V1 · Enterprise Architecture Bundle

Eighteen platforms.
Six golden layers..

The canonical Innotel Platform Stack: strict single-responsibility architecture where Cerulean runs the shared identity and secrets plane — Authentik at auth.cerulean.innotel.us (one login for every platform) and Cerulean Vault (KV v2) for every credential — and owns trust; ONYX owns storage, Magnate owns revenue, NPM Edge owns the edge, and every other platform is a business function that consumes them. No platform duplicates another's responsibility, and any login goes through Cerulean.

Get started Docs

$ git clone https://github.com/innotelinc/innotel-platform-stack.git && cd innotel-platform-stack && ./stack.sh download all

18 platformsidentity → business functions

6 golden layersIdentity · Secrets · Trust · Storage · Revenue · Edge

1 ruleno duplicated responsibility

18 reposeach aligned with owns/consumes docs

Single responsibility, end to end.

Each platform has exactly one primary responsibility — documented, diagrammed and enforced per repo.

Golden rules

Authentik = Identity · Cerulean Vault = Secrets · Cerulean = Trust · ONYX = Storage · Magnate = Revenue · NPM Edge = Edge. All others = business functions.

Ownership matrix

Every platform's owns / provides / consumes / does-not-own, in one place.

Dependency graph

Who consumes whom — and what each layer provides to the ecosystem.

Integration flows

How identity, secrets, trust, revenue and edge flow through every platform.

Edge flow

NPM Edge fronts every public host — routing and TLS termination at the edge, with certificates from Cerulean's trust lifecycle.

Deployment order

The correct bring-up sequence, from identity to business platforms.

Security boundaries

What each layer must never own — enforced at the doc and repo level.

The layers of the ecosystem.

Six foundation layers, nine business platforms, the agent layer, the factory layer and the video layer — each with its own repo and stack doc.

Foundation layers

Cerulean (Auth & Trust) hosts Authentik (auth.cerulean.innotel.us) and Cerulean Vault (HashiCorp Vault, KV v2) — the single identity and secrets plane; ONYX (StorageOps), Magnate (RevenueOps), NPM Edge (EdgeOps). Every platform's auth.<platform>.innotel.us alias fronts the same Cerulean Authentik — SSO everywhere, one identity.

Business platforms

Monarch (MediaOps), Zeus (VoiceOps), Oasis (MailOps), Signara (DocumentOps), Rizz Aura (CommunityOps), AthenIQ (LearningOps), Atlas (CodeOps), Distro (BuilderOps), PLUTUS (VideoOps).

Agent layer

Capstone (AgentOps) — voice AI agents over Zeus telephony.

Video layer

PLUTUS (VideoOps) — video ingestion, transcoding and VideoOps delivery over OmniRoute + NPM Edge.

The bundle

Matrix, diagrams, integration flows, deployment order, security boundaries.

# the six golden rules
$ cat README.md
Authentik        = Identity
Cerulean Vault   = Secrets
Cerulean         = Trust
ONYX             = Storage
Magnate          = Revenue
NPM Edge         = Edge
All others       = Business Functions

The eighteen platforms.

Each platform ships its own repo and docs/stack.md, all aligned to this bundle.

Roadmap.

V1 shipped across all repos; ecosystem convergence work is tracked here.

V1 "Bundle"

Canonical architecture bundle + per-repo stack docs + Cerulean Vault (SecretOps) rollout.

done

V1.1 "Convergence"

Capstone ↔ Zeus: agents as a Zeus add-on, mirrored platform structure.

V2 "RFC"

RFC-driven evolution of every boundary in this document.

later

Eighteen platforms.Six golden layers..