Layer 1 Front Door (Intake and Approval)

▼
The entry point where all AI projects begin their journey. Think of it as the reception desk that greets, evaluates, and directs new AI initiatives through the proper channels.
i

Power Apps

Request Interface

i

Power Automate

Workflow Engine

i

Risk Assessment Logic

+ Environment Strategy

i

Digital Passport Issuance

Access Certification

Layer 2 Registry (Source of Truth)

▼
The central database that knows everything about every AI project. Like a library catalog that tracks all books, their locations, and who can access them.
i

Dataverse

Business Registry

i

Agent 365

Technical Registry

i

Federation Engine

Sync and Discovery

i

Data Classification

Mapping

Layer 3 Guardrails (Policy and Enforcement)

▼
The security guards and rulebook enforcers. They make sure every AI project follows the rules and can shut things down if something goes wrong.
i

Purview DSPM

for AI

i

MDCA

Cloud App Security

i

Entra ID

Identity Management

i

Kill Switch

Emergency Control

i

Exceptions Workflow

Deviation Handling

i

Quality Gates

Validation Checkpoints

Layer 4 Operations (Edge and Observability)

▼
The monitoring station and operations center. It watches everything happening in real-time and connects AI systems to the tools teams already use.
i

Azure Monitor

Real-time Monitoring

i

APIM Self-Hosted Gateway

API Management

i

Sovereign Sanitizer Pattern

Data Protection

i

Flight Control SDK

Operational Control

i

ITSM Integration

Service Management

Layer 5 FinOps (ROI and Cost)

▼
The finance department for AI. It tracks costs, measures business value, and makes sure every AI project is worth the investment.
i

Azure Cost Management

Financial Tracking

i

Power BI

Analytics Dashboard

i

Value Realization Engine

Anti-Gaming + Confidence

i

ROI Dashboard + Chargeback

Cost Accountability

Sovereign Edge (CN/JP)

Local Execution

APIM Self-Hosted Gateway

Sovereign Sanitizer

PHI Redaction + Local Storage

Telemetry Tiering

Tier A only to HQ (SG)

PHI Never Leaves Country

Data Residency Compliance

Digital Passport Flow

1 Register in Dataverse
2 Risk Tier sets Approval Chain
3 Eval Gates check Quality
4 Issue APIM Key / Status