Reference architecture
ARCHITECTURE
How we build agentic systems that act on real business data — one orchestrator, specialised engines, explicit human gates and a durable execution layer underneath.
- 3 planesExperience, control and data — separated by contract
- Gate-firstNothing costly or external runs without approval
- Vendor-neutralModels and providers swap without rewriting workflows
Operating model
One brain, two coordinated engines and one measurable execution loop.
You set the goal
“We are launching product X.”
Orchestrator
One assistant, one workspace — plans, routes and explains every step.
Shared business memory
Brand rules · products · customers · performance · approved assets
- Engine A
Decision engine
- Diagnose
- Prioritise
- Test
- Improve
Engine BProduction engine
- Research
- Concept
- References
- Prototype
- Variants
- Channel assets
One task graph
Clear inputs, outputs, owners and completion criteria
Your approval
Direction, assets, spend and release scope
Execution across connected tools
Generate · prepare · publish · update · measure
Measurement & learning
What performed · what changes next
Results feed the next decision and the next creative iteration
Capability map
Work is routed by task through a single entry point, then handled by the engine and skills that own it.
Entry & orchestration
- Single entry point and task routing
- Context assembled from authoritative sources
- Task graphs with completion criteria
Decision engine
- Strategy and priorities
- Funnel and conversion analysis
- Customers, CRM and retention
- Market, trend and competitor research
Production engine
- Launch briefs and production graphs
- Concept, hook and script
- Visual direction and references
- Image, video and voice generation
- Channel-ready copy
Distribution
- Social publishing
- Paid campaigns
- Newsletter and CRM automation
- Website, editorial and SEO
Gates & quality
- Brand and claims review
- Human approval before cost or release
- Usage rights tracked per asset
Operations & learning
- Versioned asset library
- Run status, cost, failures and receipts
- Performance feedback into the next iteration
The assistant is the control surface, not the storage layer. Production assets, secrets, durable jobs and provider integrations live in the backend.
System architecture
Three planes with explicit contracts between them. Workflows are versioned graphs, every stage is durable, and vendors sit behind adapters.
Experience
Where people work
Client
Sets goals, reviews results, approves scope
Private assistant
One entry point, skills and task contracts
Language model
Reasoning, planning and orchestration
Control plane
Where the rules live
MCP / tool gateway
Identity, permissions and domain tools
Application service
Business rules, context assembly, validation
Workflow registry
Versioned task and production graphs
Approval gate
Scope, asset version, cost and release permission
Durable job graph
Idempotent, resumable stages
Workers
Deterministic execution
Provider adapters
Swap models and vendors without changing the contract
Data & providers
Where state and effects live
Relational store
Tasks, catalogue, approvals, versions, lineage, audit log
Object storage
Sources, references, previews and final assets
Business data
Commerce, analytics, advertising and CRM
Generation providers
Image, video and voice
Delivery channels
Draft or release — only after approval
Staged execution
Cheap and reversible first, expensive and external last — with a human gate between them.
Context pack
Product facts, prior results, approved references and current assets.
Versioned plan
Stages, deliverables and an estimated cost.
Human gate
Approve direction and spend
The exact plan version and the cost limit are recorded.
Stage 1
Prototype
Research, prompts and low-cost previews. Outputs, lineage and cost are stored.
Stage 1
Review
Regenerate, adjust or choose a direction.
Human gate
Approve production
Only the selected direction moves on.
Stage 2
Production
Asynchronous jobs for video, variants and channel assets. Provider receipts are kept.
Stage 2
Ready for release
Final assets with versions and evidence.
Human gate
Approve release
Publishing or a campaign action needs explicit permission.
Release
Publish or deliver, with the external receipt or campaign ID.
Outcome
What shipped, what it cost, what performed and what to iterate next.
Job lifecycle
Production is a set of resumable states with explicit review and reconciliation — never one opaque “run” call.
Main path
- DRAFT Brief and required context complete
- VALIDATED Run cheap, reversible stages
- PROTOTYPING Previews stored and QA-checked
- REVIEW_REQUIRED Direction selected
- APPROVED_FOR_PRODUCTION Exact versions and cost limit recorded
- PRODUCTION_QUEUED Worker lease acquired
- PRODUCTION_RUNNING Outputs confirmed and QA passed
- READY_FOR_RELEASE Authorised external action confirmed
- RELEASED Performance window available
- MEASURED Next iteration or a new hypothesis
Review, failure and reconciliation
- REVIEW_REQUIRED→PROTOTYPINGRegenerate or adjust
- PRODUCTION_RUNNING→FAILEDConfirmed failure
- PRODUCTION_RUNNING→PENDING_RECONCILIATIONProvider-side effect unknown
- PENDING_RECONCILIATION→READY_FOR_RELEASEResult confirmed
- PENDING_RECONCILIATION→FAILEDNo result confirmed
- READY_FOR_RELEASE→ARCHIVEDAsset kept without release
Production pipeline
A staged graph from brief to performance signal. Winners get multiplied — not everything.
Brief
Product · audience · objective · approved claims
Research
Current facts and asset inventory
Concept & script
Hook · story · offer angle
Visual references
Style rules and scene constraints
Prototype stills
Low-cost generation first
Review gate
Quality · brand fit · product fidelity
Enhancement
Upscale · retouch · product placement
Motion & voice
Video · lip sync · voice
Controlled variants
Audience · format · script
Channel package
Social · ads · CRM · website
Performance signals
Fatigue · conversion · winners
- Revise Review gate → Concept & script
- Iterate on winners Performance signals → Brief
Design principles
The rules every system we deliver is built on.
Gates before cost
Previews and approvals come before paid generation, spend or anything that leaves the system.
Provider independence
Model and vendor APIs sit behind adapters. The workflow contract does not change when a provider does.
Durable, idempotent jobs
Every stage can be retried or resumed without duplicating work, cost or side effects.
Lineage and audit
Every asset knows its sources, versions, approvals and cost.
Reconciliation over guessing
When an external effect is uncertain, the system checks and records it — it never assumes.
Measurement closes the loop
Results feed the next decision instead of triggering blind regeneration.
The assistant is the control surface — not the storage layer.
Have a system to build?
Product intake
Talk to us (opens in a new tab)Security: security