ARCHTIFICIAL.

00 — ENTERPRISE ARCHITECTURE & AI SECURITY SUITE 4 INSTRUMENTS

Discover, compile, present, and secure enterprise systems.

Four deterministic instruments in one suite: Discro for current-state AST discovery, GridWork for multi-cloud design and SOW scoping, Recitup for 4K walkthroughs, and RedHand for agentic AI runtime security.

Launch Discro Discovery Open GridWork Studio Inspect all 4 instruments↓

SYS.TELEMETRY // DETERMINISTIC COMPILER PIPELINE0 HALLUCINATED NUMBERS

< 5msAST File Parse

M/M/cErlang-C Queue Math

COCOMO IISpecOps SOW & WBS

OWASP Top-10RedHand AI Guard

01 — CORE INSTRUMENTS SELECT TO INSPECT

Start with these

04 INSTRUMENTS · END-TO-END LIFECYCLE

FIG. DISCRO● SELECTED

AST INGESTION · 0 LLM TOKENS

INPUT 01basf-prod.tfstate

INPUT 02bank-cmdb.csv

H1 · Quick Win+$420/mo

H2 · Platform RAG+$1,180/mo

H3 · Agentic Mesh+$2,450/mo

TOGAF ADM PHASE B–DNYGARD ADR

Discro

01 · Discover

TOGAF ADM · ZERO-LLM AST INGEST · 3 HORIZONS

FIG. GRIDWORKSCHEMATIC

TOPOLOGY COMPILER & SOW

Queue Math (M/M/c)P99: 38.4ms

ARB Governance95/100 PASS

GCP$1,140/m

AWS$1,290/m

AZURE$1,250/m

TERRAFORM HCLSPECOPS WBS

GridWork

02 · Design

MULTI-CLOUD COMPILER · M/M/C MATH · SPECOPS SOW

FIG. RECITUPSCHEMATIC

4K 60FPS BROWSER STUDIO

● REC 00:02:1416:9 4K

“In Horizon 2, Cloud Armor and Apigee front the Vertex AI Agent while preserving the on-prem Oracle ledger...”

VOICE TELEPROMPTERON-DEVICE MP4

Recitup

03 · Communicate

4K 60FPS STUDIO · TELEPROMPTER · TRANSCRIPT EDIT

FIG. REDHANDSCHEMATIC

MCP GATEWAY & PASSPORTS

HONEYTOKEN TRIPFROZEN · ≤5s

Bait key blocked + Telegram alert sent

Ed25519 PassportSCOPED ✓

SHA-256 Black BoxVERIFIED ✓

TELEGRAM /FREEZE_ALLMCP TOOL PINNING

RedHand

04 · Secure

AGENT PASSPORTS · MCP GATEWAY · BLACK BOX & HONEYTOKENS

INSTRUMENT INDEX

01 / 04

Discro — Discover

DISCOVER STAGE

Ingests Terraform .tfstate, ServiceNow CMDB .csv exports, and enterprise RFPs deterministically in <5ms (0 LLM tokens). Maps brownfield assets into McKinsey H1, H2, and H3 architecture options with grounded citations and Michael Nygard ADRs.

DELIVERABLES: TOGAF Baseline Inventory · H1/H2/H3 Options Matrix · Consulting Brief (PDF & .md)

OPEN DISCRO

02 — INTERACTIVE WORKBENCH

Everything you need, in one suite.

Each stage hands its deterministic output to the next—from brownfield `.tfstate` to runtime AI firewall.

● DETERMINISTIC GUARANTEE

Identical architecture inputs always compile to byte-identical topologies, FinOps BOMs, M/M/c latency curves, and SpecOps SOW budgets.

01 // DISCRO LIVE PREVIEWINTERACTIVE

EXTRACTED TOGAF BASELINE ASSETS (4)

BigQuery Data Warehouse

DATA_WAREHOUSE

GCP

Internal Oracle Ledger DB

DATABASE

ON_PREM

AWS Marketing S3 Buckets

OBJECT_STORAGE

AWS

SAP S/4HANA Core ERP

ERP_SYSTEM

ON_PREM

ENGINE 01 · DISCRO AST & TOGAF COMPILERREADY

STAGE 01 · DISCOVER

Ingest real infrastructure artifacts. Zero hallucinated baseline assets.

Upload a Terraform .tfstate file, a ServiceNow CMDB .csv export, or an enterprise RFP. Discro's deterministic AST parser inventories every database, warehouse, and ERP in under 5ms and maps 3 McKinsey Horizon options.

DETERMINISTIC AST INPUT -> TOGAF ADM OUTPUT

// Parsed in 3.8ms (0 LLM Tokens)
Input:  tier1-retail-bank-cmdb.csv (4 TOGAF Baseline Assets)
Assets: [BigQuery Warehouse, AWS S3 Buckets, Oracle Core DB, Loan Middleware]
Output: H1 (+$420/mo) | H2 (+$1,180/mo) | H3 (+$2,450/mo) + Nygard ADRs

LAUNCH DISCRO

01 / 04

03 — DETERMINISTIC CAPABILITY CATALOG 22 VERIFIED PRIMITIVES

Engine specifications.

Deterministic current-state inventory and McKinsey Three-Horizons opportunity synthesis grounded in real regulatory and peer citations.

Open Discro Discovery

Zero-LLM Terraform .tfstate AST ParserNEW

INFRASTRUCTURE INGEST+

Parses 60+ AWS, GCP, and Azure Terraform resource types into TOGAF ADM Phase B–D baseline assets in under 5ms with zero LLM token usage.

