Federated from workspace · PRD-000 · zaixos-company-platform/docs/technical/ADR-001-agent-operations-center.md Do not edit canonical truth here — update the source repo, then re-run npm run docs:sync.

---

ADR-001: Enterprise Agent Operations Center

Status: Accepted
Date: 2026-07-05
Repository: PRD-000 (zaixos-company-platform)
Module: Integration

Context

ZAIXOS operates multiple AI agents across products (PRD-000, PRD-001). Runtime logic lives in PL-003, PL-004, and PL-006. AI engineers need a single engineering console to monitor agents, capabilities, benchmarks, datasets, recommendations, acceptance runs, and release candidates without modifying runtime architecture.

Decision

Implement the Enterprise Agent Operations Center as a presentation-only control plane in the Integration module under Filament navigation group AI Engineering.

Architecture constraints

1. No new platform (not PL-007) — extend existing contracts only.
2. No runtime duplication — Filament pages delegate to read adapters.
3. No business logic in Filament — mount() injects adapters and assigns public properties only.
4. Cross-product data federation — AgentOperationsFederationReadContract (PL-003) over JSON export bundles from PRD-001; legacy filesystem paths remain as fallback.

Adapter map

Surface	Authority
Overview	PL-006 + PL-004 + benchmark/learning read
Agents	Config registry + PL-006 persona metrics
Capabilities	CapabilityRegistryContract + PL-006
Observability	PL-006 trace/replay contracts
Learning Dataset	AgentLearningDatasetReadContract → AgentOperationsFederationReadContract
Benchmark	AgentBenchmarkReadContract → AgentOperationsFederationReadContract
Regression	Benchmark read compare
Acceptance Lab	EnterpriseAiAcceptanceLabContract
Recommendations	ClosedLoopOrchestrationContract
Release Center	PL-004 control plane + version config
Versions	Config + PL-004 recent versions
Governance	Static ZEP compliance metadata

Security

• Filament panel requires authentication (->login() + Authenticate middleware).
• /internal/ai-observability/* routes require auth middleware.
• AgentOperationsAuthorization supports optional email allowlist via AGENT_OPS_ALLOWED_EMAILS.

Consequences

Positive

• Single engineering console for all ZAIXOS AI systems.
• Runtime platforms remain unchanged.
• Clear adapter boundary for future shared read contracts.

Negative / follow-ups

• Learning/benchmark UI syncs via ai:agent-ops:export (PRD-001) + ai:agent-ops:sync (PRD-000); no live DB federation yet.
• Filament login requires password users; magic-link-only Identity flow may need engineering user seeding.
• Approval actions in Release Center remain read-only until explicit approval workflow phase.

Alternatives rejected

Alternative	Reason
New PL-007 platform	Violates additive-only ZEP policy
Build UI in PRD-001	Wrong audience — clinic staff vs AI engineers
Duplicate benchmark/learning services in PRD-000	Violates no-duplication rule