System Architecture

End-to-end technology stack powering the Governed Agentic Money Movement Gateway

Presentation Tier

React 18

Component UI

JSXHooksRouter v6

Tailwind CSS

Utility-first styling

Dark themeCSS Variables

Shadcn / Radix

Accessible components

DialogSelectSwitchTabs

Recharts

Data visualization

BarChartAreaChartComposedChart
Framer MotionAxiosSonner (Toasts)Lucide IconsCracoWebpack
HTTPS · REST JSON · 4 s polling

API Tier

FastAPI

Async Python ASGI framework

UvicornPydantic v2CORS

API Routes

RESTful endpoints under /api

GET /dashboard/stats · risk-trend

POST /transactions · bulk-review

PUT /thresholds · rules

GET /agents · audit · consents

POST /simulate · notifications

Modules

Backend file structure

server.py — Routes & startup

pipeline.py — Decision engine

seed.py — Seed data

.env — Config & secrets

async function calls

Decision Pipeline (mirrors AWS Step Functions)

Every transaction passes through a 5-step state machine. Operators can inspect each step's reasoning in the Transaction Queue.

1

Identity Check

Verify agent registration, certificate, suspension status

2

Risk Scoring

Composite score from amount, trust, recipient, velocity, time

3

Guardrails

Evaluate 10 configurable rules (high / medium / low severity)

4

Tiered Decision

Auto-execute ≤ $500 · Escalate ≤ $2 k · Block ≥ $5 k

5

Audit Capture

Immutable hash-chained log + notification dispatch

JsonLogic RulesSHA-256 Hash Chain3-Tier Authorization
Motor async driver

Data Tier

agents

Trust score, auth mode, daily counters

3 seeded

transactions

Amount, risk score, reasoning, status

8 seeded

rules

10 guardrail rules, toggleable

10 seeded

thresholds

5 authorization ceilings

1 doc

consents

Consumer-agent permission matrix

5 seeded

audit_log

Immutable hash-chained events

append-only

notifications

Escalation & block alerts

auto-created

MongoDB

Motor async

Cross-Cutting Concerns

Notifications

Real-time escalation & block alerts with unread tracking

Observability

24-hour risk trend, live activity feed, risk distribution

Audit

Tamper-evident SHA-256 hash chain, JSON export

Validation

Pydantic v2 input guards, threshold ordering constraints

Simulation

Dry-run transactions through the full pipeline without persisting

Phase 2 — AWS Integration

Planned

DynamoDB

Replace MongoDB for transactional & audit data

SQS

Async transaction queue between API and decision engine

Step Functions

Visual no-code pipeline editing in Workflow Studio

SNS

Push notifications for approval alerts

KMS

Cryptographic tamper detection on audit records

EventBridge

Central event bus replacing direct service calls

Full Technology Stack

React 18Tailwind CSSShadcn UIRechartsFramer MotionReact Router v6FastAPIPydantic v2UvicornMotorMongoDBPython 3.11SHA-256REST APIJSONCORS