ArcaQ Stage 2

Swarm Intelligence & Sovereign Operations Center

A stateless orchestrator decomposes every internal issue into specialized, isolated workers. A dedicated SOC constellation protects the platform itself. Every diagnostic is PROV-O traced and UI-visible.

See the architecture Request a demo

Stage 2 Runtime Architecture

One responsibility per pod. Cross-scope communication only via Kafka events or public interfaces. No shared god modules.

Swarm Orchestrator

Stateless. Horizontally scalable. Decomposes an internal issue into subtasks, dispatches them to GNN/HGT, causality, ontology, and LLM workers, then aggregates a PROV-O-traced verdict.

Kafka task/results topics per tenant
No pod-local state
KEDA scales on queue lag

Agent Control Plane

Single gateway to the external enterprise LLM (Kimi K3). Enforces budget, rate limits, and circuit breakers. Adds PROV-O tracing headers. Never exposes source systems to the LLM.

Interchangeable enterprise LLM
Token budget & circuit breaker
Reasoned diagnosis endpoint

Kafka Bus & KEDA Scaling

Topics partitioned by tenant and scope. Dedicated consumer groups per pod. KEDA scales each scope independently on queue lag.

Tenant + scope partitioning
Per-pod consumer groups
Independent elastic scaling

Sovereign SOC Constellation

Five isolated pods watch the ArcaQ platform itself. Every event is normalized, scored, contained, and preserved as immutable evidence.

soc-collector

Ingests and normalizes platform events: probe activity, LLM mediation calls, enrichment events, audit logs.

soc-analyzer

Detection, correlation, and risk scoring. Emits benign / suspicious / malicious verdicts.

soc-responder

RBAC-gated automated containment: quarantine, revoke, rate-limit. Least-privilege actions.

soc-forensics

Immutable evidence and chain-of-custody. SHA-256 chaining, append-only storage, reasoning traces.

soc-dashboard

Operator command center with real-time WebSocket. Every enrichment event visibly updates entity status.

Strict Separation of Concerns

ArcaQ is a standalone product. No hardcoded source, no cross-product imports, no shared god modules.

# Shared-kernel package is intentionally tiny
arcaq-shared-kernel/
  schemas/
    events.py      # canonical event schemas only
    prov.py        # PROV-O schema helpers only

# Cross-scope communication = event bus or public interfaces only
# Future interoperability = Kafka / MCP / OTEL open standards