Reference architecture · Free download

Where an approval and evidence layer fits in your enterprise AI architecture

AI agents are starting to raise orders, release payments and change records. This reference view shows a board, an executive team and a CIO where the "stop and ask a person" step belongs, what evidence to keep, and three ways to place the control point. Vendor-neutral and based on the TOGAF® Standard.

Get the reference architecture
The reference viewFive horizontal bands stacked top to bottom: 1 Business decision, 2 AI agents, 3 Approval and evidence, 4 Systems of record, 5 Assurance and reporting. Each band holds three example building blocks. Band 3 is drawn in ember and slightly wider than the others. An arrow from band 2 into band 3 is labelled proposes; an arrow from band 3 into band 4 is labelled releases; a return arrow from bands 3 and 4 into band 5 is labelled evidence. A faint crossed-out arrow from band 2 directly to band 4 is labelled never direct. A thin vertical bar on the right spans all five bands and is labelled Identity and access, Data governance, Security, Operations.
8 pages, PDF.

What's inside

What's inside

8 pages, PDF. Theory Y's practical interpretation. Not certification, accreditation or legal advice. TOGAF® is a registered trademark of The Open Group.

  1. 01

    Five logical layers from the business decision to assurance and reporting, with the approval and evidence layer in its place between AI agents and your systems of record.

  2. 02

    Six decision points and ten board questions you can put to any AI proposal, internal or vendor, before an agent is allowed to act.

  3. 03

    Three placement patterns (central, per-domain, hybrid inside your perimeter), with how each works across cloud, client-dedicated, on-premises and hybrid deployment.

The reference architecture

Get the reference architecture

We email you a link. Open it, then choose 'Confirm and download' to confirm your address and get the PDF. A work email is preferred.

Take the AI readiness check (free, no sign-up)

Request your download link

We send the link here. Personal webmail addresses are accepted but we ask for a work address.

How we handle your details

Theory Y Technologies Pty Ltd (ABN 88 635 821 822, 69 Addison Road, Warradale SA 5046; info@theory-y.com.au) collects your name, work email, organisation and role and, if you choose, your market, when you request this download.

Why. To email you the confirmation and download link, to understand which roles and organisations use the material, and, only if you tick the box below, to send you occasional Theory Y insights on AI governance and enterprise architecture.

If you do not provide it. Name, email and organisation are required fields; without them the request cannot be submitted and we cannot send the link. Market is optional.

Who else handles it. Your details are stored in our database in Sydney, Australia, operated by our database service provider. The confirmation email, and any insights emails you opt into, are sent through our email delivery provider, which processes the email content (your name, email address and the link) in the United States. Our hosting provider processes the web request and may do so outside Australia. These providers act on our instructions and may not use your details for their own purposes. We do not sell your details or share them with any other organisation, except these providers or where the law requires.

How long. If you do not opt into insights, we de-identify your request 12 months after the download. If you opt in, we keep your details until you unsubscribe, then keep only a one-way code of your email address so we never email you again. Unconfirmed requests are deleted within 7 days.

Our record. We record the time of your request, the version of this notice, and whether and when you ticked the insights box, so we can show your choice was respected.

Your choices. Unsubscribe from insights at any time using the link in every email or by emailing info@theory-y.com.au. You can ask us to access, correct or delete your details, or make a complaint, at info@theory-y.com.au; our privacy notice explains how, and how to contact the Office of the Australian Information Commissioner if you are not satisfied.

Full notice: theory-y.com.au/privacy. Notice version: 2026-10-ra1.

By requesting the download you agree we may send you one email containing your confirmation and download link. That is all, unless you tick the box above. Read our full privacy notice.