Skip to main content

Foundations

Foundations components provide the central landing zone infrastructure, shared security services, and automation fabric for the AI Platform.

Core Capabilities​

  • Bootstrap: Central GCS state storage, KMS CMEK encryption, and Workload Identity Federation (WIF) pools for GitHub Actions authentication.
  • Security Baselines: KMS Autokey policies, Cloud Asset inventory, and cross-project security guardrails.
  • Shared Services Onboarding: Central KMS key rings, Secret Manager secrets, and IAM bindings for downstream components.
  • Template Factories: Reusable infrastructure and agent starter templates.