Integration Architecture
GreenLight sits between an existing AI system and the action. It does not replace Thales AI models or operational applications.
Authorization-Aware RAG
Enforcement happens when chunks are selected for the model. Filtering the finished answer is not the control.
- 1. User/Agent
- 2. North
- 3. GreenLight authorization
- 4. RAG/vector retrieval
- 5. Authorized context only
- 6. AI response
- 7. GreenLight audit
- 8. North/User
Group access
Attribute-level access
Classification rules
IAM integration
Audit
Source Repositories
GreenLight retrieves evidence directly from systems of record — simulated connectors in this demo.
- Engineering document controlTechnical baselines, revisions
- Condition-monitoring historianEquipment telemetry
- Maintenance management systemWork orders, inspection history
- Recognised picture serviceFused surveillance picture editions
- Delegation register / identityRoles and delegated authority
Future reusable use case
Recommendation + cited sources
GreenLight — Independent Control Layer
Hold, release or record
Select any block for detail.
In This Demo
- Synthetic data and fictional assets
- Simulated connectors to source repositories
- Illustrative AI recommendations — not produced by Thales or cortAIx
- Second-actor approvals simulated in the browser
Subsequent PoC
- Live connectors and source-system permissions
- Identity and delegation validation
- Execution enforcement in the operational system
- Customer-owned rule packs and change control
Shown, not built
- Phase 2: agent-based testing of the access controls.
- Phase 3: deeper integration with North.