Reference flow
- User -> authentication and role -> router -> RAG retrieval -> vector index or Knowledge Base -> MCP server -> Bedrock.
- Guardrails and application policy validate answers, tool calls, sensitive data, and human approval when required.
- Logs, traces, evaluation, and audit capture operational metadata without exposing sensitive prompts by default.