Architecture

Inside every agent: identity, policy, observability.

The ArqAI Operating Fabric has four layers — workflow intelligence, the governance plane, the integration layer, and the operating loop. This page goes one level deeper: inside the governance plane, every agent we ship runs on the same three runtime guarantees. We build reliability once, deeply, and apply it everywhere — which is why repeat workflows move faster and a new agent never means re-evaluating the foundation from scratch.

The runtime

Three guarantees carry every agent from identity to action.

Scoped, enforced, and observable end to end — this is what the Operating Fabric's governance plane means at the level of a single agent.

01Guarantee 1 · Agent identity

Every agent has a cryptographic identity and a defined set of capabilities.

Before an agent acts, the runtime verifies who it is and what it is permitted to do. Capabilities are scoped to the workflow. Actions are logged with cryptographic provenance. Nothing happens off-policy.

02Guarantee 2 · Runtime policy enforcement

Policies live in the runtime, not in a filter applied after.

Internal policies and the rules that apply to the workflow are compiled into the agent's execution path before it runs. The agent cannot take an action that violates the policies it has been given. Reliability is enforced, not promised.

03Guarantee 3 · Observable retrieval

Every data lookup is logged, governed, and quality-monitored.

When the agent retrieves data, the lookup is logged, the data is policy-checked before access, and retrieval quality is monitored continuously. If quality drifts, the agent corrects.

For engineers

Each layer has technical depth that your principal architect should evaluate directly. Reach out under NDA for control documentation. Read the engineering blog for deep technical posts on each layer.

See the architecture in action.

We can show how your workflow would run on this foundation in your environment.