Skip to main content

Tier 3: Production

Open Repo Download ZIP

git clone https://github.com/AEEF-AI/aeef-production.git

Goal: Enterprise-grade platform with monitoring, drift detection, incident response, and sovereign compliance.

The Production tier is the complete AEEF implementation for organizations operating in regulated environments or requiring enterprise-grade governance. It builds on the Transformation tier by adding continuous monitoring, configuration drift detection, automated incident response, sovereign compliance overlays, and the full 11-agent orchestration model.

If you need an execution-first checklist instead of a capability overview, use Apply Path (Tier 3 Production).

What's Added Beyond Tier 2​

Everything from Tier 2: Transformation is included, plus:

CapabilityStandards CoveredKey Files
Monitoring stackPRD-STD-010, 012docker-compose.monitoring.yml, Grafana dashboards
Drift detectionPRD-STD-007, 010scripts/drift-detect.sh, CI drift pipeline
Incident response automationPRD-STD-010scripts/triage.sh, scripts/rollback.sh, alert configs
Sovereign compliance overlaysPRD-STD-014, 015, 016overlays/ksa/, overlays/uae/, overlays/egypt/, overlays/eu/
Full 11-agent orchestrationPRD-STD-009Agent registry with all 11 roles, full handoff matrix
Trust metrics dashboardPRD-STD-010Grafana dashboard definitions, data pipeline
SBOM generationPRD-STD-008, 011CI SBOM stage, attestation signing
Integration test suitesPRD-STD-003Contract tests, load tests, E2E configurations
Multi-tenant governancePRD-STD-013Tenant isolation configs, per-tenant routing
Privacy pipelinePRD-STD-014PII detection, consent management, data retention

Full 11-Agent Orchestration​

The Production tier activates the complete agent model defined in Agent SDLC Orchestration:

Prefer a production-local entry point? Use Production → Agent SDLC Orchestration (Canonical), which redirects conceptually to the same canonical model.

AgentRoleTrust LevelEnvironments
Product AgentRequirements, prioritizationSupervisedDevelopment
Scrum AgentSprint planning, standupsSupervisedDevelopment
Architect AgentDesign decisions, ADRsSupervisedDevelopment, Staging
Developer AgentCode generation, refactoringSupervisedDevelopment, Staging
QA AgentTest execution, coverage analysisSupervisedDevelopment, Staging
Security AgentSAST, SCA, secret detectionAutonomousAll environments
Compliance AgentPolicy validation, audit evidenceAutonomousAll environments
Platform AgentInfrastructure, deploymentSupervisedStaging, Production
DevMgr AgentVelocity tracking, capacitySupervisedDevelopment
Ops AgentMonitoring, incident responseAutonomousProduction
Executive AgentKPI dashboards, strategic reportsSupervisedReporting

Monitoring and Observability Stack​

The Production tier deploys a monitoring stack via Docker Compose:

docker compose -f docker-compose.monitoring.yml up -d

This brings up:

  • Grafana -- Pre-configured dashboards for KPIs, trust metrics, and drift detection
  • Prometheus -- Metrics collection from CI pipelines and application services
  • AlertManager -- Alert routing to Slack, PagerDuty, or email
  • Health Check Service -- Periodic validation of all AEEF governance controls

See Monitoring Setup for the full configuration guide.

Sovereign Compliance Overlays​

Overlays are configuration layers that add jurisdiction-specific governance requirements on top of the base AEEF standards:

  • KSA overlay -- PDPL, NCA ECC, SAMA CSF, SDAIA compliance controls
  • UAE overlay -- Federal DPL, ADGM, DIFC regulatory alignment
  • Egypt overlay -- Egypt PDPL data protection requirements
  • EU overlay -- EU AI Act risk classification and conformity requirements

See Sovereign Compliance Overlays for details on applying and customizing overlays.

Docker Compose Deployment​

The Production tier includes a complete Docker Compose configuration for local development and staging:

# docker-compose.yml - Core services
services:
  app:
    build: .
    ports: ["3000:3000"]
    environment:
      - NODE_ENV=production
      - AEEF_OVERLAY=ksa  # or uae, egypt, eu

  monitoring:
    extends:
      file: docker-compose.monitoring.yml
      service: grafana

For production deployment, the Docker Compose definitions serve as a reference for translating to Kubernetes, ECS, or other orchestration platforms.

Repository​

github.com/AEEF-AI/aeef-production

Language-Specific Guides​

  • TypeScript -- Next.js with Docker, full CI, and monitoring integration
  • Python -- FastAPI + Celery with Docker, monitoring, and async pipelines
  • Go -- Chi + gRPC with Docker, monitoring, and high-performance pipelines
Last updated on by BalrogEg