Every GCP service, every agent, every data flow — the complete internal architecture of Autonomous Finance inside a single VPC-SC perimeter in europe-west3 with CMEK on all storage.
Layer 1 is the compliance substrate. Every service runs inside the VPC-SC perimeter in europe-west3. Cloud Run v2 hosts the three agent services. Pub/Sub is the event spine — three topics partitioned by agent domain. Firestore holds HITL state under CMEK. BigQuery is the immutable audit trail and feature store output sink.
The boundary is enforced at the Google Cloud project level, not at the application layer. Workload Identity Federation eliminates long-lived service account keys. Secret Manager rotates all external credentials on a cadence aligned to client security policy.
Vertex AI Feature Store serves features to all three inference endpoints from three feature groups: IC, treasury, and invoice. Online serving for sub-100ms agent queries; offline for weekly retraining batch jobs.
Each inference call produces a SHAP explanation vector — not just a prediction. The explanation is logged with the audit trail and surfaced to the HITL UI so controllers understand why a flag was raised. Retraining pipelines are scheduled by GreenOps (the AE Platform's carbon-aware compute scheduler) for off-peak hours to minimise carbon footprint and Scope 3 ML emissions.
Three LangGraph agents run as independent Cloud Run services. The A2A protocol handles cross-agent communication — no direct HTTP calls between agents, all coordination through typed protocol messages. The HITL State Manager intercepts every high-risk action before execution.
The SAP Write Guard is the terminal enforcement point for the IC agent: no journal post proceeds without a valid hitl_id from an approved HITL record in Firestore. This is structural, not configurable — the write path requires the token.
Layer 4 surfaces the right information to the right person. The Group Controller works through a HITL queue UI that shows pending approvals with SHAP explanations. The Treasury Manager has a live dashboard with cash positions, FX deltas, and 30-day forecasts with confidence intervals.
The AP Lead receives a prioritised exception inbox ordered by the classifier's priority score. The CFO has a read-only aggregated view that feeds into the AE Strategy Dashboard — the executive read layer across all AE platform modules.
| Service / Component | GCP Product | Layer | Purpose | Scale Config |
|---|---|---|---|---|
| IC Reconciliation Agent | Cloud Run v2 | L3 | LangGraph agent. Fetches IC ledger entries, scores via anomaly detector, routes high-score items to HITL, posts journals to SAP after SAP Write Guard approval. | 2 vCPU · 4GB · min 1 · max 10 instances · concurrency 80 |
| Cash & Treasury Agent | Cloud Run v2 | L3 | LangGraph agent. Ingests banking API position feed, runs cash forecast, monitors FX exposure, sends A2A signals to IC Agent on IC-driven cash deltas. | 2 vCPU · 4GB · min 1 · max 8 instances · concurrency 60 |
| AP Exception Agent | Cloud Run v2 | L3 | LangGraph agent. Polls af-ap-events, classifies exceptions, scores priority 1–10, auto-resolves low-score items, routes high-score to AP Lead inbox. | 2 vCPU · 4GB · min 1 · max 8 instances · concurrency 60 |
| Event Bus — af-ic-events | Cloud Pub/Sub | L1 | IC agent event topic. Carries IC ledger update events, anomaly score events, and settlement confirmation events. Dead-letter after 5 retries with exponential backoff. | Standard tier · message retention 7d · DLQ enabled |
| Event Bus — af-treasury-events | Cloud Pub/Sub | L1 | Treasury agent event topic. Carries cash position snapshots, FX exposure alerts, and forecast updates. A2A bridge topic for IC-to-Treasury signals. | Standard tier · message retention 7d · DLQ enabled |
| Event Bus — af-ap-events | Cloud Pub/Sub | L1 | AP agent event topic. Carries invoice exception events from SAP AP module push and AP Lead resolution actions back to the agent. | Standard tier · message retention 7d · DLQ enabled |
| HITL State Store | Firestore | L1 | Document-per-approval-request. Fields: hitl_id (UUID), agent_id, action_type, risk_class, status (PENDING/APPROVED/REJECTED), approver_id, timestamp, shap_vector_ref. | Native mode · CMEK · Cloud Audit Logs on all operations |
| Audit Trail + Feature Sink | BigQuery | L1 | Immutable append-only audit trail for all agent actions. Feature store online serving snapshot sink. CSRD Scope 3 financed emissions feed table. Partitioned by date, clustered by agent_id. | Partitioned by _PARTITIONDATE · clustered agent_id, action_type |
| Invoice PDFs + Model Artifacts | Cloud Storage | L1 | Two buckets. invoice-landing: AP agent reads PDF bytes for OCR pipeline. model-artifacts: Vertex AI Pipeline writes trained model binaries and evaluation artefacts. | Standard storage · CMEK · Uniform bucket-level access · Versioning ON |
