Skip to content

C4 — system context

Target

This page describes intended behaviour or structure. No implementation is claimed unless a section is explicitly marked Current implementation or Evidence.

Rewritten 2026-10-09

Replaces the June-2026 flowchart. People are the seven Factory roles (ADR-0015); external systems come from model/externals.yaml; the system boundary is the sixteen platforms of the platform map.

C4Context
    title ConnectSoft AI Factory — system context (level 1)
    Person(requester, "Requester", "Submits runs in a project scope; inspects results")
    Person(reviewer, "Reviewer", "Decides approvals bound to exact versions")
    Person(maintainer, "Asset maintainer", "Authors agents, skills, tools, workflows; publishes with evidence")
    Person(operator, "Operator", "Retries, resumes, cancels; operates generated products")
    Person(admin, "Workspace / Platform admin", "Membership, policy, profiles, editions")
    Person(observer, "Observer", "Read-only audit and stakeholder view")
    System(factory, "ConnectSoft AI Factory", "Organizational AI operating and control platform; Software Factory and Generated SaaS as the first solution pack")
    System_Ext(idp, "Identity Platform", "Authorization Server (sole issuer) + Identity Service (accounts, MFA, memberships, roles)")
    System_Ext(cfg, "Config Platform", "Feature management and configuration (to be developed)")
    System_Ext(scm, "Azure DevOps / GitHub", "Repositories, pull requests, pipelines, artifact feeds")
    System_Ext(models, "Approved model deployments", "OpenAI, Azure OpenAI, Azure AI Inference, Ollama, Anthropic")
    System_Ext(mcp, "External MCP servers and partner agents", "Tools via MCP (ADR-0022); agents via A2A (ADR-0023)")
    System_Ext(otel, "OpenTelemetry backends", "Traces, logs, metrics")
    System_Ext(products, "Generated SaaS products", "Generated by the pack; operated as a managed service (D33)")
    Rel(requester, factory, "Submits, inspects", "Studio / CLI / VS Code")
    Rel(reviewer, factory, "Decides approvals")
    Rel(maintainer, factory, "Authors and publishes assets")
    Rel(operator, factory, "Recovers runs, operates fleet")
    Rel(admin, factory, "Administers scope, policy, profiles")
    Rel(observer, factory, "Reads")
    Rel(factory, idp, "Validates tokens; reads memberships and roles")
    Rel(factory, cfg, "Reads flags and configuration")
    Rel(factory, scm, "Reads sources; opens PRs; runs pipelines", "connectors (BC-17)")
    Rel(factory, models, "Invokes through the model gateway GW-04")
    Rel(factory, mcp, "Calls tools (GW-05) and partner agents (A2A)")
    Rel(factory, otel, "Exports telemetry (GenAI conventions)")
    Rel(factory, products, "Generates, deploys, operates")
    UpdateLayoutConfig($c4ShapeInRow="3", $c4BoundaryInRow="1")
Hold "Alt" / "Option" to enable pan & zoom

Reading the diagram

  • Every arrow into the Factory carries trusted scope from the Identity Platform; selecting a tenant or project in a client grants nothing (canonical ADR-0100).
  • Model deployments, MCP servers and partner agents are outside the boundary even when ConnectSoft hosts them: the Factory reaches them only through the gateways GW-04 and GW-05 with receipts.
  • Generated products are outputs and, under D33, operated systems; they never depend on the Factory control plane for ordinary business operations.