Cobalt Ledger, slate light: one tinted-gray ground, two data inks, one typeface. This page is the working kit. It holds the colors, type, components, tables, chart variants, slide layouts, document and pamphlet templates, and the Word and PowerPoint style map. A document built from it satisfies the formatting instructions that repeat across federal solicitations before anyone edits a page.
Manrope Regular, 1-inch margins, single column. Steps to 12pt when the solicitation says 12pt.
Tables, captions and chart labels never go below 9pt, whatever the page limit pressure.
Read 01 before every submission — it is the only section a solicitation can override. Everything else is fixed for the organization: if a document needs something this kit does not contain, add it here first, then use it.
Every template on this page is drawn inside the constraints below. They come from the way agencies define a page and from the instructions that repeat across solicitations. None of them is a matter of taste.
| Rule | Setting in these templates |
|---|---|
| Sheet | 8.5″ × 11″, one side = one page. Foldouts count as the equivalent number of 8.5 × 11 pages. |
| Margins | 1″ on all four sides. Nothing but the header, footer and page number lives outside it. |
| Body type | 11pt Manrope, single column, 1.15 leading. Not smaller than 12pt where a solicitation defines a page that way. |
| Tables, figures, captions | 9pt floor. Many instructions permit smaller type in tables and graphics; 9pt is where readability stops. |
| Line density | No more than six lines of body text per vertical inch. |
| Page numbers | Every page, bottom right, Volume · Section · Page x of y. |
Section L governs. If it names a font and size — 12pt Times New Roman is the common one — set the document in it and keep only the structure, color and graphics from this system. A non-compliant page count or typeface can put a proposal out without review.
When a face is mandated, map it: body → Times New Roman 12 or Arial 11; headings → the same face, bold, one step up; tables and captions → the same face at 9–10pt. Never mix the mandated face with Manrope in the same volume.
If any volume contains Controlled Unclassified Information, it carries a CUI banner marking centered at the top and bottom of every page, portion markings where the agency requires them, and a designation indicator block on the first page naming the controlled-by office, category, distribution limits and point of contact. CUI markings are separate from the proprietary legend and never replace it. Classified work does not use these templates.
Usually the cover, table of contents, tab dividers, acronym list, cost volume and resumes — but only when the solicitation says so. The cover and divider templates here carry no body content for that reason.
Sections L and M belong to negotiated procurements under FAR Part 15. Commercial-item solicitations issued on an SF-1449 under FAR Part 12 put the instructions and evaluation basis in addenda to the form, and simplified acquisitions may carry only a quote instruction in the RFQ text. The compliance matrix works the same way in all three cases: cite whatever the document calls its instructions, paragraph by paragraph.
Understanding, technical approach, management approach, staffing, transition, risk. Page-limited.
CPARS-backed references on the past-performance sheet layout, one per page.
CLIN tables, basis of estimate, assumptions. Normally not page-limited.
SF-33/SF-1449, representations and certifications, subcontracting plan.
Every volume uses the same cover, divider, header/footer and figure-numbering conventions, so a reviewer moving between volumes never has to re-learn the document.
Prism is one solid V split down the vertex: cobalt on the leading leg, ember on the trailing leg, with the seam on the center line. It is a single letterform rather than two shapes. The lockup is stacked, with the word spelled out beneath the wedge. Nothing is ever set beside the glyph.
Lockup no smaller than 16px wedge height (≈1rem setting). Below that the seam closes and the two legs merge.
Lockup no smaller than 0.25 in wedge height. On coated stock the seam holds; on uncoated, go one step larger.
Wedge alone, no word, on card or ink. 16 · 32 · 180 · 512px. The word is implied by context.
Also never: a tagline inside the clear space, the lockup on a photograph without a solid panel behind it, a shadow or outline on the wedge, or a reproduction with a gap between the legs.
