Platform · Architecture

The decision layer, for CTOs and CIOs.

A technology-agnostic layer that sits on top of every application you run — ERP, MES, EHR, TMS, data platforms and models — on any cloud or on-prem.

Updated 3 min readBy Karna Shukla · Yellowfirst
Reference architecture

Eight layers. Any cloud.

Tap a layer to see what it does and the technology it uses. Switch the deployment model to see where it runs.

Technology agnostic

Sits on top of what you already run.

The decision layer is not another system of record. It reads from and writes back to the platforms, applications and models you already own.

Short answer

A decision intelligence platform is a layer on top of your existing systems, not a replacement for them. It connects to applications and data where they live, builds shared context and a knowledge graph, composes forecasting, optimization, rules and LLM reasoning into explicit decision models, executes approved decisions back into systems of record, and governs every decision with policies, audit and monitoring. It runs in your AWS, Azure or Google Cloud account, on-prem, at the edge or air-gapped.

Design principles CTOs ask about

PrincipleWhat it means in practice
Layer, not replacementNo rip-and-replace. Systems of record stay the source of truth; the layer reads, decides and writes back through their APIs.
Technology agnosticRuns on AWS, Azure, Google Cloud, Oracle Cloud, private cloud, on-prem Kubernetes, edge gateways or air-gapped networks.
Model agnosticAny model through a gateway: Anthropic Claude, OpenAI, Google Gemini, Llama, Mistral, or your own — swapped without rewriting decisions.
Data stays putFederated access and change-data-capture instead of bulk copies. Your keys, your network, your residency rules.
Decisions as codeDecision models are versioned, testable and reviewable like software — in Python, SQL, DMN and YAML policies.
Open standardsREST, GraphQL, OpenTelemetry, OPC UA, MQTT, HL7 FHIR, X12 EDI, OIDC/SAML — no proprietary lock-in.

The eight layers

ExperienceDecision cards, twins, copilots, embedded widgets
Governance & observabilityAutonomy policies, audit, drift, access
ExecutionWrite-back, workflows, events, physical dispatch
Decision modelsOptions, constraints, objectives, thresholds, KPIs
IntelligenceForecasting, optimization, simulation, rules, LLMs
Context & knowledgeSemantic layer, entity resolution, knowledge graph, vectors
ConnectivityConnectors, CDC, streaming, OT and industry protocols
Your systems & infrastructureERP, MES, EHR, TMS, lakes, any cloud or on-prem
Every decision flows up through the layers and back down as action.

How one decision moves through the stack

01SignalA sensor, system or person flags a change
02ContextThe graph assembles what it means
03ScoreModels evaluate each option
04DecideThresholds and authority applied
05ApproveA human approves or policy executes
06Act & learnWrite-back; outcome measured

↺ Each outcome updates the graph and the models.

Deployment models

ModelWhere it runsBest for
Your cloudYour AWS, Azure or Google Cloud account on EKS, AKS or GKE, inside your VPC with your KMS keysMost enterprises; fastest path
On-prem / private cloudYour Kubernetes or OpenShift, VMware or bare metal, with models on your GPUsData-residency or latency constraints
Hybrid + edgeDecision services in cloud, lightweight runners at plants, depots or on robotsManufacturing, logistics, robotics
Air-gappedDisconnected network, offline model packages, signed updatesDefense and regulated environments

Security and compliance

Identity

SSO via SAML or OIDC (Okta, Entra ID, Ping), role- and attribute-based access down to the decision.

Data protection

Encryption in transit and at rest with your keys; PII and PHI minimization per decision.

Audit

Every recommendation, approval, override and write-back logged with its evidence and model versions.

Frameworks

Designed to support SOC 2, ISO 27001, HIPAA, GxP and NIST AI RMF controls in your environment.

APIs and integration surface

SurfaceUse
Decision API (REST / GraphQL)Request a decision, fetch evidence, approve or override from any app
Events (Kafka, Event Hubs, Pub/Sub, EventBridge)Stream signals in and decisions out
Write-back connectorsCreate work orders, holds, reroutes, tasks in systems of record — idempotent and reversible
Embeds & SDKsDecision cards inside SAP Fiori, ServiceNow, Salesforce, Epic or your portal; Python and TypeScript SDKs
TelemetryOpenTelemetry traces and metrics into Datadog, Splunk, Grafana or your SIEM
Key takeaways
  • It is a layer on top of your stack, not a new system of record.
  • Cloud-, data- and model-agnostic by design.
  • Decisions are versioned, audited and governed like code.

Frequently asked questions

Is the decision intelligence platform cloud agnostic?
Yes. It runs in your AWS, Azure or Google Cloud account, on Oracle Cloud or private cloud, on-prem Kubernetes, at the edge, or fully air-gapped.
Do we need to move our data to a new platform?
No. It connects to data where it lives through connectors, federated queries and change-data-capture, and writes decisions back through system APIs.
Which AI models does it support?
Any model through a model gateway — Anthropic Claude, OpenAI GPT, Google Gemini, Meta Llama, Mistral, cloud-hosted versions on Bedrock, Azure OpenAI or Vertex AI, or your own models.
How does it integrate with SAP, Oracle, Salesforce or Epic?
Through standard APIs (OData, REST, JDBC, HL7 FHIR), event streams and embeddable decision cards that appear inside those applications.

Written by Karna Shukla, Founder & CEO of Yellowfirst. Reviewed September 30, 2026. About this site →

Bring one decision.
We’ll show you the layer.

Yellowfirst designs and builds decision intelligence layers on top of the systems you already run — one high-value decision at a time.