Skip to main contentSkip to chat inputSkip to workbench
ChromaFlow
System Architecture

Agentic workflow control plane

A governed execution layer for turning prompts, files, and operational events into apps, approvals, system updates, and auditable workflow actions.

Topology

Agent graph + systems of record

Controls

Approvals, policy, audit

Output

Apps, records, workflow actions

INPUT LAYERIngress and artifactsORCHESTRATION LAYERPlanning and schedulingAGENT LAYERSpecialized parallel workersTOOLING LAYERExternal systems and APIsRUNTIME / DEPLOYMENT LAYEREdge execution and targetsNatural Language…UI / APIFile UploadsArtifactsAPI CallsProgrammaticMulti-Agent Cont…Control planeTask PlannerSpec → tasksDependency Resol…DAG builderExecution GraphSchedulerFrontend AgentRoutes / UIBackend AgentAPIs / schemaInfra AgentDeploy / runtimeAI AgentModel opsQA AgentTestsSecurity AgentPolicyGitHubRepo / PRSupabasePostgres / AuthCloudflarePages / WorkersDatabasesPostgres / KVCI/CDChecks / gatesInfrastructure A…ProvidersEdge RuntimesLow latencyWorkersComputeDurable ObjectsStateProduction TargetsDeploySIGNAL FLOWControlDataExecutingComplete

Hover or tap nodes to inspect. Click to pin selection.

Execution Semantics

  • Planner emits tasks with explicit inputs/outputs and acceptance checks.
  • Resolver materializes a DAG and identifies safe parallel regions.
  • Execution graph schedules work with deterministic handoff.
  • Agents operate under scoped tool and data contexts.

Integration Boundaries

  • Generated applications remain connected to review and deployment systems.
  • Partner platforms remain the core workflow or system of record.
  • Database primitives represent structured records and operational state.
  • External APIs provide validation, write-back, and notification surfaces.

Audit & Security

  • Tool boundaries enforce least-privilege scopes per agent.
  • Execution metadata supports traceability across plan → code → deploy.
  • Policy checks run as gates (secrets, dependencies, static analysis).
  • Runtime configuration via controlled infrastructure APIs.