One tinted cool gray carries every surface. Cobalt and ember carry every mark. All neutrals sit at OKLCH hue 260–262, which is cobalt's own hue at a whisper of chroma, so the grays belong to the brand rather than sitting next to it. No pure white, no pure black, no untinted gray.
| Foreground | on ground #E3E6EC | on surface #F1F3F7 | on card #FCFDFF | on ink #1A1E26 | Verdict |
|---|---|---|---|---|---|
| ink #1A1E26 | 13.4 | 15.0 | 16.4 | — | AAA · all text |
| body #2C3038 | 10.6 | 11.9 | 13.0 | — | AAA · all text |
| muted #585E68 | 5.2 | 5.9 | 6.4 | — | AA · captions, labels |
| cobalt #0E52BD | 5.7 | 6.4 | 7.0 | 1.5 | AA text · never on ink |
| ember-deep #BE5000 | 3.9 | 4.4 | 4.8 | 3.5 | AA on card/surface only |
| ember #D56D1D | 2.8 | 3.1 | 3.4 | 4.8 | Marks and large type only |
| ember-light #F69557 | 1.6 | 1.8 | 2.0 | 7.4 | Dark grounds only |
| card #FCFDFF | — | — | — | 16.4 | Reversed text |
| ok #246A47 · err #952732 | 5.2 · 6.4 | 5.9 · 7.2 | 6.4 · 7.9 | — | AA · always with a glyph |
Two pairs are excluded and must never be used: cobalt on ink (1.5:1) and ember-light on any light surface (under 2:1). Warning amber is a fill only. It carries ink text at 8.5:1 and is never itself a text color.
Adjacent series slots always oppose blue against orange. That is the one axis that survives protanopia, deuteranopia and tritanopia (adjacent ΔE ≥ 65 in all three, CIE76 on Viénot simulation). Same-family slots separate on lightness alone, so scatter, bubble, map and small-multiple charts cap at three series (slots 1, 2 and 5) or facet instead. Status hues never appear in a chart, so a status can never impersonate data.
Manrope for everything — wordmark, headings, body, slides, UI. JetBrains Mono for eyebrows, labels, code, figure numbers and tabular figures. No third face. Figures set tabular wherever they stand in a column.
| Role | Face & weight | Size / leading | Space before / after | Mandated-font fallback |
|---|---|---|---|---|
| Volume title | Manrope ExtraBold 800 | 28 / 30pt | — / 12pt | Times New Roman Bold 20pt |
| Heading 1 (section) | Manrope Bold 700 | 16 / 19pt | 18 / 6pt | Times New Roman Bold 14pt |
| Heading 2 | Manrope Bold 700 | 13 / 16pt | 12 / 4pt | Times New Roman Bold 12pt |
| Heading 3 | Manrope SemiBold 600 | 11.5 / 14pt | 10 / 3pt | Times New Roman Bold Italic 12pt |
| Body | Manrope Regular 400 | 11 / 14pt | 0 / 8pt | Times New Roman 12 / 14pt |
| Bullet L1 / L2 | Manrope Regular 400 | 11 / 14pt | 0 / 4pt | Times New Roman 12pt |
| Table header | Manrope Bold 700 | 9.5 / 12pt | 3 / 3pt | Arial Bold 9pt |
| Table body | Manrope Regular 400 | 9.5 / 12pt | 2 / 2pt | Arial 9pt |
| Figure / table caption | JetBrains Mono 500 | 9 / 11pt | 4 / 8pt | Arial 9pt |
| Header / footer | JetBrains Mono 400 | 8.5 / 10pt | — / — | Arial 8.5pt |
Caption convention: Figure 3-2. Continuous ATO pipeline. — volume-section-number, period, sentence case, one line where possible. Tables take Table 3-2. in the same pattern and sit above the table; figure captions sit below the figure. Every figure and table is called out in the body text before it appears.
