Stores catalog¶
Generated from the architecture model
This page is rendered from model/**/*.yaml by tools/docs_model during mkdocs build. Edit the YAML, not this page; hand-written design lives on the linked service, platform and plane pages.
| Store | Engine / profile | Owner | Residency | RPO / RTO (min) | Encryption | Used by |
|---|---|---|---|---|---|---|
Control plane relational store (control-sql) |
azure-sql / nhibernate-sqlserver | ControlPlaneApi | tenant-region | 15 / 240 | tde-cmk | AgentCardService, AgentRegistryService, ControlPlaneApi, CostUsageService, EnvironmentService, FactoryCommercialService, ProjectService, RunControlService |
Runtime worker durable store (runtime-sql) |
azure-sql / nhibernate-sqlserver | AgentRuntimeWorker | tenant-region | 15 / 240 | tde-cmk | AgentRuntimeService, AgentRuntimeWorker, WorkflowEngineService |
Model access store (model-sql) |
azure-sql / nhibernate-sqlserver | ModelGatewayHost | tenant-region | 15 / 240 | tde-cmk | ComputePoolService, ModelGatewayHost, ModelRouterService |
Tool execution store (tools-sql) |
azure-sql / nhibernate-sqlserver | ToolExecutorHost | tenant-region | 15 / 240 | tde-cmk | McpServerRegistryService, ToolAdapterService, ToolExecutorHost |
Integration store (integration-sql) |
azure-sql / nhibernate-sqlserver | IntegrationHost | tenant-region | 15 / 240 | tde-cmk | ConnectorRegistryService, IntegrationHost, IntegrationService, WebhookGatewayService |
Knowledge metadata store (knowledge-sql) |
azure-sql / nhibernate-sqlserver | KnowledgeHost | tenant-region | 15 / 240 | tde-cmk | ArtifactService, ContextBuilderService, KnowledgeHost, KnowledgeIngestionService, MemoryPromotionService, RepositoryIntelligenceService, VectorMemoryService |
Vector index (vector-index) |
qdrant / vector-qdrant | KnowledgeHost | tenant-region | 60 / 240 | at-rest | KnowledgeHost, VectorMemoryService |
Artifact content store (artifact-blob) |
blob / azure-blob | KnowledgeHost | tenant-region | 60 / 240 | at-rest | AgentRuntimeService, AgentRegistryService, RetentionResidencyService, ReleaseService, ConnectorRegistryService, WebhookGatewayService, ArtifactService, ContextBuilderService, KnowledgeHost, KnowledgeIngestionService, MemoryPromotionService, RepositoryIntelligenceService, FeedbackService, QualityScoreService, IaCProvisioningService, BlueprintService, GenerationRecipeService |
Governance store (governance-sql) |
azure-sql / nhibernate-sqlserver | GovernanceHost | tenant-region | 15 / 240 | tde-cmk | ApprovalPolicyService, AuditService, GovernanceHost, PolicyEngineService, SecretBrokerService |
Immutable audit store (audit-immutable) |
blob / azure-blob-immutable | GovernanceHost | tenant-region | 15 / 240 | at-rest | AuditService, GovernanceHost, PolicyEngineService |
Operations projection store (observability-sql) |
azure-sql / nhibernate-sqlserver | ObservabilityHost | tenant-region | 60 / 240 | tde-cmk | AlertRuleService, DashboardService, FeedbackService, ObservabilityHost, QualityScoreService, SloService |
Data & Event foundations store (foundations-sql) |
azure-sql / nhibernate-sqlserver | DataEventFoundations | tenant-region | 15 / 240 | tde-cmk | DataEventFoundations, EnvelopeRegistryService, RetentionResidencyService, StoreProfileService |
Delivery store (delivery-sql) |
azure-sql / nhibernate-sqlserver | DeliveryHost | tenant-region | 15 / 240 | tde-cmk | DeliveryHost, EnvironmentPromotionService, PipelineExecutionService, ReleaseService |
Runtime Cloud store (runtime-cloud-sql) |
azure-sql / nhibernate-sqlserver | RuntimeCloudHost | tenant-region | 15 / 240 | tde-cmk | ExecutionCapacityService, IaCProvisioningService, RuntimeCloudHost, RuntimeEnvironmentService |
Fleet operations store (fleet-sql) |
azure-sql / nhibernate-sqlserver | FleetOperationsHost | tenant-region | 15 / 240 | tde-cmk | FleetIncidentService, FleetInventoryService, FleetOperationsHost, FleetRolloutService |
Studio store (studio-sql) |
azure-sql / nhibernate-sqlserver | StudioBff | tenant-region | 60 / 240 | tde-cmk | StudioBff, StudioNotificationService |
Marketplace store (marketplace-sql) |
