The Knowledge Layer: A Reference Architecture for Delegated AI Action in Regulated Institutions

AI capability is no longer the constraint on enterprise deployment. Admissibility is. Where the consequence of an action is low and a human stays accountable, the existing governance apparatus is sufficient, and AI is shipping there today. Where the consequence is material, the action is delegated, and it is not human-paced, the deployment gate refuses what model evaluation passed. The institution cannot show, at the moment of action, what the system relied on, with what standing, under whose authority, against which consequence class, with what contradiction state. This paper specifies a reference architecture for the layer that produces that account — the Knowledge Layer. The argument is that institutions already operate a mature apparatus for governing probabilistic actors — they govern humans — and that AI agents are a new class of player inside that same apparatus, differing in one respect that changes the engineering: they act at machine speed, so the moment-of-action gate must run at machine speed too. The layer sits between data governance and the dissolving application layer. It treats the claim — a single governed assertion carrying provenance, evidential warrant, scope, temporal validity, contradiction status, and named authority — as the atomic unit. It computes, for each claim, two governed axes of standing — evidential warrant, across five independently degrading dimensions, and authority, kept separate from the evidence score so that a well-corroborated claim from a low-authority source is not scored down for its source. It gates each consequential action against a consequence class the institution declares externally, and it records a replayable manifest of the basis the action rested on. The contribution is the work of naming this layer, defining it as one architecture rather than as features scattered across data platforms and application code, deriving the requirements it must satisfy, and specifying the mechanisms precisely enough to be built against and argued with. The paper states the architecture (three primitives, four concurrent jobs), the fifteen requirements and where each is enforced, the signed action manifest and what its replay does and does not establish, and the model-risk treatment of the layer itself. It is explicit about what a reference architecture does not establish — there is no implementation and no evaluation here — and about the open problems that remain. — AI-Assistance Disclosure: The authors used large language models as drafting, editing, and adversarial-review tools — including multi-model stress-testing of the argument — in preparing this paper. All concepts, claims, arguments, and final text were directed, reviewed, and approved by the authors, who take full responsibility for the content.