From Architecture Docs to Intelligent Governance: Exploring the Open‑Source AxisRobo‑PAMP

Problem: fragmented architecture knowledge

Enterprise architecture knowledge resides in capability maps, application inventories, review minutes, design documents, security checklists, data‑governance ledgers, and architects’ experience, but these artifacts are not connected, traceable, or governable.

Goal of AxisRobo‑PAMP

Link key architecture elements to answer questions about why a project needs a review, which business capabilities are impacted, which applications, data, technology stacks, and security risks are involved, which architectural viewpoints should be applied, which deliverables are required, what decisions are made, and whether follow‑up actions are tracked. Structuring these questions moves architecture from static documentation to dynamic governance.

Current capabilities

EA Review – manages project reviews, meetings, actions, risks, and outcomes.

Application Portfolio Management – tracks application assets and their relationship to business capabilities.

Business Capability Mapping – connects capabilities, applications, projects, and governance.

Architecture Decision and Design – handles concerns, viewpoints, deliverable mapping, and decisions.

AI Architecture Self‑Assessment – assesses AI projects for architecture, security, compliance, and maturity.

Technology Stack Governance – oversees lifecycle, standards, and compliance of technology stacks.

Data Management – supports data classification, flows, master data, and data‑application relationships.

RBAC and Audit Logging – provides basic permission control and audit trails.

From repository to governance workflow

A repository records business capabilities, applications, data, technology, and interfaces, but alone it cannot support governance. Real governance requires a workflow that, for each project entering review, surfaces associated applications, business impact, sensitive data, new technology stacks, security/compliance/operational risks, AI self‑assessment needs, required viewpoints, necessary deliverables, and resulting decisions and actions. AxisRobo‑PAMP extends pure asset management toward workflow‑driven governance.

Risk‑aware viewpoint and deliverable selection

Selection of viewpoints and deliverables is driven by project size, complexity, change scope, business impact, data risk, technical risk, security risk, and compliance risk, reflecting methods such as PACT, AVDM, AADM, and ARCM. The principle is that more architecture description is not better; it must match risk, concerns, and stakeholder needs.

AI project governance

AI initiatives involve model selection, data sources, prompt design, vector databases, RAG architectures, external model services, third‑party APIs, privacy and hallucination risks, human review, and compliance requirements. These aspects cannot be fully covered by traditional security or application reviews, so the platform adds an AI Architecture Self‑Assessment to incorporate AI‑specific risks into a unified governance framework, aiming to keep AI innovation controllable within enterprise standards.

Technical implementation

Frontend: Next.js, React, TanStack Query, Ant Design, Tailwind CSS.

Backend: FastAPI, Python, SQLAlchemy, Pydantic, asyncpg.

Database: PostgreSQL.

Testing: pytest, API integration tests, Playwright E2E tests.

Architecture: browser → Next.js front end → FastAPI APIs → PostgreSQL via SQLAlchemy. Modules for permissions, audit, review, applications, capabilities, data, AI self‑assessment, and architecture decisions share a unified data model, providing simplicity, extensibility, and suitability for internal deployment.

Target audience

Enterprise architects interested in linking capabilities, application portfolios, reviews, and decisions.

Solution architects focusing on project reviews, risk, viewpoints, and deliverables.

Software architects wanting to capture design rationale and decisions.

AI architects seeking self‑assessment and governance maturity for AI projects.

Cloud or security architects needing to connect technology stacks, risk, security, and audit.

Data architects aiming to combine data classification, flows, applications, and governance processes.

Architecture governance committee members looking for more transparent, traceable review processes.

Open‑source location

https://github.com/axisrobo/AXISRobo-PAMP