azure-sql / nhibernate-sqlserver | MarketplaceHost | tenant-region | 15 / 240 | tde-cmk | LicenseService, MarketplaceCatalogService, MarketplaceHost |
Template & Library store (templates-sql) |
azure-sql / nhibernate-sqlserver | TemplateCatalogHost | tenant-region | 15 / 240 | tde-cmk | BlueprintService, GenerationRecipeService, TemplateCatalogHost, TemplateRegistryService |
Generated product store (representative) (product-sql) |
azure-sql / nhibernate-sqlserver | GeneratedProductHost | tenant-region | 15 / 240 | tde-cmk | GeneratedProductHost, GeneratedSaasFoundations |
Cache and coordination (cache) |
redis / azure-cache | ControlPlaneApi | tenant-region | 0 / 30 | in-transit | AgentRuntimeWorker, ControlPlaneApi, RunControlService, StudioBff, StudioRealtimeGateway, GovernanceHost, PolicyEngineService, IntegrationHost, WebhookGatewayService, ContextBuilderService, KnowledgeHost, ModelGatewayHost, ModelRouterService, ObservabilityHost, ToolAdapterService, ToolExecutorHost |
Messaging transport (event-transport) |
service-bus / messaging-profile | DataEventFoundations | tenant-region | 0 / 60 | in-transit | — |
Secret store (secrets) |
key-vault / azure-key-vault | SecretBrokerService | tenant-region | 0 / 60 | hsm | GovernanceHost, SecretBrokerService |
- Control plane relational store: Runs, steps, attempts, leases, approvals, releases, projects, usage; outbox in the same database.
- Runtime worker durable store: Attempt journal, checkpoint references, inbox; separate ownership from the control store.
- Model access store: Model profiles read model, deployments with capability evidence, route plans, invocation receipts, compute pools and placements.
- Tool execution store: Tool descriptors read model, invocations and receipts, sandbox leases, MCP server registry.
- Integration store: Connections with credential references and grants, connector descriptors, subscriptions, deliveries and inbound verification records.
- Knowledge metadata store: Sources, documents, chunks metadata, ACL, artifacts, lineage, memory proposals.
- Vector index: Derived embeddings; rebuildable from approved sources (ADR-0013 reference self-hosted profile; Azure AI Search is the managed alternative).
- Artifact content store: Immutable artifact content addressed by hash; logs and reports.
- Governance store: Policies, decisions, approval policy, audit evidence, classification.
- Immutable audit store: Append-only audit evidence retained 7 years, redacted (D31).
- Operations projection store: SLO read models, incidents, evaluation results, FinOps projections.
- Data & Event foundations store: Topic and schema registry, envelope profiles, store profiles and bindings, retention and residency rules, governance orders.
- Delivery store: Change proposals, pipeline runs and typed results, product releases with components and evidence, promotions with gates.
- Runtime Cloud store: Deployment specifications and provisioning receipts, runtime inventories, drift findings and reconciliation proposals, worker pools, quotas and capacity leases.
- Fleet operations store: Operated products and instances, product objectives, rollouts and waves, incidents, on-call records, off-boardings.
- Studio store: Session projections, saved views, notifications and preferences; never factory truth.
- Marketplace store: Listings and dependencies, installations, pricing plans, entitlements, publishers and reviews.
- Template & Library store: Blueprint versions, findings, context maps and domain models; template and library versions with pinned manifests; compatibility entries; generation recipes, module plans and generated-output provenance.
- Generated product store (representative): Each generated product owns its own stores per context (BC-30) and its SaaS foundation tables (BC-31); this row is the representative shape, one instance per product.
- Cache and coordination: Caches, locks and short-lived coordination; never authoritative.
- Messaging transport: Selected per host from the MessagingModel adapters (Orleans outbox/inbox, MassTransit on Azure Service Bus, NServiceBus) per ADR-0012.
- Secret store: Secrets referenced, never copied into manifests or prompts.