Complete Banking & Payments Platform Model

Below is a complete, validated enterprise architecture model representing a modern digital banking institution.

workspace corporate_ea "Corporate Architecture Model" {

    layer "Business Layer" {
        capability cap_payment "Payment Processing" {
            description "Core payment capabilities for online and retail"
            owner "Payments Team"
            tags ["core", "finance"]
            time "Invest"
            maturity "High"
            
            lifecycle {
                phase Run start "2022-01-01"
            }
            score {
                business_value 9
                tech_fit 8
            }
        }

        process proc_checkout "Customer Checkout" {
            description "End-to-end user checkout process"
            time "Invest"
            risk "Low"
            criticality "Mission-Critical"
            automation_level "High"

            relationships {
                this realizes cap_payment "Realizes payment capability"
                this triggers sys_payment_gateway "Triggers gateway for auth"
            }
        }
    }

    layer "Application Layer" {
        system sys_payment_gateway "Payment Gateway System" {
            description "Centralized payment routing system"
            version "3.4.0"
            status "Active"
            tier "Tier-1"
            deployment_model "Cloud"
            internet_facing true
            risk "Medium"
            criticality "Mission-Critical"

            app app_pay_api "Payment REST API" {
                technology "C# / .NET 10"
                api_type "REST"
                internet_facing true

                component comp_auth "Auth Handler" {
                    technology "OAuth2 / OIDC"
                }
            }

            agent ai_fraud_agent "AI Fraud Detection Agent" {
                model "gemini-2.5-flash"
                autonomy_level "High"
                human_in_loop false
                risk "Low"
            }

            relationships {
                app_pay_api reads data_transaction "Reads transaction logs"
                app_pay_api writes data_transaction "Writes transaction logs"
                ai_fraud_agent protects app_pay_api "Monitors API calls for anomalies" { mechanism "Monitoring" }
            }
        }

        data_object data_transaction "Transaction Record" {
            classification "Confidential"
            pii true
            phi false
        }
    }

    layer "Security & Governance Layer" {
        policy pol_pci_dss "PCI-DSS Governance Policy" {
            policy_type "Security"
            enforcement "Mandatory"
            priority "Critical"
        }

        control ctrl_tokenization "Credit Card Tokenization" {
            control_type "Preventive"
            control_category "Cryptography"
            implementation_status "Implemented"
            effectiveness "High"

            relationships {
                this governed_by pol_pci_dss "Enforces PCI governance" { status "Compliant" tags ["pci"] }
                this protects data_transaction "Protects card data"
            }
        }

        threat threat_data_exfil "Data Exfiltration Threat" {
            category "Info Disclosure"
            likelihood "Medium"
            impact "High"
            mitigation_status "Mitigated"

            relationships {
                this targets data_transaction
            }
        }
    }
}