What this is.
Position in the architecture · data residency
Specification · Deposited. 10.5281/zenodo.22285049, CC BY 4.0.
Boundary and optimization.
Residency is the boundary. The topology is the optimization. The four patterns are four optimizations under one uncrossable clause, which is why this framework sits under the Boundary Invariant rather than under a MESA altitude, and it is the only one of the nine that does.
Four patterns.
Sovereign Silo keeps everything within one jurisdiction. Federated keeps data in place and moves computation. Regional Hub consolidates within a permitted region. Hybrid mixes them per workload. Selection runs by enumerating the boundary set per jurisdiction and classifying each workload against it, and the BOE Declaration at the fourth step is what makes routing evidence usable during a reconstruction rather than merely available.
Which institutions, and on whose authority.
Cross-Border applies wherever a residency constraint exists, which makes its boundary a deployment shape rather than an industry. It is the only framework in the family that sits under the Boundary Invariant rather than under a MESA altitude, and that is why: the constraint is architectural, not institutional.
Where it bites · Any multi-jurisdiction deployment
The record of its own revisions.
A framework that cannot say how it changed reads as though it never has. This is drawn from the registry entry, which versions itself independently of the specification it points at.
Change history
- 2026-08-30 · entry v1.0 — First registry entry
- 2026-08-30 · entry v1.0 — Records the repositioning from peer framework to worked instance of the Boundary Invariant
- 2026-09-15 · entry v2.0 — Specification status moves from `source-treatment` to `deposited` on the deposit of the Cross-Border AI Architecture Patterns specification, whose concept DOI the entry now carries
- 2026-09-15 · entry v2.0 — Scope phrase and definition reconciled with that specification, which governs the count under 11.3: three patterns are selectable at the level of a workload class and Hybrid is the composition of an estate, not a fourth pattern
- 2026-09-15 · entry v2.0 — The `missing` limitation recording no decision instrument is closed by Section 4 of that specification
- 2026-09-15 · entry v2.0 — Receives an authority grant from REG-07, closing the gap that specification records at 8.2 rather than working around
Limitations recorded in the registry
- Jurisdiction-specific transfer rules cited in the source treatment age. Every regulatory assertion MUST be re-verified against primary sources at the time of use.
- The worked cases in the source treatment are disclosed as composites. They illustrate the selection method and are not evidence that any named institution operates any of the four patterns.
- Governs where inference and data may sit. Does not specify infrastructure, network architecture or the contractual arrangements by which a topology is procured.
What would show this to be wrong. The Cross-Border Patterns are falsified if a real boundary set requires a per-workload assignment in which some workload class can be served by none of Sovereign Silo, Federated or Regional Hub. Hybrid is not a fourth alternative for this purpose. It is defined at 4.9.5 as a composition of the other three, taken per workload class, and it therefore inherits their coverage rather than extending it. The claim under test is that the first three exhaust the topologies available under a residency constraint at the level of a single workload class, and a workload class none of them can serve would refute the enumeration directly. Stating the condition against Hybrid's composition rather than against the four as a set is deliberate, because a catch-all cannot be falsified.
What this does not claim.
Asserted, and time-sensitive. Jurisdiction-specific transfer rules age. Every regulatory assertion must be re-verified against primary sources at the time of use, and a boundary set carried forward from a prior deployment without re-verification is not a boundary set. This page names no jurisdiction-specific rule, deliberately.
Asserted. The worked cases in the source treatment are disclosed as composites. They illustrate the selection method and are not evidence that any named institution operates any of the four patterns.
Missing. No decision instrument exists, so the method cannot be applied consistently by two architects working independently.
Citation.
Cite this work. Cross-Border AI Architecture Patterns, version 1.0. 10.5281/zenodo.22285049. This is the concept DOI and it always resolves to the latest version. CC BY 4.0.
In the practice.
- Governed production AI, the discipline this framework belongs to
- Defensible AI, the family and the register
- AI Governance and Compliance Frameworks for the Middle East, the source treatment
- Model risk, the service this framework is applied through
- AI governance in the wiring, on where governance actually lives