing as Inference-Time Optimization for LLM Agents
- Governed Reasoning for Institutional AI
- Context Kubernetes
- From Craft to Kernel / Arbiter-K
- MetaCogAgent
- Intent-Governed Tool Authorization for AI Agents (IGAC)
- Proof-Carrying Agent Actions (PCAA)
- CAVA
- Proof of Execution
- Hardware-rooted attestation for AI-agent evidence
- A2A Protocol Specification
- MCP Specification 2026-07-28 — Tools
- Microsoft Agent Governance Toolkit
- OpenFGA — Authorization for Agents
- OpenID Foundation — AuthZEN / agent era
Appendix A — RA-153.1-2 Reference Glossary
This glossary summarizes the main concepts introduced throughout WP006. It aims to provide a shared vocabulary for researchers, architects, institutions and implementers.
Term Definition
Governance Architecture Architectural layer responsible for translating institutional intent into operational decisions.
Policy Engine Component evaluating governance policies before execution.
Decision Router Mechanism selecting execution paths according to governance policies.
Institutional Intent High-level objectives, constraints and responsibilities defined by an organization.
Policy Package Versioned collection of governance rules applicable to a deployment.
Governance Evidence Traceable information supporting audit and accountability.
Policy-Native Infrastructure Infrastructure in which governance is integrated by design rather than added afterward.
Governance Engineering Engineering discipline dedicated to designing, implementing, validating and improving governance architectures.
Sovereign AI AI infrastructure operating under explicit institutional, legal and territorial control.
Governance Benchmark Reproducible scenario used to evaluate governance quality independently of AI model performance.
Conceptual Relationship
Institutional Intent │ Governance Policies │ Decision Router │ AI Execution │ Governance Evidence │ Continuous Improvement
A shared vocabulary is a prerequisite for a shared engineering discipline.
Appendix B — RA-153.1-2 Reference Architecture Diagrams
This appendix consolidates the main conceptual diagrams used throughout the working paper into a single reference section.
B.1 Overall Architecture
Institutional Intent
│
▼
Policy Repository
│
▼
Policy Engine
│
▼
Decision Router
│
┌───────┼────────┐
▼ ▼ ▼
Local Models Cloud Models Specialized AI Services
│
▼
Governance Evidence
│
▼
Observability & Audit
B.2 Governance Lifecycle
Institutional Intent
│
Policy Design
│
Policy Validation
│
Operational Routing
│
Execution
│
Evidence Collection
│
Evaluation
│
Continuous Improvement
B.3 Evaluation Loop
Scenario │ Policy Evaluation │ Routing Decision │ Execution │ Audit Collection │ Governance Score │ Architectural Refinement
B.4 Long-Term Vision
Independent AI Systems
│
Federated Governance
│
Institutional Cooperation
│
Trusted AI Ecosystems
│
Policy-Native Infrastructure
Reference diagrams provide a common architectural language for implementation, evaluation and future standardization.
Appendix C — Policy Pack Examples
This appendix illustrates how governance policies can be represented as versioned, machine-readable policy packs using the schema defined in Chapter 05.04 (Reproducibility Protocols). The examples are illustrative and technology-neutral.
C.1 Policy Pack Structure
{
"id": "PP-2026-014",
"version": "1.0.0",
"author": "Example Institution — AI Governance Office",
"scope": "Institutional Governance Baseline",
"approval_status": "approved",
"approved_by": "AI Governance Committee",
"effective_date": "2026-01-01",
"superseded_by": null,
"rules": [
{ "rule_id": "POL-001-R1", "condition": "data.classification == 'sensitive'", "expected_action":
"route_to_local_models", "rationale": "see C.2 — Data Sovereignty" },
{ "rule_id": "POL-002-R1", "condition": "provider.certified == true and confidence >= threshold",
"expected_action": "prefer_certified_provider", "rationale": "see C.3 — Model Selection" },
{ "rule_id": "POL-003-R1", "condition": "decision.impact == 'high'", "expected_action":
"require_human_approval", "rationale": "see C.4 — Human Approval" },
{ "rule_id": "POL-004-R1", "condition": "always", "expected_action": "record_immutable_evidence", "rationale":
"see C.5 — Audit" }
]
}
C.2 Data Sovereignty Policy
{
"rule_id": "POL-001-R1",
"condition": "data.classification == 'sensitive' and data.jurisdiction not in approved_jurisdictions",
"expected_action": "route_to_local_models",
"rationale": "Sensitive data must remain within approved jurisdictions."
}
C.3 Model Selection Policy
{
"rule_id": "POL-002-R1",
"condition": "provider.certified == true and confidence >= threshold",
"expected_action": "prefer_certified_provider",
"fallback": "local_inference",
"rationale": "Prefer certified providers when confidence exceeds the threshold; otherwise fall back to local inference."
}
C.4 Human Approval Policy
{
"rule_id": "POL-003-R1",
"condition": "decision.impact == 'high'",
"expected_action": "require_human_approval",
"workflow": "approval_required",
"rationale": "High-impact decisions require explicit human approval."