One 4px spacing scale for screens, one 12-column page grid for documents, one 12-column grid for slides. Radius and elevation have three steps each. A value that is not on these scales is an error rather than a choice.
| Surface | Grid | Gutter | Margin |
|---|---|---|---|
| Proposal page (8.5×11) | 12 col · 0.542in each | 0.17in | 1.0in |
| Slide (13.33×7.5) | 12 col · 0.96in each | 0.2in | 0.9in / 0.75in |
| Tri-fold panel (3.66×8.5) | 4 col | 0.14in | 0.3in |
| Web / kit page | 12 col · max 1180px | 16px | 40px |
Proposal body copy is single-column at a 6.5in measure — two columns save space but break screen reading and reflow badly for accessibility. Tables and figures may span the full measure; nothing may sit in the margin.
Chips, table cells, chart marks, document pages.
Cards, charts, callouts, slide frames.
Sections and full-width panels only.
Contact edge only — table wrappers, inline blocks.
Cards, charts, document and slide thumbnails.
Sections — the top of the stack. Nothing sits above it.
Elevation is always a hairline plus a shadow, never a color change. The steps between ground, panel and card are only 4 and 3 points of OKLCH lightness, so the border does the separating.
Photographs are evidence: real people, real screens, real facilities. Until the real asset exists, the striped placeholder stays in the layout with the required dimensions written on it. An empty frame is honest. A stock photograph implies something the company has not shown.
Sits in a 1px hairline frame, radius-sm, no filter, no duotone.
Crop to the region under discussion; annotate with cobalt callouts, never red circles.
Geometric stand-ins shown. The standard is Lucide at 1.75px stroke in a 24px box, currentColor — paste the real path data from lucide.dev; never filled, never two-tone, never a brand logo.
Every placeholder states the artifact and the minimum pixel size. A layout may ship to review with placeholders; it may never ship to a customer with one.
Do not use agency seals, logos or personnel photographs in a proposal or on marketing material — endorsement implications, and most agencies prohibit it outright. Name the customer in words instead.
Status chips always carry a glyph and a word
Cobalt label. Used for the claim you want an evaluator to carry out of the page.
Ember label. Anything the government must confirm, or that prices depend on.
Error label. Paired always — never a risk without its mitigation in the same box.
One ember moment per surface — the rule under the number is this card's.
GSA · 47PB0224D0019
Continuous ATO pipeline for a 240-user program office; 100% inspection pass rate across four option years.
Figure 4-1. Placeholder for a real graphic.
Cards are bordered and unfilled. The only filled surfaces in the system are the cobalt button, the ember ground, the ink ground and chart marks. Elevation is a hairline plus a two-layer shadow, never a color change.
Nine table patterns cover the proposal set. All share one rule set: a 2px cobalt rule under the header, hairline row rules, 3% ink zebra striping, tabular figures right-aligned, header text never rotated, and no vertical rules. Every table carries a numbered caption above it.
| Section L ref. | Requirement | Section M factor | Where addressed | Status |
|---|---|---|---|---|
| L.3.1(a) | Technical approach to continuous delivery | M.2 Factor 1 | Vol I § 2.1, pp. 4–7; Figure 2-1 | ✓ Full |
| L.3.1(b) | Authority to operate within 90 days | M.2 Factor 1 | Vol I § 2.3, pp. 9–11; Table 2-2 | ✓ Full |
| L.3.2 | Key personnel and staffing plan | M.3 Factor 2 | Vol I § 3.1, p. 14; resumes at Tab C | ✓ Full |
| L.3.4 | Transition-in within 30 days of award | M.4 Factor 3 | Vol I § 4.2, p. 19; Figure 4-1 | ▲ Partial |
| L.4.1 | Small business subcontracting plan | M.5 | Vol IV § 2, submitted separately | N/A — sub |
Fill the "where addressed" column with page numbers only after the final page break. The status chip is the internal control. Nothing ships with a partial or a gap left in the matrix.
