Reference architecture

Intelligence that can explain itself, respect authority, and learn under control.

Tangerine separates evidence, reasoning, authorization, and execution—then reconnects them through a closed decision loop.

Layered by responsibility

Six architectural layers. One accountable flow.

Reference stackSeparation of concerns
06Experience & orchestration

Decision surfaces, workflows, collaboration, and role-specific views.

05Authority & policy

Permissions, thresholds, approvals, constraints, and escalation.

04Reasoning & simulation

Structured analysis, scenario comparison, confidence, and abstention.

03Context & evidence

Objects, relationships, provenance, validity, and decision history.

02Integration & event flow

APIs, streams, connectors, documents, models, and enterprise services.

01Customer-controlled foundation

Identity, security, deployment boundaries, observability, and lifecycle.

Canonical loop

Decisions begin in reality and end in evidence.

A decision is not complete when an answer appears. It is complete when the action, authority, and observed outcome can be connected back to the original state.

Decision loopEvidence closes the loop
ObserveEvents and evidence
OrientContext and state
ReasonOptions and confidence
AuthorizePolicy and ownership
ActHuman or system execution
LearnOutcome and replay
Outcome evidence returns to the system of truth

Authority architecture

Capability is not permission.

Tangerine distinguishes what a person, workflow, or reasoning service can determine from what each is authorized to approve or execute.

Illustrative authority matrixConfigured by decision surface
Capability
Human
Workflow
Reasoning service
Read evidence
Allowed
Allowed
Allowed
Generate analysis
Allowed
Allowed
Bounded
Recommend action
Allowed
Allowed
Bounded
Approve consequential action
Role owner
Escalate
Never
Execute
By role
By policy
Via governed interface
Change policy
Designated owner
Never
Never

Two loops

Run the business. Improve the intelligence. Keep the boundary visible.

Runtime and learningControlled exchange

Runtime loop

Decide inside the moment

Bind current state, evidence, constraints, authority, and action into a governed operating cycle.

StateReasonAuthorizeActVerify

Learning loop

Improve outside the moment

Review outcomes, assumptions, policies, models, and operating design before controlled release.

ReplayEvaluateChangeValidateRelease

Delegation contract

Every delegated action has a defined envelope.

The contract states the objective, permitted actions, prohibited actions, evidence required, confidence threshold, escalation path, timeout, and recovery behavior.

01

Scope

Which objects, systems, time horizon, and consequences are in bounds?

02

Authority

What may be recommended, prepared, approved, or executed—and by whom?

03

Failure behavior

When must the service abstain, contain, escalate, expire, or recover?

Team reviewing the lineage and quality of industrial evidence

Replay and observability

Reconstruct the decision—not just the system log.

A meaningful replay includes observed state, evidence versions, assumptions, policies, model and workflow versions, authority checks, human interventions, action, and outcome.

Explore trust architecture
Industrial team working in a dark high-technology environment

Start with consequence

Architect the decision before automating the action.

Choose a decision where fragmented evidence, unclear authority, or slow coordination materially affects the outcome.

Start the conversation