CODITECT Flow Platform (CFP)
The enterprise workflow execution engine that turns AI-analyzed processes into governed, auditable production systems.
What It Is
CODITECT Flow is a multi-tenant, AI-first workflow workbench for designing, executing, and governing step-based workflow applications. Built in Rust for performance and Next.js for the visual console, it provides the execution engine for workflows that CODITECT AgentFlow (workflow.coditect.ai) discovers and analyzes.
One sentence: AgentFlow tells you what to automate; CODITECT Flow runs it.
The Problem
| Pain Point | Who Feels It | Current Workaround |
|---|---|---|
| Workflow tools lack enterprise governance | Engineering leads, CISOs | Manual audit logs, hope-based compliance |
| No audit trail for AI-driven automation | Compliance teams | Spreadsheets, external logging |
| Vendor lock-in to single LLM provider | CTOs, architects | Abstraction layers built in-house |
| Multi-tenant isolation is an afterthought | Platform teams | Custom middleware, tenant headers |
| Workflow builders are no-code toys OR raw code | Full-stack teams | Cobble together Temporal + custom UI |
| Data residency is ignored or bolted on | Legal, DPOs | Region-specific deployments, duplicated infra |
Value Proposition
For engineering teams building AI-powered automation at scale, CODITECT Flow is the only workflow platform that combines a visual workbench, Rust-grade performance, immutable audit chains, and multi-LLM governance in a single multi-tenant system -- eliminating the gap between discovering automation opportunities and running them in production.
How It Fits in the CODITECT Suite
CODITECT AgentFlow CODITECT Flow CODITECT Core
(workflow.coditect.ai) (THIS PRODUCT) (Intelligence)
┌─────────────────┐ ┌─────────────────┐ ┌─────────────────┐
│ DISCOVER │───────>│ EXECUTE │<─────│ INTELLIGENCE │
│ │ │ │ │ │
│ 8 AI Analysts │ feed │ Rust Runtime │ uses │ 776 Agents │
│ Workflow → ROI │ into │ Visual Workbench│ │ 445 Skills │
│ "What to │ │ Audit Chain │ │ 377 Commands │
│ automate" │ │ "How to run it" │ │ 118 Hooks │
└─────────────────┘ └─────────────────┘ └─────────────────┘
| Product | Domain | Question Answered |
|---|---|---|
| AgentFlow | Analysis | "Which processes should we automate and what's the ROI?" |
| CODITECT Flow | Execution | "How do we build, run, and govern those automated workflows?" |
| CODITECT Core | Intelligence | "What AI capabilities are available to power both?" |
Capabilities
Runtime Engine (Rust)
| Capability | Detail |
|---|---|
| Step Execution | API, event, cron, stream, and background job steps with typed state |
| Multi-Language Runners | Node.js, Python (extensible to Ruby, Go) |
| Deterministic Retry | Per-step timeout, concurrency semaphore, idempotency guarantees |
| Event System | Pub/sub with fan-out, dead-letter queues, strict input validation |
| Stream Processing | Real-time data streams with typed adapters |
| Plugin System | Hot-reloadable plugins with filesystem watcher |
| WebSocket Live Debug | Real-time step execution monitoring and log streaming |
Control Plane (Rust + Actix-web)
| Capability | Detail |
|---|---|
| Multi-Tenant Isolation | Tenant → Team → Project hierarchy with strict data boundaries |
| 10-Role RBAC | system_admin, tenant_admin/viewer, team_admin/viewer, project_admin/editor/viewer, auditor, support |
| Immutable Audit Chain | Hash-chained append-only blocks with periodic external anchoring and tamper detection |
| Data Residency | Per-tenant region routing (US-East, US-West, EU-West, EU-Central, APAC) |
| Policy Engine | Configurable limits per tenant/project: request size, timeouts, concurrency, LLM quotas |
| Flow Management | CRUD for flow definitions with versioning and environment promotion (dev → stage → prod) |
Multi-LLM Governance
| Capability | Detail |
|---|---|
| Provider Abstraction | Formal provider interface supporting Anthropic, Google Gemini, Moonshot Kimi |
| Tenant-Level Routing | Per-tenant LLM policies, quotas, and cost tracking |
| Model Selection | Intelligent routing based on task type, latency requirements, cost |
| Bring Your Own Key | Customers use their own API keys with CODITECT governance overlay |
Visual Workbench (Next.js)
