Applied Intelligenceindependent · by Arseny Gorokh
ai · 05
applied research note ·2026 · 06 · 05 ·ai-05 ·12 min read ·strategy & architecture

A memory-and-policy layer above the model:the build-versus-buy case for enterprise AI.

If you are deciding what to build versus buy in your AI stack, the trap is pouring scarce engineering into the layer the next model release will commoditise. A model gateway routes your prompt but knows nothing about your repository, your policy, your budget, or the decision you made last week, and that gap is where the defensible work lives. This note makes the case for owning the in-path layer that governs memory, policy, and cost while the model underneath stays swappable: keep the open-source gateway, own the layer, and prove it ports across providers so no single vendor owns your exit.

the endpoint
the defensible product is the active in-path endpoint above the kernel, not the gateway, and not the dashboards that read it.
5
criteria, stated before any code, that decide whether this is a portable product or just customisation of one platform.
2
kernels at least must pass the same conformance suite before portability is a claim rather than a slogan.
31
components mapped across the inherited open-source kernel, the owned layer, and runtime support.
artefacts· the memory server· the adoption bar· the methodology· further artefacts on request
ia decision memo, not an architecture diagram

Four findings, one company spine.

Where should scarce proprietary effort go when the model underneath is becoming a commodity?

Spend it forking a gateway and you inherit maintenance debt for something that is becoming free; spend it nowhere and you have no moat at all. The argument here is about what to build above the gateway, and EPAM's open-source DIAL is the capable, swappable floor it sits on. Four findings carry it: keep DIAL as the inherited kernel rather than forking it into maintenance debt; own the active endpoint that runs before and after every model call; sell two angles, coding-agent memory and vertical AI workflows, through one shared runtime; and treat kernel portability as a test plan, not a slogan. The fourth is the load-bearing caveat: the layer is designed around a portable internal contract that has to be proven per kernel for request fidelity, latency, cost extraction, and failure handling.

The investable claim

Active context control, not another gateway.

A governed endpoint that remembers, routes, prices, and explains agentic work across kernels. The gateway is inherited and replaceable; the endpoint above it, the thing that decides what context and policy and budget enter each prompt, is the product.

iicontext before the model call

A gateway routes a prompt. It does not know the work.

A model gateway is useful but does not by itself know the repository, the issue, the customer workflow, the budget, or which prior decision must be preserved. Two corpora need that context, and the failure mode differs by corpus.

  • An SDLC corpus. Coding agents draw on architecture decisions, tickets, pull requests, incidents, and handoff notes. The risk a memory layer prevents: reversing a prior decision, or burning tokens re-fetching context the agent should already hold.
  • A domain corpus. Vertical workflows need source-bound customer knowledge, policy, and workflow state. The risk: a plausible answer that triggers the wrong business action.

The shared problem is context selection under policy. The layer wins only if it makes model calls better, cheaper, or safer in a way a customer can see, not as a hidden prompt trick.

iiithe adoption bar

Five criteria decide product or demo.

The architecture is attractive only if it clears a bar stated before implementation. These five test whether the value layer survives real deployment pressure.

Table 1 · the adoption bar, fixed in advance. The layer is a product only if all five pass.
criterionpass conditionwhy it matters
Active controlRuns in the request path, not only after the event.Memory, policy, and cost decisions must happen before spend occurs.
Kernel portabilityDIAL plus at least one non-DIAL kernel pass the same conformance suite.Otherwise the product is DIAL customisation, not a portable layer.
Cost truthUsage is joined to a rate card and session identity.Buyers need spend explained per workflow, not only per provider bill.
Memory governanceEvery surfaced fact can point to a source and a policy reason.Agent memory must be auditable, not a hidden prompt trick.
Failure behaviourMemory, kernel, and policy-stop each produce a clear degraded mode.Reliability claims start with what happens when dependencies fail.
ivwhere the product lives

Keep the commodity foundation, own the value layer.

A model can answer only the prompt it receives. The value layer decides what context, policy, and budget information enters that prompt. Dashboards read the telemetry but do not make the endpoint valuable on their own; the endpoint earns value when it changes what the model sees and what the organisation can govern.

Figure 1 · the request lifecycle. The in-path endpoint, not the kernel, is where memory, policy, and cost truth are decided.
01
Client
Cursor, Claude Code, Codex-style agents, or vertical apps.
02
In-path endpoint
session, issue, policy, and workspace identity.
03
Memory & budget
context lookup, rate card, cache hint, route guard.
04
Kernel
DIAL Core, Bedrock, Vertex, Foundry, OpenRouter, or an OSS gateway.
05
Cost truth
usage fields, cache result, final rate, telemetry trace.

