Reference Architectures · Study deck

Reference Architectures Across Domains

Picture a team that must run a sensor service after the demo ends.

Blueprint Bina is your guide for this deck.

Blueprint Bina, the module guide, in a scene from this chapter.
iotclass.org

After studying this chapter

Learning objectives

You will be able to:

  • Frame an application architecture by naming purpose, users, operating environment, response needs, data lifecycle, and failure tolerance before choosing technology
  • Choose the smallest reference model that exposes a domain's major responsibilities, then add a domain overlay (autonomy, safety, privacy, maintenance, sparse connectivity, shared ownership) for the pressures it hides
  • Write an application-architecture record naming application frame, layer ownership, flow validation, and reopen trigger
  • Trace observation, control, exception, and maintenance flows as separate responsibility chains with independent failure points
iotclass.org

Major section

Start With the System Someone Must Run

Someone must own each alert, update, data path, and repair.

  • A broad model can reveal missing work, but it can also hide local needs.
  • A narrow model is easy to read, but it may leave out a key risk.
  • The records later in the chapter show how the local case changes the map.
iotclass.org

Major section

Start With the System Someone Must Run (continued)

Reopen it on change.

  • A reference architecture matters when it helps someone operate the system after the demo.
  • The point is not to copy a smart-home, factory, healthcare, or city diagram.
  • The point is to see which responsibilities repeat and which evidence must be present before the pattern is trustworthy.
iotclass.org

Major section

Model to Application Decision

A reference architecture is a reusable way to discuss responsibilities.

  • An application architecture is the decision record that says how those responsibilities work in a specific building, factory, field deployment, fleet, or shared platform.
  • For a soil-moisture system, the same reference layers mean different things than they do in a smart building.

Why it matters

That condition prevents silent drift.

Apply the reference model by framing the application workflow, choosing the smallest useful model, adding domain pressure, assigning layer owners, tracing operating flows, and recording the evidence and reopen trigger.
Apply the reference model by framing the application workflow, choosing the smallest useful model, adding domain pressure, assigning layer owners, tracing operating flows, and recording the evidence and reopen trigger.
iotclass.org

Major section

Model to Application Decision (continued)

The overview record should therefore state the application outcome, the flows that prove it, and the condition that would force the team to revisit the mapping.

  • Sparse coverage makes buffering and freshness limits part of the architecture.
  • Technician alerts make ownership and escalation part of the architecture.
  • The model helps only after those application pressures are named.
iotclass.org

Major section

Model to Application Decision (continued)

That condition prevents silent drift.

  • Battery replacement and sensor calibration make maintenance evidence part of the architecture.
  • If you only need the overview, remember this: a useful application architecture connects the user workflow to layer ownership, flow evidence, and a trigger for reopening the decision when conditions change.
  • Frame the application State the purpose, users, operating environment, response needs, data lifecycle, and failure tolerance before naming technology.
iotclass.org

Major section

Application Architecture Record

The practitioner task is to turn the model into a concise record that another reviewer can use.

  • The record should be specific enough to test, but small enough to maintain as the system evolves.
  • Telemetry, alerting, commands, configuration, diagnostics, updates, and operator workflows often need different placement.
  • That chain becomes the review checklist.

Why it matters

The visual is worth pausing on because its caption identifies the intended design point: Different application domains reuse the same layer vocabulary while changing the response need, data proof, owner boundary, risk trigger, and review evidence.

Different application domains reuse the same layer vocabulary while changing the response need, data proof, owner boundary, risk trigger, and review evidence.
Different application domains reuse the same layer vocabulary while changing the response need, data proof, owner boundary, risk trigger, and review evidence.
iotclass.org

Major section

Application Architecture Record (continued)

Interface notes, data contracts, support ownership, and review signoff.

  • One application can legitimately mix local control, gateway buffering, cloud analytics, and enterprise reporting.
  • For occupancy-to-HVAC control, the chain might be sensor quality, local occupancy state, climate rule, actuator command, cloud summary, operator override, and incident review.
  • Boundary crossing, ownership transfer, schema change, or support change.
iotclass.org

Major section

Application Architecture Record (continued)

The record should say which links can fail independently and which layer owns the proof for each link.

