Enterprise Platform Architecture Specification - A comprehensive, opinionated standard for building production-grade, multi-tenant applications.
The specification itself - 4,800+ lines covering 18 architecture domains. Identity, multi-tenancy, API strategy, AI governance, observability, compliance, disaster recovery, and more. Technology-aware but not technology-bound.
Reference implementation built on FastAPI + Next.js. JWT auth, tenant isolation, shadcn/ui, Docker Compose, LocalStack for AWS emulation - everything wired up and ready to extend.
| Domain | Highlights |
|---|---|
| Identity & Multi-tenancy | Environment-first hierarchy, tenant isolation, RBAC |
| API Strategy | OpenAPI, CloudEvents, MCP-first extensibility |
| AI Governance | Multi-model strategy, cost tracking, A2A architecture |
| Observability | OpenTelemetry, LGTM stack, SLA targets |
| Compliance | HIPAA, GDPR, EU AI Act, ISO/IEC 42001 |
| Operations | ITIL v4 aligned - incident response, change management, DR |
| Security | TLS 1.3, mTLS, AES-256, LangGraph/MCP hardening |
| Developer Experience | One-command setup, hot reload, LocalStack |
Apache 2.0