| Service | Replicas | CPU | Memory | Zone | Status |
|---|---|---|---|---|---|
| edge-gateway | 3 | 4 vCPU | 8 GB | DMZ | Running |
| security-core | 3 | 8 vCPU | 32 GB | App tier | Running |
| ai-gateway | 2 | 16 vCPU + GPU | 64 GB | App tier | Running |
| search-and-logs | 5 | 8 vCPU | 64 GB | Data tier | Running |
| vault | 3 | 2 vCPU | 4 GB | HSM enclave | Running |
tenant: prime-bank
residency: bd-only
replicas: { edge: 3, core: 3, ai: 2 }
hsm: { type: network, partitions: [prod-general, goaml-signing] }
dr: { mode: active-passive, rto: 4h, rpo: 15m }
networkPolicy: default-deny
features: { geoBlocking: true, waf: crs-pl2, dlp: true, copilot: true }