{ "elements": [ { "id": "N_REGULATOR", "label": "Market Surveillance Authorities", "type": "Governance", "description": "EU AI Office, FTC, DPAs, Courts", "tags": [ "governance" ], "shape": "hexagon", "Cluster": "0. Jurisdictional & Regulatory Sphere", "Cluster ID": "cluster_regulatory", "Cardinality": "10^1 Jurisdictional Bodies", "Enforcement Powers": "Fines up to 7% global turnover, stop orders", "VSM Tier": "System 5 (External Statutory Meta-System)", "NIST Function": "GOVERN" }, { "id": "N_AUDITOR", "label": "Conformity Body & ISO Auditor", "type": "Governance", "description": "Notified Bodies, ISO/IEC 42001 Certifiers", "tags": [ "governance" ], "shape": "hexagon", "Cluster": "0. Jurisdictional & Regulatory Sphere", "Cluster ID": "cluster_regulatory", "Cardinality": "10^2 Accredited Audit Entities", "Role": "CE conformity assessments & continuous surveillance", "VSM Tier": "System 3* (Sporadic External Audit)", "NIST Function": "MEASURE" }, { "id": "N_INSURER", "label": "AI Risk Underwriter & Insurer", "type": "Economic", "description": "Algorithmic Liability & Cyber Risk Carrier", "tags": [ "economic", "governance" ], "shape": "rect", "Cluster": "0. Jurisdictional & Regulatory Sphere", "Cluster ID": "cluster_regulatory", "Cardinality": "10^2 Global Underwriters", "Underwriting Gate": "Requires verifiable audit trail & human oversight", "VSM Tier": "System 3 (Economic Viability Gate)", "NIST Function": "MANAGE" }, { "id": "N_TRAIN", "label": "Training Supply Chain", "type": "Economic", "description": "Data Curators, Annotators, Mega-Compute Hubs", "tags": [ "economic", "technical" ], "shape": "rect", "Cluster": "1. Upstream Foundation & Model Lab", "Cluster ID": "cluster_supply", "Cardinality": "Top 5-10 Global Mega-Campuses", "Compute Profile": "Concentrated 50k-100k+ GPU clusters; GW-scale power", "Cost Type": "Fixed / Heavy CapEx ($600B Infrastructure Question)", "Ip Risk": "Copyright infringement / scraping litigation", "VSM Tier": "System 1 (Upstream Production)", "NIST Function": "MAP" }, { "id": "N_FRONTIER", "label": "Frontier Foundation Model", "type": "Economic", "description": "Globally Replicated Weights & Inference Fleets", "tags": [ "economic", "technical", "governance" ], "shape": "rounded", "Cluster": "1. Upstream Foundation & Model Lab", "Cluster ID": "cluster_supply", "Cardinality": "Top 5-10 Labs; Replicated across 10^3 Regional Clusters", "Compute Profile": "High memory-bandwidth inference clusters; low latency", "Sovereignty Gap": "Physical data residency does not equal jurisdictional independence", "EU AI Act Role": "Provider_GPAI", "Pricing Model": "Wholesale Per-Token Usage", "Liability Posture": "Disclaimed via ToS ('AS-IS')", "VSM Tier": "System 4 (Probabilistic Intelligence Engine)", "NIST Function": "MEASURE" }, { "id": "N_ABSORBED", "label": "Platform Absorption Zone", "type": "Economic", "description": "Native Tools, Prompt Cache, Hosted State", "tags": [ "economic", "technical" ], "shape": "rect", "Cluster": "1. Upstream Foundation & Model Lab", "Cluster ID": "cluster_supply", "Cardinality": "Top 3-5 Cloud Ecosystems", "Market Effect": "Feature commoditization of wrapper ISVs (a16z Stack)", "VSM Tier": "System 4 (Environmental Encroachment)" }, { "id": "N_ISV_PRODUCT", "label": "Specialized AI Application", "type": "Economic", "description": "Vertical Solutions (Legal, Medical, Finance, Ops)", "tags": [ "economic", "technical" ], "shape": "rounded", "Cluster": "2. Specialized Product & Harness Domain (ISV / Custom Runtime)", "Cluster ID": "cluster_product", "Cardinality": "10^4 - 10^5 Vertical SaaS Products", "EU AI Act Role": "Provider_System", "Pricing Model": "Per-Seat SaaS / Value-Added Outcome Fee", "Margin Exposure": "Squeezed between token costs & platform absorption", "VSM Tier": "System 4 (Operational Domain Intelligence)", "NIST