PlatformArchitecture

Take one record and cut down through everything it touches.

The hub names the six shared foundations. This page is the section through them: a single record followed downward, picking up a place, a rule about who may touch it, its behaviour, its documents, its continuity and its reach — and, beside each one, what every domain would have to build for itself if that layer were not shared.

Request a demoThe six foundations

What this page is not There is no deployment topology here, no service inventory, no network diagram and no list of frameworks. Where the whole of it runs is a separate question with its own page. Deployment & hosting

What the record acquires, and what it would otherwise cost.

  1. The organization

    The organizational model

    A place. The record belongs to a unit, and the unit is a node in the one tree every domain reads — so “which department” means the same thing in finance as it does in the warehouse.

    Each domain would keep its own department list, and reconciling them would become a permanent job. A reorganisation would have to be performed once per system.

  2. A rule about who may touch it. Not a copy of a permission — the seat it belongs to, resolved against the licence and the privileges of whoever asks.

    Every domain would carry its own user list and its own idea of a role, and a leaver would have to be removed from each of them separately, correctly, on the same day.

  3. Its behaviour. What form it is captured on, what stages it moves through, who acts at each one and what is produced along the way are read from definitions rather than compiled into the domain that happens to own the record.

    Changing an approval route would be a release in whichever application owned it, and the same rule would have to be re-implemented in each domain that needed it.

  4. Its documents, its notifications, its tasks, and the reference data that gives its fields stable meaning. These are called, not implemented, by the domain the record is in.

    Six document stores, six notification systems, six task engines — and a document raised in one domain would be a copy somewhere else rather than the same document.

  5. One record layer

    Continuity. When work crosses from one domain to another it is the same record being read, not a message describing it — which is why its history survives the crossing instead of being restated on the other side.

    Crossing a boundary would mean an export, an import, and a reconciliation — and the moment those disagree, somebody has to decide which system is right.

  6. Reach. Where the answer lives in a system that is staying where it is, the record can still use it — under the same organization and seat rules as everything above.

    Each domain would negotiate its own connection and hold its own credentials, and there would be no single place to see what continON is reaching or on whose authority.

The record is one object all the way down. It is not handed between the layers as a copy, which is the difference between a platform and a set of applications that agree to exchange files.

The order is a constraint, not a drawing convention.

  1. A layer only relies on what is beneath it

    Authority reads the organization; it does not work the other way. That is why the organization can be reorganised without the permission model being rewritten.

  2. The licence bounds everything inside it

    No definition, seat or grant can reach past what the organization is licensed for, because the bound is applied above them rather than checked by each of them.

  3. A domain may call a service, never replace it

    There is no per-domain document store or notification system to diverge from the shared one, which is what makes “the same document” literally true.

Stated plainly: the sharing is real and therefore the coupling is real. The domains depend on the same services and the same record layer, so they are strong together and they are affected together. continON is described here as one connected operating environment because that is what it is — not as a set of independent services that could each fail alone.

Bring an architect and cut the section on your own case.

On a sanitized tenant: pick a record that crosses two of your domains and follow it down through the layers, with the permissions, documents and history it carries.