| Secret Manager | Secret Manager | L1 | All SAP BAPI credentials, banking API keys, and SWIFT gateway tokens. Automatic rotation cadence per client security policy (default: 90d). Version history retained for audit. | Automatic rotation · access via WIF · no env-var keys |
| Workload Identity Federation | IAM / WIF | L1 | Service-to-service authentication across all Cloud Run agents and GCP services. No long-lived service account key files. Identity tokens scoped per agent with least-privilege IAM roles. | Short-lived tokens · principle of least privilege · per-agent SA |
| IC Feature Group | Vertex AI Feature Store | L2 | Online feature serving for IC Anomaly Detector. Features: entity_pair_id, net_balance_delta, currency_risk_flag, doc_count_7d, historical_variance. Updated on SAP GL sync events. | Online serving latency <10ms · offline materialization nightly |
| Treasury Feature Group | Vertex AI Feature Store | L2 | Online feature serving for Cash Forecast Model. Features: entity_id, cash_balance, fx_delta_usd, liquidity_ratio, maturity_ladder_30d. Updated on banking API position refresh. | Online serving latency <10ms · offline materialization nightly |
| Invoice Feature Group | Vertex AI Feature Store | L2 | Online feature serving for Invoice Exception Classifier. Features: vendor_id, invoice_amount, days_overdue, exception_type_hist, payment_run_flag. Updated on SAP AP push events. | Online serving latency <10ms · offline materialization nightly |
| IC Anomaly Detector | Vertex AI Endpoint | L2 | Isolation Forest + LSTM hybrid model. Outputs anomaly score 0–1 and SHAP vector (top-3 feature attributions). Score > 0.7 triggers HITL queue. Score logged to BigQuery. | Autoscaling · SLA <100ms P95 · min 1 replica · max 4 |
| Cash Forecast Model | Vertex AI Endpoint | L2 | Temporal Fusion Transformer. Outputs 30-day probabilistic cash forecast with 95% confidence intervals and SHAP temporal attribution. Inputs: treasury feature vector, IC settlement pipeline. | Autoscaling · SLA <100ms P95 · min 1 replica · max 4 |
| Invoice Exception Classifier | Vertex AI Endpoint | L2 | Multi-class exception type classifier + priority regressor. Outputs exception_type (6 classes), priority score 1–10, and SHAP attribution. Low priority (<4) routed to auto-resolution. | Autoscaling · SLA <100ms P95 · min 1 replica · max 4 |
| Retraining Pipeline | Vertex AI Pipelines | L2 | Kubeflow pipeline. Runs weekly. Steps: feature lag validation → training job → hold-out evaluation → model registry promotion → endpoint deployment. GreenOps-scheduled for off-peak carbon budget. | GreenOps schedule hook · weekly cadence · hold-out gate |
| Model Registry | Vertex AI Model Registry | L2 | Semantic versioning for all three models. Model card per version covering training data lineage, evaluation metrics, known limitations. Rollback to any version <5min via endpoint traffic split. | Versioned · model cards · rollback <5min · traffic split |
| HITL State Manager | Cloud Run (internal service) | L3 | Approval router service. Generates hitl_id UUID, writes PENDING record to Firestore, routes to appropriate HITL UI queue (IC / Treasury / AP). Marks APPROVED on controller action. Alerts on SLA breach. | 1 vCPU · 2GB · min 1 · max 4 · SLA alert 4hr |
| SAP Write Guard | Cloud Run (middleware) | L3 | Terminal enforcement for IC journal posts. Intercepts every write call from IC Agent to SAP BAPI. Queries Firestore for hitl_id status. Rejects with 403 if status is PENDING or absent. | 1 vCPU · 1GB · min 1 · stateless · P99 latency <20ms |
| Group Controller HITL UI | Cloud Run (frontend) | L4 | HITL queue interface for Group Controllers. Shows pending approvals with SHAP explanation cards, anomaly score, entity context, and OECD TP documentation link. Approve/reject/annotate actions. | Static SPA · CDN · role-gated IAP · audit-log all actions |
| Treasury Manager Dashboard | Cloud Run (frontend) | L4 | Live treasury dashboard. Entity-level cash positions, FX delta heatmap, 30-day probabilistic forecast chart, liquidity maturity ladder. FX hedge HITL gate above threshold. D+0 latency. | WebSocket push · CDN · role-gated IAP · D+0 position |
| AP Lead Exception Inbox | Cloud Run (frontend) | L4 | Priority-ordered exception inbox. Sorted by classifier priority score descending. SHAP root-cause card per exception. Suggested resolution action. Auto-resolved exceptions in separate feed. | Static SPA · CDN · role-gated IAP · priority sort |
| CFO Read-Only View → AE Dashboard | Cloud Run → AE Platform | L4 | Aggregated executive view. Read-only. Feeds IC reconciliation rate, FX exposure KPI, AP exception resolution rate, and CSRD Scope 3 financed emissions summary into the AE Strategy Dashboard. | Read-only IAP role · no HITL actions · AE API feed |