INVARIANT: 0 LLM Tokens · <5ms

ServiceNow & Enterprise CMDB CSV ParserNEW

BROWNFIELD INVENTORY+

Normalizes raw CMDB tables into typed databases, ERPs, data warehouses, and middleware connectors with automatic industry classification.

INVARIANT: 100% Deterministic

RFP Markdown Requirement ExtractorNEW

TRACEABILITY MATRIX+

Extracts numbered functional, SLA, and compliance requirements (REQ-01..REQ-N) directly from enterprise RFP documents.

INVARIANT: End-to-End RTM

McKinsey Three-Horizons (H1 / H2 / H3) Matrix

STRATEGIC ROADMAP+

Generates three distinct architectural options (Quick Win, Platform Scale, Autonomous Agentic) that reuse existing customer assets.

INVARIANT: H1 · H2 · H3 Topologies

Source Authority & Citation Sanitizer

EVIDENCE INTEGRITY+

Classifies regulatory, cloud vendor, and peer benchmarks by authority tier and strips any unsourced statistical claims.

INVARIANT: Zero Fabricated Claims

Volume I Executive Discovery Dossier (PDF)

CLIENT DELIVERABLE+

Exports a boardroom-ready vector PDF and Markdown brief complete with Michael Nygard ADRs and incremental FinOps OPEX.

INVARIANT: Portrait & Landscape PDF

Security and control layer for AI agents connected via the RedHand MCP Gateway: Ed25519 Agent Passports, Telegram /freeze_all kill switch, Budget Guard, SHA-256 Black Box, Honeytokens, and MCP Tool Pinning.

RedHand Console Open RedHand Overview

Ed25519 Agent Passports & Inline MCP GatewayLIVE

PHASE 1 · IDENTITY & SCOPES+

Registers every agent (n8n, Claude, LangGraph, CrewAI, custom) with owner, backup owner, server/tool read-write scopes, expiry, and 10-minute Ed25519 tokens enforced at the fail-closed AgentWall proxy.

INVARIANT: 10-Min Ed25519 Tokens · Fail-Closed

Kill Switch, Safe Mode & Telegram /freeze_allLIVE

PHASE 2 · INSTANT CONTROL+

Freeze or revoke one agent, toggle organization-wide read-only Safe Mode, or send /freeze_all from Telegram on your phone to stop every connected agent within 5 seconds.

INVARIANT: ≤5s Global Revocation SLO

Budget Guard & Daily Tool-Call CapsLIVE

PHASE 2 · USAGE METERING+

Enforces per-agent and organization-default daily tool-call limits with non-blocking in-memory metering, instant Telegram alerts, and opt-in auto-freeze on breach.

INVARIANT: 0 Hot-Path I/O · Auto-Freeze

SHA-256 Hash-Chained Black Box & DLP CaptureLIVE

PHASE 3 · TAMPER-EVIDENT AUDIT+

Append-only per-organization timeline of every tools/call with one-click SHA-256 chain Verify, JSONL/CSV export, and opt-in 2 KB payload capture that scrubs secrets, emails, cards, and Malaysian NRICs.

INVARIANT: pgcrypto SHA-256 Chain · Verify

Planted Honeytokens & Decoy MCP ToolsNEW

PHASE 3 · ACTIVE DECEPTION+

Issues bait credentials (sk_live_…, AKIA…, passwords stored as SHA-256 digests only) and per-agent decoy tools in tools/list. Any touch is refused before upstream, alerts Telegram in <10s, and freezes the agent.

INVARIANT: <10s Alert · Zero Bait Stored

Bilingual MCP Scanner & SHA-256 Tool PinningNEW

PHASE 4 · RUG-PULL DEFENSE+

Scans pasted manifests or live registered MCP servers for hidden English & Bahasa Malaysia instructions (measured by redhand bench) and pins SHA-256 tool hashes on tools/list to block post-approval rug pulls.

INVARIANT: EN + BM Rules · SHA-256 Tool Pins

04 — HYPERSCALER ROSETTA STONE

Cloud providers.

VENDOR-NEUTRAL BY DESIGN

Compile any architecture once and pivot deterministically between Google Cloud, AWS, and Azure with side-by-side FinOps BOM comparison.

GCP

01 / 03

Google Cloud Platform

Vertex AI · AlloyDB · Cloud Run · Cloud Armor

AWS

02 / 03

Amazon Web Services

Amazon Bedrock · Aurora · ECS Fargate · WAF

AZURE

03 / 03

Microsoft Azure

Azure AI Foundry · Cosmos DB · Container Apps

05 — ARCHITECTURAL RIGORTOGAF ADM · NYGARD ADRS · ERLANG-C · COCOMO II

WHY ARCHTIFICIAL

Deterministic by design.

Generic AI wrappers hallucinate cloud prices, invent compliance controls, and draw unverified boxes. Archtificial separates creative synthesis from mathematical truth—enforcing catalog pricing, queueing math, ARB security rules, and runtime AI guardrails in pure deterministic code.

PORTABLE DELIVERABLESTERRAFORM HCL · DRAW.IO · PDF · SOW · 4K MP4

06 — PRACTICE & ADVISORY ENTERPRISE DELIVERY

Architecture & engineering practice.

Alongside the four software instruments, our principal architects partner with enterprise teams to design, govern, and ship production cloud and AI systems.

PR-01VERTEX AI · BEDROCK · RAG

AI Agents & Retrieval Systems

Design and delivery of enterprise AI agents grounded in internal warehouses and documents, with deterministic tool-call policies and evaluation.