Function": "MAP" }, { "id": "N_HARNESS", "label": "Agent Governance Harness", "type": "Technical", "description": "Deterministic Policy Engine & Guardrails", "tags": [ "technical", "governance" ], "shape": "subproc", "Cluster": "2. Specialized Product & Harness Domain (ISV / Custom Runtime)", "Cluster ID": "cluster_product", "Cardinality": "10^7 - 10^9 Ephemeral Agent Invocations", "Compute Profile": "Lightweight CPU / Orchestration Logic", "Iso 42001 Role": "AIMS Technical Control Implementation", "Duty Of Care": "Caps blast radius, halts unsafe prompts/actions", "CoALA Role": "Action Execution Engine & Procedural Memory Guard", "Anthropic Pattern": "Decoupled Orchestrator-Worker & Gate", "VSM Tier": "System 3 (Internal Operational Control & Stability)", "NIST Function": "MANAGE" }, { "id": "N_AUDIT_STORE", "label": "Sovereign Audit Ledger", "type": "Technical", "description": "Tamper-Evident WORM State & Forensic Store", "tags": [ "technical", "governance" ], "shape": "cylinder", "Cluster": "2. Specialized Product & Harness Domain (ISV / Custom Runtime)", "Cluster ID": "cluster_product", "Cardinality": "10^4 Enterprise Sovereign Ledgers", "Compliance": "Art. 12 Mandatory Logging / Rebuttal of Fault", "Sovereignty": "Client / Enterprise Owned", "Evidentiary Role": "Black-Box Flight Recorder for Liability Disputes", "VSM Tier": "System 3* (Internal Audit Channel)", "NIST Function": "MEASURE" }, { "id": "N_OBSERVE", "label": "Observability & Evals Engine", "type": "Technical", "description": "Continuous Evaluation, Traces & Cost Telemetry", "tags": [ "technical", "governance", "economic" ], "shape": "rounded", "Cluster": "2. Specialized Product & Harness Domain (ISV / Custom Runtime)", "Cluster ID": "cluster_product", "Cardinality": "10^4 Monitoring Pipelines", "Capabilities": "LLM-as-a-judge, OTEL tracing, token telemetry", "VSM Tier": "System 3 (Performance Monitoring & Homeostasis)", "NIST Function": "MEASURE" }, { "id": "N_ENTERPRISE", "label": "Enterprise Deployer", "type": "Economic", "description": "Legal Principal & Economic Sponsor", "tags": [ "economic", "governance" ], "shape": "rect", "Cluster": "3. Enterprise Deployer & Principal Domain", "Cluster ID": "cluster_client", "Cardinality": "10^5 Commercial Deployers Globally", "EU AI Act Role": "Deployer", "Liability Posture": "Holds Vicarious & Strict Legal Liability", "Roi Hurdle": "High CapEx Recovery Pressure (Sequoia Act Two)", "VSM Tier": "System 5 (Corporate Policy & Ultimate Governance)", "NIST Function": "GOVERN" }, { "id": "N_IDP", "label": "Enterprise Identity & Auth (IdP)", "type": "Technical", "description": "OAuth, OIDC, Workload IAM & Ephemeral Tokens", "tags": [ "technical", "governance" ], "shape": "stadium", "Cluster": "3. Enterprise Deployer & Principal Domain", "Cluster ID": "cluster_client", "Cardinality": "10^5 Enterprise Directories", "Security Role": "Issues scoped actor delegations to agents (A2E)", "VSM Tier": "System 2 (Security Coordination)", "NIST Function": "MANAGE" }, { "id": "N_KNOWLEDGE_STORE", "label": "Enterprise Semantic Knowledge Base", "type": "Technical", "description": "Proprietary Vector DBs, Documents & Embeddings", "tags": [ "technical", "governance" ], "shape": "cylinder", "Cluster": "3. Enterprise Deployer & Principal Domain", "Cluster ID": "cluster_client", "Cardinality": "10^5 Private Knowledge Bases", "CoALA Memory Type": "Semantic Memory (Factual & Document Knowledge)", "Sovereignty": "Enterprise Controlled / Private Boundary", "VSM Tier": "System 1 (Knowledge Asset)", "NIST Function": "MAP" }, { "id": "N_HUMAN_USER", "label": "Human Task Delegator & Overseer", "type": "Technical", "description": "End User / Mandatory HITL Supervisor", "tags": [ "technical", "governance" ], "shape": "circle", "Cluster": "3. Enterprise Deployer & Principal Domain", "Cluster