// Reference Architecture

Reference Architecture

This diagram shows StrategyCore’s current technology stack across AI and machine learning, data engineering and cybersecurity. It illustrates possible combinations of data platforms, AI applications and security services for enterprises and government organisations in Japan. StrategyCore works with vendor engineers and each organisation’s IT team to adapt the stack to its applications, existing systems and security requirements. We can add open-source software or other vendors’ products to address gaps in the proposed deployment and extend the stack as new requirements arise.

SC-RA-01 · REV B · 2026.07

T0External

Data Sources

Customer systems of record, event producers, mail flow, and the device fleet, outside the platform boundary.

OLTP / Legacy Databases

db.oltp · cdc-enabled

ERP & SaaS Applications

app.erp · saas

Event Streams & Logs

mq.kafka · logs

Files & Object Storage

obj.s3 · files

Data Warehouse & Lakehouse

db.warehouse · lakehouse

3rd-Party APIs

api.rest · external

Outbound / Inbound Mail Flow

smtp.mta · sending domains

IoT / OT Devices

edge.iot-ot · unmanaged

change data capture, events, and files enter the platform

Platform trust boundary

Integration & Ingestion

Capture database changes and ingest event streams. Test update delay, source overhead and recovery for the selected connectors.

Vendor

Striim

CDC Pipelines

svc.cdc · change-events

Striim

Real-Time Streaming

svc.stream · events

Striim

In-Flight Transformation

etl.in-flight · sql

Striim

Data Replication

svc.replicate · migrate

Striim

captured changes delivered to the configured targets

Processing & Storage

One distributed SQL engine carries transactional, analytical, and vector workloads.

Vendor

SingleStore

Unified Data Store (OLTP + OLAP)

db.htap · distributed-sql

SingleStore

Hybrid Query Engine

sql.oltp+olap · mpp

SingleStore

Vector Store & Search

db.vector · ann-index

SingleStore

Unified Object Storage

obj.unlimited-storage

SingleStore

features and embeddings supplied; predictions stored

AI / ML

Training, serving, and retrieval. Features and vector search are served by the same engine that holds the data.

Model Training

gpu.train · ml/dl/rl

Model Serving & Inference

svc.infer · realtime+batch

Global LLM

llm.global · hosted-api

Sovereign LLM

llm.sovereign · self-hosted

RAG & Semantic Search

svc.rag · semantic-search

SingleStore

Feature Store & Serving

db.features · low-latency

SingleStore

inference and query results

Model routing, records and evaluation

Application logic can retain decision records, route requests between models, record source references and evaluate outcomes. These functions and their access controls must be designed for the application.

Decision State

intel.state-store · persistent

Model Orchestration

svc.model-router · approved-models

Continuous Learning

svc.learn-loop · closed-loop

Provenance & Lineage

svc.provenance · federated

Sovereign Control

policy.sovereignty · self-hosted

model responses with application checks and records

Serving & Applications

Where results reach people: embedded analytics, APIs, applications, and agents.

Vendor

Logi

Embedded Analytics & Dashboards

ui.embed · white-label

Logi

API Gateway

net.gateway · rest/sql

Business Applications

app.custom · frameworks

AI Agents

app.agent · llm-backed

dashboards, APIs, applications, and agents deliver results to users

compute and storage allocated to the supported workloads

Cloud and Kubernetes infrastructure

Identify which components run as containers and which are separate services. Measure Kubernetes and GPU capacity against the actual workload.

Vendor

ProphetStor

Kubernetes Orchestration

k8s.control-plane

Predictive Autoscaling

k8s.hpa · federator.ai

ProphetStor

GPU / CPU AIOps Monitoring

obs.aiops · gpu/cpu

ProphetStor

Ingress & Load Balancing

net.ingress · l4/l7

Multi-Cloud & Hybrid

cloud.hybrid · on-prem

scheduling, scaling and monitoring for containerised components

Deployment

CloudHybridOn-Premise

Applications of the architecture

The data platform can support operational reporting, AI retrieval and analysis of security events. Each application needs its own data connections, permissions and performance tests.

Real-Time Analytics

Dashboards and operational reports over data updated from source systems.

Powered byStriimSingleStoreLogi

AI & RAG Applications

Retrieval, model serving, and agents built on vectors held next to the source data.

Powered byStriimSingleStoreProphetStor

Security Analytics / SIEM

Collect security logs, query events and present findings in dashboards for the security operations team.

Powered byStriimSingleStoreLogi

Customer 360 & Data Hub

Combine customer or product records from connected systems, with matching rules and update intervals defined for each source.

Powered byStriimSingleStore

Predictive Operations

Forecast resource demand and adjust cluster capacity against measured workload requirements.

Powered byProphetStorSingleStore

Device & Email Trust

Assess device and firmware risks with DeviceTotal, and manage sending-domain authentication with Valimail. Each service can be evaluated separately from the data platform.

Powered byDeviceTotalValimail

SEC

Email and device-security services

Cybersecurity

Valimail manages domain authentication; DeviceTotal assesses device risk. The two services can be evaluated separately from the data platform.

SEC-1

Email Authentication Pipeline

Valimail

Check domain authentication with SPF, DKIM and DMARC. Quarantine or rejection is requested through policy; receivers decide final handling. BIMI logo display depends on the receiving service’s conditions.

01SPF / DKIM / DMARC Checks

auth.spf/dkim/dmarc

02DMARC Policy (monitor, quarantine or reject)

policy.p=reject · dns

03BIMI Brand Indicators

brand.bimi · vmc

04DMARC Reporting & Telemetry

rpt.rua/ruf · telemetry

SEC-2

Device, IoT, OT & Network Security

DeviceTotal

Match inventory and discovery records against DeviceTotal intelligence. Validate device and firmware identity, applicable vulnerabilities and remediation; investigate unknown or unsupported assets.

01Agentless Asset Discovery

inv.agentless · vendor/model/fw

02Vulnerability Intelligence (CVE)

intel.cve · vendor-advisories

03IoT / OT Risk Posture

risk.firmware · eol/eosl

04Supply-Chain Device Risk

risk.supply-chain

05Prioritized Remediation

act.remediate · ranked

verdicts, risk scores, and remediation actions feed the tiers above

Data flowControl / telemetryTrust boundaryProduct we carry in JapanEcosystem component01Ordered pipeline stage

// Vendor Placement

Where each product sits.

SingleStoreDistributed SQL for transactional, analytical and vector workloads. Supports operational applications, reporting and, where needed, retrieval for AI applications.Data EngineeringAI & MLCybersecurity

StriimCapture database changes, transform streams and deliver data to supported targets. Measure end-to-end latency for the proposed pipeline.Data EngineeringAI & MLCybersecurity

LogiEmbedded analytics and dashboards in the serving tier, white-labeled inside customer applications.Data EngineeringCybersecurity

ProphetStorFederator.ai forecasts resource demand and adjusts allocation for supported Kubernetes workloads. GPU and CPU use, application performance and scaling limits are measured on the proposed configuration.AI & ML

DeviceTotalMatch inventory records to device and firmware intelligence, assess applicable vulnerabilities and prioritise investigation or remediation.Cybersecurity

ValimailIdentify domain sending services, manage SPF and DKIM configuration, and plan DMARC policy changes. BIMI display depends on receiving-service requirements.Cybersecurity

Japanese pre-sales and deployment planning for your solution.

StrategyCore’s pre-sales engineers work with your team and the prospect’s IT staff to assess connections to existing systems. We plan the technical evaluation in Japanese and agree the deployment, operating and post-sales technical support responsibilities for each component.

Discuss deployment support