| CLIN | Description | Type | Qty | Unit | Extended |
|---|---|---|---|---|---|
| 0001 | Platform engineering — labor | FFP | 12 | $41,600 | $499,200 |
| 0002 | Cloud infrastructure — pass-through | CR | 12 | $18,400 | $220,800 |
| 0003 | ATO sustainment & audit support | FFP | 12 | $9,750 | $117,000 |
| 0004 | Surge — not-to-exceed | T&M | 1 | $150,000 | $150,000 |
| Base period total | $987,000 | ||||
| # | Milestone | Day | Evidence |
|---|---|---|---|
| M1 | Kickoff & access provisioned | 5 | Signed in-brief |
| M2 | Environment inventory complete | 14 | Inventory register |
| M3 | Pipeline running in government cloud | 30 | First green build |
| M4 | ATO package submitted | 60 | Package receipt in the authorization system |
| M5 | Full operations | 90 | Ops acceptance memo |
| Activity | PM | Lead Eng | ISSO | COR |
|---|---|---|---|---|
| Sprint planning | A | R | C | I |
| Release approval | C | R | A | I |
| Control assessment | I | C | R | A |
| Invoice submission | R | I | — | A |
| ID | Risk | Prob. | Impact | Mitigation | Owner |
|---|---|---|---|---|---|
| R-01 | Government access not provisioned by day 5 | Med | High | Pre-award access request drafted; read-only start path defined so work begins without production credentials. | PM |
| R-02 | Control inheritance rejected by the AO | Low | High | Body of evidence pre-staged in the authorization system of record; two prior AO acceptances of the same package cited in § 2.3. | ISSO |
| R-03 | Key personnel attrition during transition | Low | Med | Named alternates cleared and briefed; retention incentive through the first option year. | PM |
| PWS ref. | Requirement | Approach § | Deliverable |
|---|---|---|---|
| C.5.1 | Continuous integration | 2.2.1 | Pipeline as code |
| C.5.2 | Monthly status reporting | 3.4 | MSR, CDRL A001 |
| C.5.3 | Security control assessment | 2.3.2 | SAR, CDRL A004 |
| C.6.1 | Transition-out support | 4.4 | Transition plan |
| Term | Definition |
|---|---|
| ATO | Authority to Operate |
| CDRL | Contract Data Requirements List |
| COR | Contracting Officer's Representative |
| CPARS | Contractor Performance Assessment Reporting System |
| PWS | Performance Work Statement |
| UEI | Unique Entity Identifier |
| Capability | This approach | Lift-and-shift | Status quo |
|---|---|---|---|
| Deploys per week | ✓ 40+ | ▲ 4 | ⬣ 0.5 |
| Audit trail per action | ✓ Yes | ⬣ No | ⬣ No |
| Government owns source | ✓ Yes | ▲ Partial | ⬣ No |
| Month | Availability | P1 incidents | MTTR (min) | Releases |
|---|---|---|---|---|
| Oct | 99.982% | 0 | 18 | 164 |
| Nov | 99.994% | 1 | 22 | 171 |
| Dec | 99.971% | 1 | 31 | 148 |
| Jan | 100.000% | 0 | — | 183 |
| Mean | 99.987% | 0.5 | 24 | 167 |
Twelve chart types, one palette, one order. Every chart carries a monospaced caption, a legend when it has more than one series, and axis labels at 9pt or larger. Grid lines are hairlines or absent. No 3D, no shadows on data marks, no decoration, and never more than six series.
Figure 6-1. One series: cobalt only.
Figure 6-2. Two series always oppose blue and orange.
Figure 6-3. Ranked descending, labels left.
Figure 6-4. Largest share always at the left.
Figure 6-5. Dash pattern doubles the encoding.
Figure 6-6. Fill at 18% — one series only.
Figure 6-7. Four slices maximum, largest first, clockwise from 12.
Figure 6-8. Sequential ramp only — never the series palette.