ID": "cluster_client", "Cardinality": "10^8 End Users & Operators", "Control Mode": "Prompting, Art. 14 Human Oversight, Override", "VSM Tier": "System 5 (Human Intent & Final Agency)", "NIST Function": "GOVERN" }, { "id": "N_TOOL_GATEWAY", "label": "Capability & Tool Gateway", "type": "Technical", "description": "Decoupled Tool Broker & Context Provider (MCP)", "tags": [ "technical", "governance" ], "shape": "subproc", "Cluster": "4. Target Execution Environment & Blast Radius", "Cluster ID": "cluster_environment", "Cardinality": "10^4 - 10^5 Gateway Servers", "Protocol Standards": "Model Context Protocol (MCP), OpenAPI, GraphQL (A2T)", "Security Role": "Tool discovery, sandbox isolation, scope negotiation", "VSM Tier": "System 2 (Coordination & Oscillation Damping)", "NIST Function": "MANAGE" }, { "id": "N_TARGET_SYS", "label": "Target Systems & Operational APIs", "type": "Technical", "description": "Databases, Production ERP, Financial Rails", "tags": [ "technical", "governance" ], "shape": "cylinder", "Cluster": "4. Target Execution Environment & Blast Radius", "Cluster ID": "cluster_environment", "Cardinality": "10^6 Production Systems Globally", "Risk Zone": "Direct Causation Blast Radius", "VSM Tier": "System 1 (Real-World Actuation & Operations)", "NIST Function": "MANAGE" }, { "id": "N_AFFECTED_PARTY", "label": "Impacted Third Party", "type": "Governance", "description": "Consumers, Employees, Citizens", "tags": [ "governance" ], "shape": "circle", "Cluster": "4. Target Execution Environment & Blast Radius", "Cluster ID": "cluster_environment", "Cardinality": "Billions of Impacted Individuals", "EU AI Act Role": "Affected_Subject", "Legal Standing": "Private Right of Action, Tort Plaintiff, Data Subject", "VSM Tier": "External Environment (Ultimate Impact Receptor)" } ], "connections": [ { "id": "conn_0", "from": "N_ENTERPRISE", "to": "N_ISV_PRODUCT", "label": "$$$ SaaS Subscription / Outcome Fee", "type": "money", "direction": "directed", "tags": [ "economic" ], "description": "Relationship type: money" }, { "id": "conn_1", "from": "N_ISV_PRODUCT", "to": "N_FRONTIER", "label": "$$ Wholesale Token Consumption Cost", "type": "money", "direction": "directed", "tags": [ "economic" ], "description": "Relationship type: money" }, { "id": "conn_2", "from": "N_FRONTIER", "to": "N_TRAIN", "label": "$ Compute CapEx & Annotation", "type": "money", "direction": "directed", "tags": [ "economic" ], "description": "Relationship type: money" }, { "id": "conn_3", "from": "N_ABSORBED", "to": "N_ISV_PRODUCT", "label": "Platform Commoditization Pressure (a16z Stack)", "type": "tension", "direction": "directed", "tags": [ "economic" ], "description": "Relationship type: tension" }, { "id": "conn_4", "from": "N_INSURER", "to": "N_ENTERPRISE", "label": "$ Policy Premiums & Underwriting", "type": "money", "direction": "directed", "tags": [ "economic", "governance" ], "description": "Relationship type: money" }, { "id": "conn_5", "from": "N_OBSERVE", "to": "N_ENTERPRISE", "label": "Real-time Cost & Token Telemetry", "type": "flow", "direction": "directed", "tags": [ "economic", "technical" ], "description": "Relationship type: flow" }, { "id": "conn_6", "from": "N_REGULATOR", "to": "N_ENTERPRISE", "label": "Statutory Compliance & Fines (Art. 71)", "type": "authority", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: authority" }, { "id": "conn_7", "from": "N_REGULATOR", "to": "N_FRONTIER", "label": "GPAI Codes of Practice & Transparency (Art. 53)", "type": "authority", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: authority" }, { "id": "conn_8", "from": "N_AUDITOR", "to": "N_ENTERPRISE", "label": "Conformity Audits (ISO 42001 / High Risk)", "type": "authority", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: authority" }, { "id": "conn_9", "from": "N_FRONTIER", "to": "N_ENTERPRISE", "label": "Disclaims