DecisioQ System Architecture

Deployment and integration topology for DecisioQ client applications, Identity, Knowledge, Execution, token propagation, and production service boundaries.
1 Deployment Topology

DecisioQ is deployed as a small set of cooperating services. Client applications authenticate, discover governed decision metadata, submit options, and receive a deterministic result without needing to manage catalog content or scoring infrastructure.

ComponentPrimary responsibilityPublic production host
Client AppBusiness UI, integration workflow, token storage, catalog selection, option entry, and result display.Customer application or hosted demo site.
Identity ServiceAuthenticates DecisioQ API consumers and issues bearer tokens for secured calls.https://identity.vinquery.com
Knowledge ServiceServes the decision catalog, sectors, categories, decisions, criteria, profiles, scenarios, and examples.https://dks.vinquery.com
Decision Execution ServiceValidates and executes decision requests, applies scoring, and returns results.https://dde.vinquery.com
2 Identity Service

The Identity service issues access tokens for DecisioQ API consumers. Client applications request a bearer token from Identity and attach that token to catalog and decision calls.

  • Production: https://identity.vinquery.com/connect/token
  • Boundary: DecisioQ catalog and execution services validate incoming tokens but do not issue tokens.
3 Knowledge Service

The Knowledge Service is the source for catalog metadata. It answers questions such as which sectors exist, which categories belong to a sector, which decisions belong to a category, and which criteria, profiles, scenarios, and examples belong to a decision.

  • Catalog: https://dks.vinquery.com/decisioncatalog
  • Decision detail: https://dks.vinquery.com/decisioncatalog/decisions/{decisionId}
  • Boundary: the Knowledge Service stores decision metadata. It does not run the recommendation.
4 Decision Execution Service

The Decision Execution Service receives validation and execution requests. When it needs catalog metadata, it calls the Knowledge Service using the propagated bearer token, then runs the deterministic decision model.

  • Validation: https://dde.vinquery.com/api/v1/validate
  • Catalog execution: https://dde.vinquery.com/api/v1/decide
  • Business-data execution: https://dde.vinquery.com/api/v1/decide
  • Boundary: the Decision Execution Service computes recommendations. It does not own the public catalog metadata.
5 Token Propagation

The same bearer token follows the request across service boundaries so authorization, traceability, and account context remain tied to the original API consumer.

  1. The client requests a token from Identity.
  2. The client sends the token to the Decision Execution Service for validation or execution.
  3. When decision metadata is needed, the Decision Execution Service forwards the bearer token to the Knowledge Service.
  4. The Knowledge Service validates the token and associates catalog activity with the same account context.
  5. The Decision Execution Service completes execution and returns the recommendation to the client.
6 Request Lifecycle
StepCallerServiceOutcome
1Client appIdentityBearer token is issued.
2Client appKnowledge ServiceCatalog, sectors, categories, and decision metadata are loaded.
3Client appDecision Execution ServiceDecision request is submitted for validation or execution.
4Decision Execution ServiceKnowledge ServiceDecision definition is retrieved using token propagation.
5Decision Execution ServiceDecision Execution ServiceOptions are validated and scored.
6Decision Execution ServiceClient appRecommendation, ranking, explanation context, warnings, and diagnostics are returned.
7 Production Endpoints
ServiceProduction endpointPrimary use
Identityhttps://identity.vinquery.comToken issuance.
Knowledge Servicehttps://dks.vinquery.comCatalog and decision metadata.
Decision Execution Servicehttps://dde.vinquery.comValidation and decision execution.
Client siteHosted website or customer applicationUser workflow and integration experience.
8 Security Boundaries
  • Token issuance boundary: only Identity issues tokens.
  • Catalog boundary: the Knowledge Service owns catalog and decision metadata.
  • Execution boundary: the Decision Execution Service owns validation, scoring, execution, and result generation.
  • Client boundary: browser pages should not expose secrets. Server-side integration layers may be used to keep credentials and private settings off the public page.
  • Diagnostics boundary: business pages should keep diagnostics collapsed or hidden by default; developer pages may expose request summaries, correlation IDs, execution traces, and service messages.
9 Localization and Measurement Boundary

Localization and measurement normalization sit at the integration boundary. Client applications may collect values in a user's local language and preferred measurement system, but DecisioQ keeps technical identifiers stable and evaluates normalized canonical values.

Client applicationDisplays localized labels, collects user-entered units, and passes locale, measurement system, currency, time zone, and jurisdiction in request context when needed.
Integration PlatformMaps Business Data into decision criteria and normalizes supported metric or US customary measurements before execution.
Decision Execution serviceScores canonical values deterministically. Presentation choices do not alter ranking or recommendation.
Trace and diagnosticsPreserve source value/unit, canonical value/unit, conversion identifier, request ID, and correlation ID where available.

Canadian and US deployments can use different presentation defaults, but the same submitted business situation should produce the same deterministic decision after normalization.

10 Where to Go Next

Use Decision Concepts for modeling terminology. Use the Developer Center and API Guide for implementation details. Use the Business Decision Studio or Interactive Playground to exercise the live flow.

Decision Concepts Developer Guide Business Decision Studio Playground