Figure 6-9. Critical path in ember; everything else cobalt.
Figure 6-10. Base 62 → +16 → +11 → −9 → total 80. The only chart where ok/error hues are permitted, because the sign is the data.
Figure 6-11. Ink tick is the threshold; ember means the target is beaten.
Figure 6-12. Scatter caps at three series (slots 1 · 2 · 5). Sparklines carry no axis.
Chart rules that hold everywhere: label the axis in words and units; put the takeaway in the caption, not in a title; sort categories by value unless time or a required order says otherwise; annotate the one number the reader should remember rather than labelling every mark; and never encode a variable in color alone — pair it with order, position, a dash pattern or a direct label.
Four diagram patterns cover the graphics a proposal needs. All are built from hairline boxes, cobalt rules and one ember accent. No gradients, no SmartArt, no isometric clip art. Each drops into slide layout 11.5 or 11.7 and into the body-page figure frame without resizing.
Figure 10-1. Continuous ATO pipeline — the control gate is the discriminator.
Figure 3-1. Key personnel solid, shared roles dashed, FTE on every node.
Figure 4-2. Swimlane — who acts, when, and where responsibility is shared.
Ship software continuously into an accredited boundary, with audit evidence a COR can read without contractor help.
$987K base · 90-day transition
A. Rivera, PM · (202) 555-0143
UEI ABC123DEF456 · CAGE 9XYZ8
Need, approach, past performance, price — clockwise from top left. Reviewers scan quad charts in that order; changing it costs you the read.
If the approach box needs a figure, it takes the process flow at 10.1 shrunk to three steps. Never two graphics on a quad chart.
9pt body, 8pt for the price line, 10pt bold box headings in JetBrains Mono caps. If it does not fit at those sizes, cut words.
A deck is built only from these twelve layouts. Type never drops below 24px at 1920×1080, each slide carries one idea, and the takeaway is written as the headline rather than left for the presenter to supply. Section dividers are the only dark or ember surfaces in a deck.
The diagram patterns in Section 10 drop straight into 11.5 (headline + bullets, diagram replacing the list) and 11.7 (chart + takeaway) without resizing — they are drawn on the same grid.
Deck rules: 16:9 at 1920×1080; the footer carries the wordmark left and page / total right; no slide numbers on dividers or the title; every chart on a slide reuses the palette and order from Section 09; and an oral-presentation deck carries no animation, because most solicitations forbid it.
Every page is 8.5 × 11 with 1-inch margins. The four proposal pages below share one header, one footer and one figure-numbering scheme; the capability statement and the pamphlet are standalone marketing pieces built from the same parts.
Two different legends, and they are not interchangeable. The title page carries the full restriction at FAR 52.215-1(e)(1), reproduced verbatim, with the restricted sheets listed. Every restricted sheet carries the short legend at FAR 52.215-1(e)(2) in its footer: "Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal." Mark only the sheets that genuinely contain proprietary data; marking the whole volume weakens the claim and irritates evaluators. Cover pages, dividers and the acronym list carry no page number when the solicitation excludes them from the count — but they still carry the legend.
Build the .dotx and .potx from this map and the two files will stay in step with the web system. Style names are literal — use them exactly, so a document can be re-styled by swapping the template instead of re-formatting the text.