The repository ledger separates inherited open-source components from the local proprietary layer and supporting runtime services. The licence line matters for diligence: an Apache-2.0 foundation makes commercial composition possible, but inherited features must never be presented as proprietary inventions.

Table 2 · the component map, 31 components in three bands.
layercomponents
Inherited DIALCore, Chat, Admin, RAG, Quick Apps, Analytics, SDKs.
Owned layerthe model-to-DIAL adapter, the custom telemetry plane, cost exporters, memory interceptors, vertical workbenches.
Runtime supportRedis, Postgres, a vector store, InfluxDB, Grafana, an OpenTelemetry collector.
vone logic, two shapes

One layer, shipped as an interceptor or a standalone endpoint.

The same proprietary logic can ship as a DIAL-native interceptor (Mode A) or as a standalone primary endpoint (Mode B), and the choice changes the risk profile.

The decision rule

Interceptor mode to prove value inside DIAL; standalone mode to prove the layer survives without it.

Mode A keeps the customer close to DIAL's configuration model and is best for native distribution; its risk is contract drift from upstream interceptor changes. Mode B lets the company own the primary control point and is best for proving kernel substitution, but it inherits responsibility for auth, scaling, session management, and failure handling.

vithe cut line

What to keep upstream, what to own and close.

The cut line protects the story from overclaiming and tells engineering where to spend. Keep the commodity foundation upstream; own the context, the cost ledger, and the proof.

Table 3 · the cut line between inherited and defensible.
keep upstreamown and closereason
DIAL unified API and Core routingpolicy and memory enrichmentrouting is the foundation; context policy is the value.
DIAL Chat and Admincustomer-specific workbenchesdefault UI proves access; vertical UI proves workflow fit.
DIAL realtime analyticsa billing-grade cost ledgerobservability explains behaviour; cost truth supports decisions.
DIAL SDKs and interceptor SDKthe conformance suite and adaptersthe SDK is a contract; the company owns proof that it holds.
viiportability is a proof requirement

Portability is a test you can rerun across providers.

A portable value layer needs a normalised internal contract; each kernel adapter then proves it preserves request meaning, cost fields, and failure semantics, judged on four properties: request fidelity, latency overhead, cost extraction, and failure behaviour. The adapter effort tiers: a thin OpenRouter or OSS gateway as the first non-DIAL test, medium-effort enterprise tests on Bedrock, Vertex, or Foundry where cost and policy controls differ by provider, and DIAL Core as the reference anchor. Build the proof in the order a buyer can verify: this quarter, define and test the contract; next, prove one coding workflow; then prove one vertical workflow.

Bounded claims

What this note does not claim.

It does not claim Palantir parity (the category benchmark for ontology and operational AI), Faculty-level packaging maturity, that every kernel works, that analytics is the product, or that licence diligence is finished. It claims one thing: active context control, proven per kernel, is the defensible layer above a commodity gateway.

·closing

The model stays swappable; the in-path layer is the product.

The inference kernel is becoming a commodity that several vendors will supply interchangeably. What an enterprise cannot buy off the shelf is a governed, in-path endpoint that holds its memory, enforces its policy, prices its own spend, and explains agentic work across whichever kernel runs underneath. That endpoint is where scarce proprietary effort earns a return, and the discipline of this note is to keep the line between what is inherited and what is owned honest enough to survive diligence.

About this note

An independent applied-AI engineering note by Arseny Gorokh. Not an official EPAM publication. EPAM's DIAL is the open-source platform the research studies; the architecture argument is the author's own. Companion artefacts are available on request.

References

  1. EPAM DIAL open-source repositories (Core, Chat, Admin, RAG, Quick Apps, Analytics, SDKs), the inherited kernel.
  2. Apache-2.0 licence, under which commercial composition of the inherited components is possible; notices and upgrade paths remain an operational responsibility.
  3. OpenTelemetry GenAI semantic conventions, the basis of the cost-truth telemetry plane.
  4. Palantir Foundry and AIP, cited as a category bound for ontology and operational AI, not a parity claim.
  5. Faculty Frontier, cited as a packaging and decision-intelligence maturity bound.
  6. Cloud gateway documentation, Bedrock, Vertex, Foundry, OpenRouter, behind the kernel-substitution tiers and the per-provider cost and policy variance.
An Applied Intelligence publication · independent · 2026 ai-05 Set in Newsreader & Spline Sans Mono · the Applied Intelligence reading style