X-tee Native Intelligence API

Domain-Specific Intelligence Layer (DSIL) - Federation-Ready Architecture

graph LR SP[SharePoint/Teams] EXT[CRM/DMS] WH[Graph Webhooks] ING[Ingestion Worker] IDX[(Vector Index)] AUTH[Auth Layer] ROUTER[Policy Router] RAG[RAG Engine] EVID[Evidence Logger] SPFX[SPFx Web Part] TEAMS[Teams/Bürokratt] QA[Query Coordinator] A[Org A DSIL] B[Org B DSIL] C[Org C DSIL] SP --> WH EXT --> ING WH -.-> ING ING --> IDX SPFX --> AUTH TEAMS --> AUTH AUTH --> ROUTER ROUTER --> IDX IDX --> RAG RAG --> EVID QA --> A QA --> B QA --> C style AUTH fill:#e8f4f8,stroke:#0066cc style ROUTER fill:#e8f4f8,stroke:#0066cc style RAG fill:#e8f4f8,stroke:#0066cc style EVID fill:#e8f4f8,stroke:#0066cc style A fill:#e6f7e6,stroke:#2d6a4f style B fill:#e6f7e6,stroke:#2d6a4f style C fill:#e6f7e6,stroke:#2d6a4f

Key Components & Value Propositions

🧠 DSIL (Domain-Specific Intelligence Layer)

API-first, policy-aware retrieval layer that returns security-trimmed, grounded answers with citations. Works single-tenant now, federation-ready from day one.

🔒 Policy Router

Enforces ACLs, MIP labels, and domain-specific rules at query time. Supports both local and federated source policies with full evidence logging.

🌐 X-tee Federation

Estonian X-Road integration for secure cross-organizational queries. Query coordinator routes to multiple DSIL endpoints and merges results.

📊 Evidence Logger

AI Act-compliant audit trails. Captures query traces, policy decisions, model/system cards, and post-market monitoring data for regulatory compliance.

🔄 Auth Abstraction

Same API endpoints for Phase 1 (AAD tokens) and Phase 2a (X-tee headers). No code rewrite needed - just configuration change.

🚀 Microsoft Gap We Fill

No API-first, policy-aware way to federate Q&A across tenants with grounded citations and audit evidence. Copilot remains tenant-scoped and app-embedded.