| Style name | Based on | Font / size / color | Paragraph | Used for |
|---|---|---|---|---|
| V-Title | — | Manrope ExtraBold 28pt · ink | Left, 30pt line, 12pt after, keep with next | Volume cover title |
| V-Heading1 | Heading 1 | Manrope Bold 16pt · ink | 18pt before / 6pt after, outline level 1, no widow | Numbered sections (2.1) |
| V-Heading2 | Heading 2 | Manrope Bold 13pt · ink | 12 / 4pt, level 2 | Sub-sections (2.1.1) |
| V-Heading3 | Heading 3 | Manrope SemiBold 11.5pt · ink | 10 / 3pt, level 3 | Run-in topics |
| V-Body | Normal | Manrope Regular 11pt · body | Left, 14pt exact line, 8pt after, no first-line indent | All prose |
| V-Bullet1 / 2 | List Paragraph | Manrope Regular 11pt | 0.25″ / 0.5″ indent, en dash then hanging 0.2″ | Bullets — two levels only |
| V-Table-Header | — | Manrope Bold 9.5pt · ink | Cobalt 6% fill, 2pt cobalt bottom rule, repeat as header row | Table headers |
| V-Table-Body / V-Table-Num | — | Manrope Regular 9.5pt · JetBrains Mono for the numeric variant | Left / right aligned, hairline row rules, 3% zebra | Table cells |
| V-Caption | Caption | JetBrains Mono 9pt · muted | 4pt before / 8pt after, keep with previous | Figure and table captions |
| V-Callout-Disc / -Assume / -Risk | — | Manrope Regular 10pt in a bordered frame | Hairline box, 3pt left rule in cobalt / ember / error | The three callouts |
| V-Legend | — | JetBrains Mono 7.5pt · muted, all caps | Boxed, bottom of cover | Restrictive legend |
| V-Header / V-Footer | Header / Footer | JetBrains Mono 8.5pt · muted | Hairline above footer; page field right | Running head and foot |
| Setting | Value |
|---|---|
| Slide size | 16:9, 13.333 × 7.5 in (1920 × 1080 px) |
| Safe margin | 0.9 in left/right, 0.75 in top/bottom |
| Title placeholder | Manrope Bold 40pt, ink, top-aligned |
| Body placeholder | Manrope Regular 20pt, body, en-dash bullets, two levels |
| Eyebrow placeholder | JetBrains Mono 14pt, +0.18em tracking, cobalt, caps |
| Minimum type | 24px / 12pt anywhere on a slide; 18pt for chart labels |
| Footer | Wordmark left, page / total right, JetBrains Mono 12pt |
| Theme colors | TX1 #1A1E26 · BG1 #FCFDFF · A1 #0E52BD · A2 #D56D1D · A3 #4173B3 · A4 #8F3804 · A5 #5688BF · A6 #9E5300 |
Title · Section divider (ink) · Section divider (ember) · Agenda · Headline + bullets · Half-bleed image + text · Chart + takeaway · Table · Timeline · Three metrics · Quote · Closing. Delete every stock Office layout so no one can pick one.
Save both templates with Embed fonts in the file and embed only the characters used off. A government reviewer without Manrope installed otherwise sees Calibri and the page count changes — which is a compliance problem, not a cosmetic one.
No SmartArt defaults, no gradient fills, no drop shadows on data, no WordArt, no theme other than this one, no color outside the token set, and no auto-fit shrinking that pushes body text below the minimum size.
| Artifact | File name pattern | Export |
|---|---|---|
| Proposal volume | velocity_47QFLA26R0031_VolI_Technical_2026-08-30.pdf | PDF/A-2b, text-searchable, embedded fonts, no comments, flattened |
| Oral presentation | velocity_47QFLA26R0031_Orals_2026-08-30.pdf | PDF plus the .pptx if the solicitation asks for source |
| Capability statement | velocity_CapabilityStatement_2026-08.pdf | One page, text-searchable PDF, under 1 MB |
| Pamphlet / one-pager | velocity_OnePager_AgenticATO_2026-08.pdf | Print PDF with 0.125″ bleed; screen PDF without |
The Revised 508 Standards incorporate WCAG 2.0 Level AA by reference; this system is built to 2.1 AA, which is a superset. Body and heading text clears 4.5:1 on every surface here; large text and chart marks clear 3:1. Tag every PDF: real heading structure, table header rows marked as headers, alt text on every figure, reading order checked, and language set. A scanned or flattened image of text is not an accessible document.
