SentinelFleet architecture blueprint

Architecture blueprint

One invoice's path through the gates: ingestion, guardrail, gateway, conductor, memory, ledger, trace. For the architecture itself, switch to the module circuit.

1
Event Ingestion & Input Channels (Pillar UAS)
Incoming documents (PDF invoices, email attachments, scans, API payloads) are accepted over REST endpoints and distributed through an in-process event bus (Pub/Sub-compatible adapter for the Cloud Run deployment).
In-process event bus (Pub/Sub-compatible adapter) connectors (mail-connector) ticket-master
2
Zero-Trust Gateway & Model Armor (Pillar Control)
Every request passes through Model Armor: prompt injection defence, PII masking (IBAN, API keys, credit card numbers) and a Zero-Trust permission check against the permission registry.
lock-master anonymizer Model Armor Guard Principle of Least Privilege (PoLP)
3
Multi-Agent Conductor & Gemini 3.5 Flash Vision (Pillar Control & Conductor)
The Roshambo swarm conductor and the Clutch router delegate subtasks to isolated agents (extractor, auditor, reconciler, dispute communicator), each call passing the Sovereign Gateway.
Gemini 3.5 Flash Vision clutch Router roshambo Swarm coma Lifecycle
4
Memory Bank & Context Injection (Pillar Memory)
MemoryHooker injects the relevant corporate policies (USMC facts & GARDENER retrieval chunks) into the prompts of the sub-agents, and the retrieved context is quoted in the generated dispute letter.
USMC Memory Bank GARDENER keyword-overlap retrieval memory-hooker
5
§ 14 UStG Compliance Audit & Self-Healing Loop (Pillar Domain: OmniLedger)
Valid documents are booked straight into the ledger store (Firestore in production, local JSON store in the demo). On defects (missing VAT ID, arithmetic errors) the agent drafts a correction letter autonomously and hands it to the human-in-the-loop ticket gate.
law-checker (§14 UStG) Self-Healing Vendor Dispute RechnungsSteller Firestore (production) / local JSON store (demo)
6
Observability Mesh & OpenTelemetry Tracing
Every tool call is recorded as a durable span record; Cloud Trace export can also be enabled via ENABLE_CLOUD_TRACE. Loop detectors step in on anomalies.
OpenTelemetry SDK (Cloud Trace optional) system-auditor Circuit Breaker Audit Receipts