| Capability | Detail |
|---|---|
| Flow Designer | Visual drag-and-drop workflow builder |
| Console Dashboard | Tenant, team, user, project, contract, and session management |
| RBAC-Gated Navigation | UI elements hidden/shown per role permissions |
| Mobile Responsive | Full functionality on phone and tablet breakpoints |
| Cloud IDE Access | GCP Cloud Workstations in separate browser tab |
| Pricing & Onboarding | Self-service registration, plan selection, pilot access |
Enterprise Security
| Capability | Detail |
|---|---|
| Zero-Trust Enforcement | mTLS, token-based auth, no implicit trust |
| Encryption | At rest (AES-256) and in transit (TLS 1.3) for all data and payloads |
| CORS Hardening | Origin allowlist with credential-safe validation |
| Endpoint Gating | Dev/diagnostic endpoints disabled by default, require auth + role |
| WebSocket Hardening | Input validation, malformed message rejection |
| Secret Management | GCP Secret Manager integration, no hardcoded credentials |
| Tamper-Evident Audit | Hash chain verification with external anchoring for compliance proof |
Observability
| Capability | Detail |
|---|---|
| OpenTelemetry | Structured logs, distributed traces, and metrics for all actions |
| SLO Enforcement | Per-step latency and error budgets with automated alerts |
| CI/CL Pipeline | Continuous Integration + Continuous Learning feedback loop |
| Drift Detection | Daily infrastructure drift checks with auto-issue creation |
Why This Is Essential
1. Completes the CODITECT Automation Loop
Without Flow, CODITECT can analyze workflows (AgentFlow) and provide intelligence (Core) but cannot execute them. Flow closes the loop: Discover → Design → Execute → Monitor → Learn.
2. Captures High-Value Enterprise Revenue
| Metric | Value |
|---|---|
| Enterprise workflow automation market | $13.6B by 2028 (Gartner) |
| Average enterprise deal size | $50K-500K/year |
| Switching cost once deployed | Very high (audit chains, compliance evidence) |
| Expansion revenue | Per-tenant, per-region, per-LLM-provider upsell |
3. Creates Defensible Moat
- Immutable audit chain = compliance lock-in (regulated industries can't leave)
- Multi-tenant Rust runtime = performance advantage competitors can't match in Python/Node
- Data residency = unlocks EU, APAC, and government markets
- AgentFlow → Flow pipeline = unique discover-to-execute value chain
4. Differentiates vs. Competitors
| Competitor | What They Lack | CFP Advantage |
|---|---|---|
| Temporal | No visual workbench, no audit chain, no multi-LLM | Full workbench + audit + LLM governance |
| Prefect/Dagster | Data pipeline focus, not workflow execution | General-purpose workflow execution |
| Windmill | No multi-tenant isolation, no audit compliance | Enterprise multi-tenant + audit chain |
| n8n/Make | No-code toys, no enterprise governance | Enterprise-grade with code-level flexibility |
| AWS Step Functions | AWS lock-in, no LLM governance | Cloud-agnostic, multi-LLM |
Technology Stack
| Layer | Technology | Why |
|---|---|---|
| Runtime | Rust (Actix-web, Tokio) | Memory safety, performance, deterministic execution |
| Audit | Rust (SHA-256 hash chains) | Cryptographic tamper evidence |
| Database | PostgreSQL + Redis | Multi-tenant isolation, caching |
| Frontend | Next.js 14, React 18, TypeScript | SSR, mobile-responsive, type-safe |
| Infrastructure | GKE, Cloud SQL, OpenTofu | Production-grade, IaC |
| Observability | OpenTelemetry, Prometheus | Industry standard |
Pricing Model
| Tier | Price | Includes |
|---|---|---|
| Pilot | Free | Early adopter access, all features |
| Enterprise Bundle | $149/mo | CODITECT Core + DMS + AgentFlow + Flow |
| Build Your Own | Custom | Seat-based + usage-based runtime + region add-ons |
Success Metrics
| Metric | Target |
|---|---|
| p95 API latency | < 300ms |
| p95 event processing | < 2s |
| Monthly availability | 99.9% |
| Concurrent WebSocket connections | 10,000/cluster |
| Audit chain verification | Zero tampering detected |
Product Code: CFP | Repository: submodules/products/coditect-step-dev-platform
Phase 1 (Build): 100% complete (96 tasks) | Phase 2 (Harden & Deploy): 0% (79 tasks)
Track: AO | Owner: AZ1.AI INC | Lead: Hal Casteel