Technical Architecture

Open-Source Backbone. Domain-Specific Intelligence.

Reflex is built on Temporal and LangGraph — MIT-licensed foundations you can inspect, audit, and extend. The intelligence layers on top are what make it an autonomous workflow engine.

System Diagram

Five Layers. One Pipeline.

Every workflow traverses all five layers sequentially. Each layer has a single responsibility and a well-defined contract with the next.

Intent Layer
LLM + Domain Models

Natural language understanding tuned for security, network, compliance, and telecom domains. Converts human intent into structured action graphs.

Planning Layer
LangGraph Multi-Agent

Multi-agent reasoning graph decomposes intent into ordered, parallelizable steps with dependency mapping and conflict resolution.

Simulation Layer
Digital Twin Engine

Full blast radius analysis against a digital twin of your environment. Predicts side effects, validates rollback paths, and runs 12+ pre-flight checks.

Execution Layer
Temporal (MIT)

Durable workflow execution with checkpointing, automatic retries, crash recovery, and human-in-the-loop approval gates at any step.

Verification Layer
Causal AI + SCMs

Post-execution outcome verification using Pearl's do-calculus. Automated self-correction if verification fails, plus audit trail generation.

Layer 1

Intent Layer: LLM + Domain Models

NL Parsing with Domain Tokenization

Custom tokenizers trained on security advisories, network RFCs, compliance frameworks, and telecom standards. Understands vendor-specific terminology natively.

Trigger Detection

Identifies trigger types automatically: event-driven (alert fires), scheduled (cron), or conditional (metric threshold). Maps to appropriate execution scheduling.

Action Extraction with Parameter Mapping

Extracts structured actions from free-form text. Maps parameters to typed schemas with validation — IP ranges, CIDR blocks, policy names, user identifiers.

Integration Resolution

Resolves abstract actions to specific vendor APIs. 'Block the IP' becomes a CrowdStrike containment call, a Palo Alto firewall rule, or an AWS security group update — depending on your stack.

Layer 2

Planning Layer: LangGraph Multi-Agent

Multi-Agent Reasoning Graph

LangGraph (MIT license) enables specialized agents for each domain — security, network, identity, compliance — that collaborate on a shared reasoning graph.

Step Decomposition with Dependency Mapping

Breaks complex intent into atomic steps with explicit dependency edges. Each step has typed inputs, outputs, preconditions, and postconditions.

Parallelization Detection

Automatically identifies which steps can run concurrently. Independent actions execute in parallel; dependent steps are sequenced with proper ordering.

Conflict Resolution and Ordering

Detects conflicting actions (e.g., enabling and disabling the same policy) and resolves them using domain-specific priority rules and temporal ordering.

Layer 3

Simulation Layer: Digital Twin Engine

Blast Radius Analysis

Maps every proposed change to affected systems, users, services, and dependencies. Quantifies impact scope before any action touches production.

Side-Effect Prediction

Uses causal graph traversal to predict downstream effects. Identifies cascading failures, permission inheritance changes, and routing topology shifts.

Rollback Path Generation

Generates and validates complete rollback plans for every step. Ensures reversibility before execution begins — including state snapshots and dependency ordering.

Pre-Flight Check Suite

12+ automated checks run before execution: credential validity, API reachability, rate limit headroom, change window compliance, approval status, and more.

Layer 4

Execution Layer: Temporal (MIT)

Durable Execution with Checkpointing

Every workflow step is durably persisted. Temporal's event-sourced execution model guarantees exactly-once semantics, even across process restarts.

Automatic Retries with Exponential Backoff

Transient failures are retried automatically with configurable backoff policies. Permanent failures trigger rollback or escalation — never silent drops.

Crash Recovery

If the execution engine crashes mid-workflow, Temporal resumes exactly where it left off. No re-execution of completed steps. No orphaned state.

Human-in-the-Loop Approval Gates

Insert approval gates at any step. Workflows pause, notify via Slack/Teams/PagerDuty, and resume only after human confirmation. Timeout policies prevent stale approvals.

Layer 5

Verification Layer: Causal AI + SCMs

Post-Execution Outcome Verification

After every workflow completes, verification checks confirm the intended outcome was achieved. Compares expected state against actual state across all affected systems.

Causal Analysis (Pearl's do-calculus)

Applies structural causal models to determine whether the executed actions actually caused the observed outcomes — not just correlated with them.

Self-Correction

If verification fails, Reflex automatically generates and executes a remediation plan. Falls back to human escalation only when auto-remediation confidence is below threshold.

Audit Trail Generation

Every decision, action, and verification result is logged in an immutable audit trail. Maps to compliance frameworks: PCI-DSS, SOX, HIPAA, ISO 27001, NIST.

Integrations

Integration Architecture

Reflex connects to your existing stack through typed, versioned adapters. Every integration is tested against the vendor's latest API release.

Security

CrowdStrike
Palo Alto
SentinelOne
Okta

Network

Nokia SR Linux
Cisco
Juniper
Arista

Cloud

AWS
Azure
GCP
Oracle

Communication

Slack
Teams
Jira
PagerDuty

Telecom

SS7 Gateway
SIM Management
Diameter
HLR/HSS

Compliance

PCI-DSS
NIST
CIS
SOX
HIPAA
ISO 27001
Open-Source Foundation

Built on Auditable Infrastructure

Every core engine component is open-source with permissive licensing. No vendor lock-in on the execution layer.

ComponentLicensePurpose
TemporalMITDurable workflow execution
LangGraphMITMulti-agent reasoning
OpenTelemetryApache 2.0Observability and tracing
DoWhyMITCausal inference (verification)

Ready for the Technical Deep-Dive?

Schedule a 45-minute architecture walkthrough with our engineering team. We will map Reflex to your specific stack and compliance requirements.