How fitchmultz/ai-control-plane works
AI Control Plane is a host-first Docker reference implementation for governing an AI gateway, operated through typed workflows in acpctl. The principal operator journey is to configure and validate a deployment, inspect runtime readiness and health, then use day-two workflows for keys, certificates, database recovery, and upgrades. Separate governance and policy evaluation, telemetry/reporting, and evidence-generation capabilities support that operational loop. The excerpts show selected service calls; README capability links document additional workflows whose internal wiring was not sampled, so those connections are not inferred.
Main entry points: main.go acpctl CLI · executor.go Upgrade and rollback · evidence.go Readiness evidence · validation.go Configuration validation
Components 25
Operator workflows
- acpctl CLI
cmd/acpctl/main.go - Onboarding
internal/onboard/verify.go
Runtime operations
- Gateway client
internal/gateway/client.go - PostgreSQL services
internal/db/runtime_service.go - Database recovery
internal/db/admin_service.go - Certificate lifecycle
internal/certlifecycle/storage.go - Upgrade and rollback
internal/upgrade/executor.go - Host deployment
internal/hostdeploy/runner.go - Docker operations
internal/docker/compose.go
Governance and policy
- Configuration validation
internal/validation/validation.go - Governance contracts
internal/contracts/governance.go - Policy evaluation
internal/policyengine/workflow.go - Evidence ingest
internal/ingest/workflow.go - Role controls
internal/rbac/package.go
Evidence and reporting
- Runtime status
internal/status/package.go - Operator reporting
internal/operatorreport/render.go - Performance baseline
internal/performance/baseline.go - Readiness evidence
internal/readiness/evidence.go - Assessor packet
internal/assessor/packet.go - Pilot closeout
internal/closeout/bundle.go - Chargeback reporting
internal/chargeback/input.go - Release bundles
internal/bundle/builder.go
Shared services
- Runtime configuration
internal/config/database.go - Process execution
internal/proc/exec.go
Other components
- Operator
Connections 34
- Operator → acpctl CLI: runs workflows
README.md - acpctl CLI → Onboarding: starts onboarding
- acpctl CLI → Configuration validation: runs validation
README.md - acpctl CLI → Runtime status: checks status
README.md - acpctl CLI → Policy evaluation: evaluates policy
README.md - acpctl CLI → Chargeback reporting: renders reports
README.md - acpctl CLI → Database recovery: runs recovery
README.md - acpctl CLI → Certificate lifecycle: manages certificates
README.md - acpctl CLI → Upgrade and rollback: runs upgrades
README.md - acpctl CLI → Readiness evidence: builds evidence
README.md - acpctl CLI → Assessor packet: builds packets
README.md - acpctl CLI → Pilot closeout: builds closeout
README.md - acpctl CLI → Release bundles: builds bundles
README.md - Onboarding → Gateway client: verifies gateway
internal/onboard/verify.go - Onboarding → Configuration validation: validates setup
internal/onboard/verify.go - Gateway client → Runtime configuration: loads settings
internal/gateway/client.go - PostgreSQL services → Runtime configuration: resolves database mode
internal/config/database.go - Database recovery → Process execution: runs database commands
internal/db/admin_service.go - Certificate lifecycle → Docker operations: executes in container
internal/certlifecycle/storage.go - Certificate lifecycle → Process execution: restarts container
internal/certlifecycle/storage.go - Runtime status → PostgreSQL services: collects database status
- Policy evaluation → Evidence ingest: uses evidence input
internal/policyengine/workflow.go - Policy evaluation → Role controls: loads role context
internal/policyengine/workflow.go - Governance contracts → Configuration validation: uses validation
internal/contracts/governance.go - Operator reporting → Runtime status: renders status
internal/operatorreport/render.go - Readiness evidence → Process execution: executes gates
internal/readiness/evidence.go - Readiness evidence → Release bundles: verifies bundle
internal/readiness/evidence.go - Upgrade and rollback → PostgreSQL services: checks runtime
internal/upgrade/executor.go - Upgrade and rollback → Database recovery: snapshots database
internal/upgrade/executor.go - Upgrade and rollback → Host deployment: applies deployment
internal/upgrade/executor.go - Upgrade and rollback → Configuration validation: validates config
internal/upgrade/executor.go - Performance baseline → Runtime configuration: loads settings
internal/performance/baseline.go - Assessor packet → Readiness evidence: requires evidence
internal/assessor/packet.go - Pilot closeout → Readiness evidence: packages evidence
internal/closeout/bundle.go