}
C.5 Audit Policy
{
"rule_id": "POL-004-R1",
"condition": "always",
"expected_action": "record_immutable_evidence",
"rationale": "Every routing decision produces immutable governance evidence."
}
Policy packs separate institutional intention from implementation technology, enabling portability, transparency and continuous governance evolution.
Appendix D — RA-153.1-2 Policy Governance Benchmark Suite (PGBS)
PGBS is a proposed reference suite intended to make governance qualities comparable. It is not
presented as an established benchmark or a standard. Its scientific value will depend on its
implementation, published test datasets and independent replications.
This appendix proposes an open benchmark suite dedicated to evaluating governance architectures independently of AI model performance.
PROPOSED PGBS-01 to PGBS-05 directly correspond to the five dimensions of the Composite Governance Score defined in Chapter 05.03 (Policy Compliance, Explainability, Audit Integrity, Sovereignty, Adaptability) and use the same normalization and weights. PGBS-06 (Operational Resilience) is an additional indicator not currently included in this composite score; it is tracked and reported separately rather than incorporated into the weighted 0–1 sum, because resilience under failure conditions is not yet part of the governance priority ordering argued in Chapter 05.03. A future revision could extend the composite formula to six dimensions if resilience is considered to warrant equal status.
D.1 Objectives
Evaluate governance quality. Support reproducible experimentation. Compare heterogeneous governance architectures. Encourage open scientific collaboration.
D.2 Benchmark Categories
Benchmark Purpose Main Metric
PGBS-01 Policy Compliance Compliance Rate
PGBS-02 Decision Explainability Evidence Completeness
PGBS-03 Audit Integrity Trace Coverage
PGBS-04 Sovereignty Routing Jurisdictional Compliance
PGBS-05 Adaptive Governance Policy-Update Success
PGBS-06 Operational Resilience Governed Recovery
D.3 Standard Evaluation Workflow
Reference Scenario
│
Policy Package
│
Execution Context
│
Governance Decision
│
Evidence Collection
│
Benchmark Score
│
Comparative Report
D.4 Benchmark Deliverables
Scenario specification Reference policy package Expected governance outcome Audit dataset Scoring protocol Reference implementation (optional)
D.5 Long-Term Vision
The PGBS initiative aims to establish an open, reusable benchmark ecosystem supporting research, institutional procurement and governance engineering.
Benchmarking governance creates comparable evidence for institutional trust.
Appendix E — Governance Design Patterns
This appendix introduces reusable architectural patterns intended to help designers implement governance capabilities consistently across heterogeneous AI infrastructure.
E.1 Purpose
Design patterns capture recurring governance solutions independently of a specific implementation technology.
E.2 Reference Patterns
Pattern Problem Solution
Policy Gateway Execution requests require policy validation. Evaluate governance policies before invoking any AI service.
Federated Policy Multiple institutions maintain independent rules. Combine local autonomy with shared governance principles.
Evidence First Decisions must remain auditable. Generate governance evidence as a native execution artifact.
Human Escalation High-impact decisions require oversight. Route sensitive cases to explicit human-approval workflows.
Adaptive Policy Evolution Policies evolve over time. Version governance packs independently of execution systems.
E.3 Pattern Relationships
Institutional Intent
│
Policy Gateway
│
Decision Router
│
Evidence First
│
Human Escalation
│
Continuous Improvement
E.4 Benefits
Reusable governance architectures. Technology-independent implementation guidance. Improved interoperability. Consistent governance practices. Easier standardization.
Design patterns turn architectural principles into reusable engineering knowledge.
Appendix F — Alignment with Existing Standards
This appendix positions RA-153.1-2 relative to widely recognized AI governance and management frameworks. Rather than replacing existing standards, RA-153.1-2 aims to be an architectural layer capable of operationalizing their governance objectives.
PROPOSED Comparison methodology. As in the state-of-the-art review (Chapter 02.01, Section 5), the positioning below is conceptual: it maps RA-153.1-2’s proposed design objectives to the publicly documented scope of each standard/framework (see the sources cited in Chapter 00, Section 6, for NIST AI RMF and the EU AI Act). No formal conformance evaluation or certification process has been conducted.
F.1 Comparative Positioning
Framework Main focus Relationship to RA-153.1-2
NIST AI RMF AI risk management Provides governance objectives that RA-153.1-2 may operationalize through policy-driven orchestration.
ISO/IEC 42001 AI management systems Supports organizational governance; RA-153.1-2 provides architectural implementation patterns.
EU AI Act Regulatory compliance Policies can encode regulatory obligations and
routing constraints.
Model Context Protocol (MCP) Interoperable access to tools and context Can provide an execution interface beneath governance.
Cloud & hybrid platforms Execution infrastructure Remain interchangeable under governance oversight.
