Enterprise Agent Architecture

Enterprise Architecture Has Four Domains. Agentic Enterprises Need a Fifth.

Agents are not a new application tier. They are a new class of actor — a digital workforce that holds delegated authority, acts autonomously, and composes tools on its own. Enterprises are deploying that workforce into production with no architecture for it.

Michael K. Saleme — Enterprise Agent Architect

Read the framework Assess your readiness

A reference model for governing a workforce of humans and agents — grounded in a live governed reference environment.

The fifth domain
The white space

Every framework models what the enterprise builds. None models the actor.

A category no established architecture practice has ever had to claim — until now.

TOGAF gives us domains and a development method. Zachman gives us a classification grid. FEAF gives the public sector a reference model. SABSA gives security a layered, business-driven structure. COBIT governs IT; NIST frames risk and control. Each is mature, each is rigorous, and each answers a version of the same question: how do we describe what the organization builds and runs so we can govern it deliberately?

Every one of them models the same subject — the systems, data, processes, and technology the enterprise builds and operates. Not one of them models a non-human actor that holds delegated authority and acts on its own.

That actor now exists in production. An agent is given credentials, granted scopes, handed a goal, and left to decide which tools to call and in what order — at machine speed, without a human in the loop on every step. Filing it under the application layer is a category error: a service does what it is told, an agent decides what to do. The domain that should own it is unclaimed. Enterprise Agent Architecture is the discipline that claims it.

The reference model

The fifth domain, described at four altitudes.

EAA does not replace the classic spine of enterprise architecture. It extends it with the one domain the others never needed: the agent workforce itself.

Business Information Application Technology Security (cross-cut) + Agent Workforce
1

Agent / Workforce

What agents exist, what roles they hold, what authority is delegated to them, and how they are provisioned, rotated, and retired across a lifecycle.

2

Capability / Tool

What each agent is actually allowed to touch — the tools, APIs, and data it can reach, scoped to least privilege. The tool registry is the attack surface.

3

Control Plane

Where written policy meets running behavior — the enforcement point that allows, denies, or contains an action at the moment it is attempted.

4

Governance

Who owns the agent workforce, who audits it, and who is accountable when an autonomous actor acts. The questions every architect already knows how to ask — now of a worker that happens to be software.

See the full reference model
Proof

Evidence, not theory.

The framework is not a whitepaper waiting for an implementation. The implementation came first. The framework is the account of what it took to make it work.

Reference implementation

HRAO-E — a governed autonomous organization

A workforce of autonomous agents operates in a live reference environment under a written constitution, a six-gate architecture, delegated authority, and audit trails — a working instance of the four-layer model, not a diagram of one.

See the work on GitHub →
The runtime primitive

constitutional-agent on PyPI (v0.8.0)

The control-plane primitive extracted from that system — policy enforced at runtime, not documented and hoped for. The package recorded 300+ downloads during August 2026.

View the package on PyPI →
The research trail

A traceable body of work

A 604-test agent-security harness on main, verified by the project's own counting script, plus a public research record and three NIST submissions. Open and falsifiable: artifacts you can read, install, and run.

Follow the trail on GitHub → See the dated facts and evidence →
Who

Why this practice, from this architect.

Michael K. Saleme — Enterprise Agent Architect

Thirty years architecting enterprise systems across Oil & Gas, Energy and Utilities, and Consumer Packaged Goods. The recurring work has always been the same four concerns: identity, integration, authorization, and control — establishing who an actor is, connecting it to the systems it needs, deciding what it is permitted to do, and constraining it when it acts.

An autonomous agent raises those exact four questions a new integration user, service account, or B2B partner connection always has — only now the actor reasons, composes tools, and acts on its own. The principles transfer; the actor is new.

Agent governance is enterprise architecture applied to a new substrate — the same discipline, three decades deep, now on the newest layer.

The series

The Case for a Fifth Domain

A five-part core series — a position paper and the four chapters that build on it — plus practitioner extensions that put the model to work, compounding toward a contribution to The Open Group and the Cloud Security Alliance.

Part 0 The Case for a Fifth Domain — the position paper Published
Part 1 The Agent / Workforce Layer — identity and delegated authority Published
Part 2 The Capability / Tool Layer — the tool registry is the attack surface Published
Part 3 The Control Plane — where policy meets runtime, and the N/A third state Published
Part 4 The Governance Layer — ownership, audit, and accountability for a non-human actor Published

Practitioner extensions

The core series draws the model. These take it to a specific framework, standard, or diagnostic.

Extension A Maturity Model for the Fifth Domain — from ad hoc to governed Published
Extension Mapping EAA Onto A2A, MCP, x402, OWASP ASI, and NIST AI RMF Published
Extension The Board-Level Diagnostic Questions Published
Extension Mapping EAA Onto TOGAF and ArchiMate — extending, not replacing Published
Start with the position paper

Assess your enterprise's agent-governance maturity.

Do you know what your agents are, what they can touch, what stops them at runtime, and who answers for them? Most organizations cannot yet answer all four. Knowing which layer is weakest is where the work starts.

Take the governance stress test Read the framework

Running an agent workforce and want a second set of eyes on the governance layer? This is a research collaboration, not a consulting engagement — free, hands-on, and small on purpose. Start a conversation →