Status carries a glyph and a word. Chart series carry order, position, a dash pattern or a direct label in addition to hue. The compliance matrix is readable in grayscale.
Describe the finding, not the shape: "release frequency rose from 44 to 96 per quarter between FY23 and FY26" — not "bar chart". Reuse the caption's takeaway sentence.
This page is the source of truth. When a token, a size or a rule changes, change it here first, then regenerate the .dotx, the .potx and the web theme from it. Record the date and version in the masthead so a proposal team can tell which kit produced a document.
The kit stays usable only if one person owns it and every change is recorded. This section is that record, with the checklist a volume passes before it leaves the building.
:root{
--ground:#E3E6EC; --surface:#F1F3F7; --card:#FCFDFF;
--ink:#1A1E26; --body:#2C3038; --muted:#585E68;
--line:#D4D8DD; --line-strong:#BABEC4;
--cobalt:#0E52BD; --hover:#003D9F; --visited:#455581;
--ember:#D56D1D; --ember-deep:#BE5000; --ember-light:#F69557;
--s1:#0E52BD; --s2:#D56D1D; --s3:#4173B3; --s4:#8F3804; --s5:#5688BF; --s6:#9E5300;
--q1:#013191; --q2:#0E52BD; --q3:#4275B9; --q4:#6897CD; --q5:#8EB6DC;
--ok:#246A47; --warn:#FFA449; --err:#952732;
--sans:'Manrope',system-ui,sans-serif; --mono:'JetBrains Mono',ui-monospace,monospace;
}
PowerPoint theme order: TX1 ink · BG1 card · A1 cobalt · A2 ember · A3 #4173B3 · A4 #8F3804 · A5 #5688BF · A6 #9E5300. Word theme colors use the same six accents in the same order, so a chart pasted between the two keeps its series colors.
One named owner for this file, the .dotx and the .potx. Changes land here first, then in the Office templates, then in the web theme — never the other way round.
Reviewed after every submission cycle and at least twice a year. Anything a proposal team had to invent mid-bid becomes a numbered pattern here.
A solicitation instruction always wins and needs no approval. Any other deviation — a new color, a new layout, a second face — needs the owner's sign-off and a line in the version history.
Deliberately absent from this kit: a second typeface, a dark mode for documents, decorative iconography, stock photography, animation in proposal decks, and any color outside the block in 15.1. Each was considered and refused. Adding one is a change to the system and needs the owner's sign-off.
Reference views for the architectures we propose most often, drawn in this system rather than in a stock diagramming style. Each view is provider-neutral first, then mapped to AWS, Azure and Google Cloud so the same figure can be retargeted without redrawing it. Service names are current at the version date and must be checked against the provider's government-region availability before a submission.
Rebuild them in draw.io on the same conventions: 1px hairline boxes at 6px radius, a 3px cobalt left or top rule to mark a layer, ember only on the element that carries the argument, orthogonal connectors with a single arrowhead, and text labels at 9pt minimum. Do not redraw provider icons. AWS, Microsoft and Google icon sets are trademarked and licensed for use as published, so either use the official set unmodified from the provider's own asset pack or name the service in text as these views do.
Figure 16-1. Seven-layer agentic reference architecture. Ember marks the three elements an evaluator asks about: who decides, what constrains the model, and what proves it happened.
