PlatformArchitecture
Take one record and cut down through everything it touches.
The hub names the six shared foundations. This page is the section through them: a single record followed downward, picking up a place, a rule about who may touch it, its behaviour, its documents, its continuity and its reach — and, beside each one, what every domain would have to build for itself if that layer were not shared.
What this page is not There is no deployment topology here, no service inventory, no network diagram and no list of frameworks. Where the whole of it runs is a separate question with its own page. Deployment & hosting
What the record acquires, and what it would otherwise cost.
The organization
The organizational modelA place. The record belongs to a unit, and the unit is a node in the one tree every domain reads — so “which department” means the same thing in finance as it does in the warehouse.
Each domain would keep its own department list, and reconciling them would become a permanent job. A reorganisation would have to be performed once per system.
Authority
How authority resolvesA rule about who may touch it. Not a copy of a permission — the seat it belongs to, resolved against the licence and the privileges of whoever asks.
Every domain would carry its own user list and its own idea of a role, and a leaver would have to be removed from each of them separately, correctly, on the same day.
Definitions
Why definitions are a layerIts behaviour. What form it is captured on, what stages it moves through, who acts at each one and what is produced along the way are read from definitions rather than compiled into the domain that happens to own the record.
Changing an approval route would be a release in whichever application owned it, and the same rule would have to be re-implemented in each domain that needed it.
Shared services
One of those services, in depthIts documents, its notifications, its tasks, and the reference data that gives its fields stable meaning. These are called, not implemented, by the domain the record is in.
Six document stores, six notification systems, six task engines — and a document raised in one domain would be a copy somewhere else rather than the same document.
One record layer
Continuity. When work crosses from one domain to another it is the same record being read, not a message describing it — which is why its history survives the crossing instead of being restated on the other side.
Crossing a boundary would mean an export, an import, and a reconciliation — and the moment those disagree, somebody has to decide which system is right.
The outside edge
The connection mechanismsReach. Where the answer lives in a system that is staying where it is, the record can still use it — under the same organization and seat rules as everything above.
Each domain would negotiate its own connection and hold its own credentials, and there would be no single place to see what continON is reaching or on whose authority.
The record is one object all the way down. It is not handed between the layers as a copy, which is the difference between a platform and a set of applications that agree to exchange files.
The order is a constraint, not a drawing convention.
A layer only relies on what is beneath it
Authority reads the organization; it does not work the other way. That is why the organization can be reorganised without the permission model being rewritten.
The licence bounds everything inside it
No definition, seat or grant can reach past what the organization is licensed for, because the bound is applied above them rather than checked by each of them.
A domain may call a service, never replace it
There is no per-domain document store or notification system to diverge from the shared one, which is what makes “the same document” literally true.
Stated plainly: the sharing is real and therefore the coupling is real. The domains depend on the same services and the same record layer, so they are strong together and they are affected together. continON is described here as one connected operating environment because that is what it is — not as a set of independent services that could each fail alone.
Bring an architect and cut the section on your own case.
On a sanitized tenant: pick a record that crosses two of your domains and follow it down through the layers, with the permissions, documents and history it carries.

