Architecture Overview · Enterprise AI Delivery

Cloud-Portable AI Governance Platform — Azure

Cloud adapter deployment of the Advisory AI governance library to Azure — 4 Bicep modules, 7 Cosmos DB containers, unified seed runner, and blue-green policy hot-reload. Zero business logic changed.

0 Logic Lines ChangedAzure · BicepBlue-Green Policy Reload

Click any component to explore it in the full case study.

Input A
Governance Library (Python)
Same library as AWS deployment — 7 Cosmos DB containers mirror 7 DynamoDB tables. Cloud adapter replaces persistence layer only. Business logic untouched.
Python · Cloud-portable
Input B
18 Seed Scripts → Unified Runner
Original deployment had 18 numbered seed scripts run in sequence. Consolidated into single SeedRunner with 4 phases: verify → seed frameworks → seed patterns → optional demo data
18 → 1 scripts unified
Azure Deployment Pipeline — 4 Bicep modules
Module 1
Compute
Azure Functions orchestration layer
›
Module 2
Data
Cosmos DB multi-container setup (7 containers)
›
Module 3
Policy Sync
Git sync manager: clone, pull, change detection, encryption
›
Module 4
Orchestration
Blue-green index swapping (zero-downtime policy hot-reload)
›
Module 5
Blast Radius
SHA-256 manifest audit: presence validation + import resolution
🔵
Blue-Green Policy Updates + Audit Manifests
Policy updates use blue-green index swapping — no downtime during governance library updates. SHA-256 manifests validate completeness. Distributed lock prevents concurrent tenant updates.
Blue-green index swappingSHA-256 audit manifestsDistributed lock (no concurrent updates)3 PBT properties (Hypothesis)Zero-downtime policy reload0 logic lines changed
Output A
Azure-Deployed Governance Platform
Full governance assessment API on Azure — Cosmos DB persistence, Managed Identity auth, same 15 API endpoints. Git webhook triggers live policy updates.
4 Bicep modules · 7 Cosmos containers
Output B
Policy Hot-Reload System
Git webhook → HMAC verification → change detection → blue-green swap → tenant notification. 5-minute replay window. Zero service interruption.
Webhook · Blue-green · Zero downtime
4
Bicep modules
7
Cosmos containers
18→1
Seed scripts unified
0
Logic lines changed
StackAzure BicepAzure FunctionsCosmos DBGitHub ActionsHypothesis PBTGit Sync ManagerHMAC Webhook Validation