Liability (ToS 'AS-IS' / Ada Lovelace Gap)", "type": "disclaim", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: disclaim" }, { "id": "conn_10", "from": "N_ENTERPRISE", "to": "N_AFFECTED_PARTY", "label": "Vicarious Liability for Agent Harm (Respondeat Superior)", "type": "tension", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: tension" }, { "id": "conn_11", "from": "N_AFFECTED_PARTY", "to": "N_REGULATOR", "label": "Complaints & Redress Demands", "type": "flow", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: flow" }, { "id": "conn_12", "from": "N_ENTERPRISE", "to": "N_HARNESS", "label": "Delegates Authority & Safety Boundaries (VSM 5 to 3)", "type": "authority", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: authority" }, { "id": "conn_13", "from": "N_HUMAN_USER", "to": "N_HARNESS", "label": "Art. 14 Human Oversight & Stop Button", "type": "authority", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: authority" }, { "id": "conn_14", "from": "N_HARNESS", "to": "N_AUDIT_STORE", "label": "Cryptographic Tamper-Proof Audit Trail (Art. 12)", "type": "governance_control", "direction": "directed", "tags": [ "governance", "technical" ], "description": "Relationship type: governance_control" }, { "id": "conn_15", "from": "N_AUDIT_STORE", "to": "N_AUDITOR", "label": "Forensic Evidence for Compliance Verification", "type": "flow", "direction": "directed", "tags": [ "governance" ], "description": "Relationship type: flow" }, { "id": "conn_16", "from": "N_HARNESS", "to": "N_TOOL_GATEWAY", "label": "Enforces Least-Privilege Scopes (VSM 3 to 2)", "type": "governance_control", "direction": "directed", "tags": [ "governance", "technical" ], "description": "Relationship type: governance_control" }, { "id": "conn_17", "from": "N_TARGET_SYS", "to": "N_AFFECTED_PARTY", "label": "Direct Impact & Real-World Blast Radius", "type": "tension", "direction": "directed", "tags": [ "governance", "technical" ], "description": "Relationship type: tension" }, { "id": "conn_18", "from": "N_HUMAN_USER", "to": "N_ISV_PRODUCT", "label": "Prompt Intent & Working Context", "type": "flow", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: flow" }, { "id": "conn_19", "from": "N_IDP", "to": "N_HARNESS", "label": "A2E Workload Identity Delegation (OAuth/OIDC)", "type": "protocol", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: protocol" }, { "id": "conn_20", "from": "N_ISV_PRODUCT", "to": "N_HARNESS", "label": "Initiates Autonomous Loop", "type": "flow", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: flow" }, { "id": "conn_21", "from": "N_HARNESS", "to": "N_FRONTIER", "label": "MIP Inference API (Tokens & Directives)", "type": "protocol", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: protocol" }, { "id": "conn_22", "from": "N_HARNESS", "to": "N_KNOWLEDGE_STORE", "label": "RAG Semantic Retrieval & Working Context (CoALA)", "type": "flow", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: flow" }, { "id": "conn_23", "from": "N_HARNESS", "to": "N_HARNESS", "label": "A2A Multi-Agent Delegation & Peer Protocol", "type": "protocol", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: protocol" }, { "id": "conn_24", "from": "N_HARNESS", "to": "N_OBSERVE", "label": "Traces & LLM Evaluation Metrics", "type": "flow", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: flow" }, { "id": "conn_25", "from": "N_HARNESS", "to": "N_TOOL_GATEWAY", "label": "A2T Tool Calling & Context Protocol (MCP / OpenAPI)", "type": "protocol", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: protocol" }, { "id": "conn_26", "from": "N_TOOL_GATEWAY", "to": "N_TARGET_SYS", "label": "Authenticated Operations Execution (VSM System 1)", "type": "flow", "direction": "directed", "tags": [ "technical" ], "description": "Relationship type: flow" } ] }