| Layer | AWS | Microsoft Azure | Google Cloud |
|---|---|---|---|
| Edge & identity | API Gateway · WAF · IAM Identity Center · IAM roles | API Management · Front Door WAF · Microsoft Entra ID · managed identities | Apigee · Cloud Armor · Cloud Identity · IAM service accounts |
| Orchestration | Bedrock AgentCore · Step Functions · EventBridge · Lambda | Azure AI Foundry Agent Service · Durable Functions · Logic Apps · Service Bus | Vertex AI Agent Engine · Workflows · Cloud Run · Pub/Sub |
| Specialist agents | Bedrock Agents · Lambda tools · ECS/Fargate tasks | Foundry agents · Functions · Container Apps | Agent Engine reasoning agents · Cloud Run services · Cloud Functions |
| Model & safety | Amazon Bedrock models · SageMaker endpoints · Bedrock Guardrails | Azure OpenAI in Foundry Models · Azure ML endpoints · Azure AI Content Safety | Vertex AI (Gemini, third-party garden) · Model Armor · safety filters |
| Knowledge | Bedrock Knowledge Bases · OpenSearch Serverless vectors · Aurora pgvector · S3 | Azure AI Search vectors · Cosmos DB · Azure SQL · Blob Storage | Vertex AI Search · Vector Search · AlloyDB pgvector · Cloud Storage |
| Evidence | CloudTrail · CloudWatch · S3 Object Lock · Security Hub | Azure Monitor · Log Analytics · immutable blob policy · Microsoft Sentinel | Cloud Logging · Cloud Audit Logs · bucket retention lock · Security Command Center |
| Isolation | VPC · PrivateLink · KMS CMK · AWS GovCloud (US) | VNet · Private Link · Key Vault HSM · Azure Government | VPC Service Controls · Private Service Connect · Cloud KMS · Assured Workloads |
Two cautions for a technical volume. Model availability in government regions lags commercial regions, so name the model family and cite the region where it is authorized rather than promising a specific commercial model. Agent and orchestration services also move fastest of anything in this table; confirm the service name and its FedRAMP status at the authorization package level before the proposal goes out.
Figure 16-2. The same seven layers, three providers. Step numbers match across columns so a reviewer can compare line for line.
Figure 16-3. Change management for a non-deterministic component. The evaluation set and the rollback drill are what make it auditable.
Model identifier and digest, system and task prompts, tool schemas, retrieval index snapshot, guardrail policy, and the evaluation set itself. All six in one manifest, so a result can be reproduced.
AWS: Bedrock model IDs with provisioned throughput and inference profiles. Azure: Foundry deployments with version pinning and deployment slots. Google Cloud: Vertex model versions with traffic split on the endpoint.
Weekly re-run of the golden set against the pinned version, plus monitoring of refusal rate, citation coverage, tool-error rate and cost per resolved task. A drift alert reopens the pipeline at stage 02.
Figure 16-4. Retrieval architecture for controlled data. Access is filtered before the model sees the chunk, not after, and an answer without a citation is refused rather than generated.
Figure 16-5. Human-in-the-loop path. Irreversible actions, actions above a dollar threshold and anything touching CUI always route to a person.
Name the threshold, the role that approves, the median review time and where the record is kept. An evaluator scores the control, not the arrow.
| Item | AWS | Azure | Google Cloud |
|---|---|---|---|
| Government environment | GovCloud (US-East / US-West) | Azure Government (US Gov Virginia / Arizona) | Assured Workloads (US regions) |
| Authorization to cite | FedRAMP High for the region, plus the agency ATO for the system | FedRAMP High and DoD IL4/IL5 where applicable | FedRAMP High and IL4 where applicable |
| Data residency control | Region pinning · service control policies | Region pinning · Azure Policy | Assured Workloads location policy |
| Key custody | KMS customer managed key · CloudHSM | Key Vault Managed HSM | Cloud KMS · Cloud HSM · CMEK |
| Model data handling | No training on inputs; state the inference-only posture | No training on inputs; state the inference-only posture | No training on inputs; state the inference-only posture |
| Egress control | PrivateLink · no internet route from the VPC | Private Link · forced tunneling | VPC Service Controls perimeter |
Every claim in this table belongs in the proposal only with a citation to the provider's current authorization listing and the customer's own boundary documentation. Write the posture as a statement the government can verify, such as inference-only with no retention, keys held in a customer-managed HSM, and no egress path from the subnet, rather than as a brand name.