Nick Duong · Architecture notes

Architecture notes

System & architecture diagrams

Simple and detailed views of three AI systems I designed and built: an incident-response agent with long-term memory, an LLM security scanner with a deterministic trust pipeline, and a GraphRAG pilot on Google Cloud, with the equivalent architecture on AWS and OCI.

Agent memory architecture

ReliBot & MyClawBot

How an incident-response agent remembers past fixes: L1/L2/L3 recall, SQLite hybrid search, write/read paths, and what token-metering bugs taught me.

80+tools · 16 domains
12sub-agents
3-layerauto-recall
2,200+tests
7 diagramsOpen →
AI security review · GCP deployment

GitHubScanner

Agent architecture, CVE enrichment, the trust pipeline, a threat model of the scanner itself, and the AWS CodePipeline → Workload Identity Federation → Cloud Run path.

6specialist agents
OSV + EPSSCVE intelligence
3,400+tests
86%coverage
6 diagramsOpen →
Knowledge graphs on GCP · AWS & OCI equivalents

GraphRAG vs Vector RAG

Schema-constrained graph extraction into Neo4j, a LangGraph vector-RAG twin, the Cloud Run cost story, model A/B results, and a GCP → AWS → OCI service map.

43source docs
1,943graph nodes
4,081relationships
~98%hosting cost cut
8 diagramsOpen →

Quick reference

CheatsheetReliBot & MyClawBot →15 cards · printableCheatsheetGitHubScanner →15 cards · printableCheatsheetGraphRAG vs Vector RAG →14 cards · printableReferenceGlossary →84 acronyms explained