F.2 Conceptual Layering
Institutional Objectives
│
Regulations & Standards
│
RA-153.1-2 Governance
│
Execution Platforms
│
AI Services
F.3 Complementarity
Standards define principles and obligations. Policies translate principles into executable governance. RA-153.1-2 coordinates operational decisions. Execution platforms supply AI capabilities.
Standards establish expectations; governance architectures turn them into operational practice.
F.4 Outlook
Future versions may include formal mappings, conformance profiles and reference policy libraries aligned with international standards to facilitate adoption across public and private institutions.
F.5 — 2026 Front: Emerging Agent Standards and Mechanisms
Microsoft Agent Governance Toolkit — runtime governance, policy enforcement, identity, audit. OpenFGA — agents as principals, permissions and authorization relations. OpenID AuthZEN — standardized authorization-decision interface and agent/MCP profiles. PCAA — action certificates, approvals, receipts and portable evidence. CAVA — action canonicalization and cross-runtime attestation. IETF RATS / hardware attestation — evidence and appraisal of platform state.
F.6 — Composition Principle
PROPOSED. RA-153.1-2 should remain composable with these specialized mechanisms rather than attempt to reproduce them. Its own responsibility remains governed orchestration of the passage from intention to execution, including deciding that no passage should occur.
Appendix H — LCZ-ZS1 License
This Working Paper is part of the ZEON Commons.
LCZ-ZS1 defines the publication framework adopted by ZEON Systems for its commons. Its purpose is to preserve integrity, transmission and non-capture of the Commun ZEON while encouraging exploration, adaptation and reciprocal sharing.
About this reproduction. The LCZ-ZS1 License is published and maintained by ZEON Systems (an association under French Law of 1901). Its official, canonical text is in French, at the URL given at the end of this appendix. The text below is an English translation provided for the convenience of readers of this Working Paper; it neither rewrites nor reinterprets the license and preserves its canonical expressions untranslated. In the event of any discrepancy, the canonical French text prevails.
H.1 Why ZEON Systems Exists
Every living work needs a space in which what has been created can be preserved, shared, transmitted and extended without being captured. ZEON Systems performs this role as steward of the commons. The association does not seek to close access to ZEON resources. It seeks to ensure that their circulation remains faithful to their spirit: developing agency, cooperation, relational sovereignty and the robustness of living systems.
ZEON Systems protects the common resources enabling the ZEON ecosystem to be transmitted and grow: foundational texts, ZEON Keys, architectures, reference frameworks, protocols, licenses, practices, public pages, discernment mechanisms and digital resources. These are not conceived as private property. They form a living heritage intended for exploration, adaptation and extension within a non-capture framework.
H.2 ZEON Systems’ Four Missions
Mission Description
Preserve Conserve the works, texts, models and architectures constituting ZEON’s living heritage.
Transmit Make these resources accessible to those seeking to understand, learn, experiment or contribute.
Protect Prevent exclusive capture of the commons while supporting its circulation, adaptation and enrichment.
Federate Welcome those seeking to contribute sustainably to building and protecting the ZEON commons.
H.3 The LCZ-ZS1 License
LCZ-ZS1 governs the use, sharing and development of ZEON tools, texts and mechanisms. Its intention is simple: allow meaning to circulate while protecting the ZEON architecture’s integrity—“protéger la circulation du sens”.
1. Free exploration. ZEON tools and texts may be freely used to explore meaning, individually or collectively.
2. Attribution. Any public use must mention: ZEON · Licence LCZ-ZS1 · ZEON Systems.
3. Reciprocal sharing. Any adaptation, extension or development derived from ZEON must remain under the LCZ-ZS1 — ZEON Systems license.
4. Non-capture. Elements of the ZEON project may not be exclusively appropriated, patented or incorporated into a closed system that prevents their circulation.
5. Integrity. ZEON texts, archetypes, mechanisms and tools may be shared or extended provided that their spirit is not altered without clearly stating this.
6. Spirit of the license. The LCZ-ZS1 License protects the circulation of meaning and the integrity of the ZEON architecture.
The LCZ-ZS1 License does not seek to prevent use. It seeks to prevent capture. It allows exploration, transmission, adaptation and development while requiring derived resources to remain within a framework of reciprocal sharing and non-capture — “relier sans capturer.”
H.4 Joining ZEON Systems
Joining ZEON Systems does not mean joining a company. It means contributing to preservation of a living commons. Members participate in protecting, enriching and transmitting ZEON ecosystem resources so the commons remains open, living and accessible to future generations.
A living work is not simply owned. It is stewarded, transmitted and cultivated.
H.5 Canonical Reference
Official LCZ-ZS1 License https://zeons.org/zeon/licence.html
This page is the canonical LCZ-ZS1 reference. In future revisions, the canonical
online version prevails.
Canonical expressions preserved throughout this appendix: LCZ-ZS1 · Commun ZEON · Relier sans capturer · Protéger la circulation du sens · Non-capture.
Working Paper 006 v1.1 · Master Edition · Part VIII — Annexes A–H WP006 v1.1 Master Edition · Parts I–VIII