CoreDirective reference architecture

five models, one search API, three trust levels; every crossing out of the host drawn with what stands in front of it

AI trustBack to portfolioClick a box for what it is, the controls it holds, and the file that proves it.
Vendor models, outside the host frontier reasoning and classification, embeddings, search; DPA on file for the model and embeddings vendors, terms of service for search Trusted vendor, untrusted network path net-core, guardrails in front of the model calls on host, screened, traced; PII model baked into the image, offline enforced, cannot fetch at runtime net-ai, sealed segment local models for anything that touches raw personal data; reached only over the bridge On host, no route out Host boundary five crossings out, each one drawn Sealed boundary audio never comes back up; only text does prompt up, completion down completion fallback when the cap trips text up, vectors down vectors, DC-4 terms up, results down audio, never leaves text only orange box: data leaves here AI path, screened first fallback, sealed segment human path, closes the loop data at rest, on host trust boundary frontier modelthree reasoning nodes classifierone structured call embeddings1024-dim vectors web searchenrich node only alert payloadDC-1, attacker text token, schemashared secret, typed PII scrubregex before the graph input railNER PII, second pass model egressdaily cap, traced embedchunks, alert queries enrichIoCs and rule name voice noteoperator audio in operatorreads, decides, acts notifychat ID checked human gateHIGH and CRITICAL wait allowlistrecommend only output checksPII, citations, verbs vector storebridge-only Postgres transcripttext out, audio stays local LLMno internet route speech to textno internet route LLM02 LLM01, ASI01 LLM06 LLM10, LLM07 LLM03, ASI02 LLM03, ASI09 LLM09, ASI06
Screenedregex and NER PII before the model; citation guard and verb rewrite after; daily spend cap; every call traced; tags are the OWASP Top 10 for LLM Applications 2026 (LLM) and for Agentic Applications 2026 (ASI)
Crossingsprompt, alert queries, chunks, search terms, notification go out; audio never does; DPA for the model and embeddings vendors, terms of service for search
Humannothing acts on its own; HIGH and CRITICAL wait for a person; the operator closes the loop
Sealedraw personal data stays on a segment with no internet route; the fallback keeps working with the vendor gone