Acme FinancialGraph Model
KP

Digital Twin Knowledge Graph Model

Authoritative schema, relationship taxonomy, and analytical engines that make the twin reason about resilience.

Entity types
14
first-class node kinds
Relation types
14
typed edges
Discovery planes
6
continuous ingest
Impact algorithm
Bayesian
probabilistic cascade
Business Service
business_service

Customer- or revenue-facing capability with measurable SLOs and business impact.

Key attributes
tier
rto
rpo
revenue_per_hour
owner_bu
sla
Discovery sources
ServiceNow CMDB · BIA workshops · Manual curation
Business Process
business_process

End-to-end workflow that consumes one or more services to deliver business outcome.

Key attributes
process_owner
frequency
regulatory_scope
kpi
Discovery sources
BPMN repositories · Process mining · Workshops
Application
application

Logical software product composed of one or more deployable components.

Key attributes
lifecycle
tech_stack
owner_team
data_classification
Discovery sources
ServiceNow · Backstage · Jira · Build pipelines
Microservice
microservice

Independently deployable component exposing APIs or events.

Key attributes
repo
runtime
slo
api_contract
mesh_id
Discovery sources
Service mesh (Istio/Linkerd) · K8s API · OpenTelemetry
Database
database

Structured datastore: OLTP, OLAP, KV, time-series, graph, vector.

Key attributes
engine
version
encryption
ha_topology
classification
Discovery sources
Cloud APIs · Atlas/RDS · Schema registry
Storage System
storage

Block, object, or file storage volume holding application or DB data.

Key attributes
type
size_gb
encryption
replication
immutability
Discovery sources
AWS/Azure/GCP APIs · SAN inventory · CSI drivers
Network
network

VPC, subnet, VLAN, transit gateway, or load-balanced edge.

Key attributes
cidr
zone
exposure
peerings
Discovery sources
Cloud VPC APIs · NetFlow · CMDB
Cloud Resource
cloud_resource

Compute, function, queue, or managed service instance.

Key attributes
provider
sku
tags
cost_center
Discovery sources
AWS Config · Azure Resource Graph · GCP Asset Inventory
Cloud Region
cloud_region

Geographic failure domain (e.g. us-east-1, westeurope).

Key attributes
provider
geo
az_count
sovereignty
Discovery sources
Provider APIs
Identity System
identity_system

IdP, directory, or PAM controlling authentication and authorization.

Key attributes
protocol
mfa_enforced
federation
admin_count
Discovery sources
Okta · Entra ID · CyberArk · Ping
Security Control
security_control

Preventive, detective, or responsive control (WAF, EDR, DLP, SIEM rule).

Key attributes
framework_refs
status
coverage_pct
last_validated
Discovery sources
GRC platforms · SIEM · CSPM
Backup System
backup_system

Backup product or vault holding recoverable copies.

Key attributes
rpo_minutes
retention_days
immutable
cross_region
Discovery sources
Veeam · Rubrik · AWS Backup · Commvault
Recovery System
recovery_system

Standby site, runbook, or DR orchestrator that restores service.

Key attributes
rto_minutes
pattern
last_drill
drill_outcome
Discovery sources
Azure Site Recovery · AWS DRS · Runbook catalogs
User
user

Human or service principal with assigned roles and entitlements.

Key attributes
type
department
privileged
mfa
Discovery sources
IdP directory · HRIS · SCIM