The aZTF/SDF Reference Architecture

Paper 10 of the ten-paper aZTF Research Series. Version 1.0-preprint. An engineering agent must compare two design revisions using permitted test campaigns while a separate photograph-inspection task competes with an existing GPU calculation. Correctness depends on the exact inputs, rights, processing definition, resource state and human acceptance criteria. This synthetic case anchors a proposed reference architecture for the aZTF/Sovereign Data Fabric series and the author's Prime footprint. The architecture assigns bounded responsibilities to Legion, PumaMesh Harness, PumaMesh Portal, Dataloop and a selected Liqid/Kubernetes profile, with Keycloak in the core identity role. Physical hardware and network constraints precede logical rights. Operational models have no discovery or query path into protected deployment-specific administration; all models operate within externally fixed rails. Required-predicate failure withholds affected new effects and renewals, while already exposed actions retain an explicit uncertainty account. Authority, execution, effect and acceptance remain distinct records. Disconnected operation requires an approved local dependency and validity contract, including custody and independently qualified human recovery. Ten reasons for the protected boundary connect opacity, externally enforced rails, evidence integrity and resource eligibility to pinned Enterprise ATT&CK behaviors, with prerequisites and platform limits. Fifteen prospective evaluation families pair adverse cases with permitted work and independent observations. Two comparisons separate whole-workflow value from dynamic-allocation value; both retain accepted-task identities and complete cost bounds. The contribution is an integration and evaluation contract. A jointly supported deployment, physical eligibility, control efficacy and economic benefit remain to be established; all architecture experiments are NOT-RUN. Citation note: manuscript citations retain the exact companion editions reviewed with this paper. Current series releases are listed separately in the series catalog.