  • That sequence explains why Different application domains reuse the same layer vocabulary while changing the response need, data proof, owner boundary, risk trigger, and review evidence.
  • Walkthroughs, tests, logs, screenshots, simulations, and incident drills.
  • Maintenance flow Configuration, calibration, firmware update, device replacement, access-policy change, and audit record.
iotclass.org

Major section

Boundaries, Overlays, and Evidence Drift

The hard part of applying a reference architecture is that one deployed component may carry several logical responsibilities.

  • A gateway might validate measurements, buffer outages, run local rules, translate protocols, enforce identity, and forward evidence.
  • The review should follow responsibilities, not just boxes.
  • Domain overlays make those responsibilities visible.
  • An industrial overlay separates monitoring from control authority.

Why it matters

The visual is worth pausing on because its caption identifies the intended design point: The base model stays useful only when the application overlay names the pressure that changes placement, evidence, ownership, and the condition for reopening the review.

The base model stays useful only when the application overlay names the pressure that changes placement, evidence, ownership, and the condition for reopening the review.
The base model stays useful only when the application overlay names the pressure that changes placement, evidence, ownership, and the condition for reopening the review.
iotclass.org

Major section

Boundaries, Overlays, and Evidence Drift (continued)

A city platform overlay separates shared services from departmental ownership.

  • The industrial overlay is a different pressure again.
  • Industrial IoT (IIoT) sits at the intersection of consumer IoT and Industry 4.0-style automation, cyber-physical systems, and smart-factory practice.
  • Evidence drift happens when one of those overlays changes without a matching architecture review.
iotclass.org

Major section

Boundaries, Overlays, and Evidence Drift (continued)

A dashboard may gain command authority, a gateway may start making local decisions, a data pipeline may drop quality flags, or a support team may inherit a workflow it did not design.

  • The under-the-hood record should preserve the logical responsibility even when the physical component stays the same, so reviewers can see when a new behavior has crossed an old boundary.
  • That separation is what lets one gateway remain acceptable while one of its responsibilities needs a new test.
  • Boundary drift A responsibility moves when a gateway gains local rules, a cloud workflow gains authority, or a shared service changes data meaning.
iotclass.org

Major section

Boundaries, Overlays, and Evidence Drift (continued)

That sequence explains why The base model stays useful only when the application overlay names the pressure that changes placement, evidence, ownership, and the condition for reopening the review.

  • Evidence drift A validation record becomes stale when device behavior, scale, connectivity, ownership, data sharing, or failure assumptions change.
  • Terminology drift Different teams may use different model names; keep a mapping from local terms to device, network, edge, data, application, and operations responsibilities.
  • Authority drift A dashboard, automation rule, or integration should not become a control authority without an explicit boundary review.
iotclass.org

Deck summary

Key takeaways

Someone must own each alert, update, data path, and repair.

  • Reopen it on change.
  • A reference architecture is a reusable way to discuss responsibilities.
  • The overview record should therefore state the application outcome, the flows that prove it, and the condition that would force the team to revisit the mapping.
  • That condition prevents silent drift.
iotclass.org

Retrieval practice

Recall check 1 of 3

Blueprint Bina says: answer from memory, then check your reasoning.

Q1A team is adapting a reference architecture for a soil-moisture monitoring system with intermittent coverage and technician alerts. What should they do first?

AFrame the workflow and map responsibilities to evidence and owners.
BCopy the cleanest generic IoT stack diagram and treat the layer names as proof that the application has been designed.
CSelect a cloud platform first, then adjust the application flows until they fit the platform services.
DDelay ownership and validation evidence until deployment because the architecture phase should stay abstract.
Show answer

Answer: A Application architecture starts with behavior in scope and then maps responsibilities, boundaries, owners, evidence, and reopen triggers.

iotclass.org

Retrieval practice

Recall check 2 of 3

Blueprint Bina says: answer from memory, then check your reasoning.

Q2A building energy dashboard wants all occupancy events to reach a cloud service before local climate action is taken. What should the application architecture record check first?

ACheck local climate actions and layer-owned validation evidence.
BWhether the dashboard team can draw the same layers as the reference model.
CWhether all occupancy events can be hidden from the edge layer so only the cloud application sees them.
DWhether the cloud service offers enough dashboard widgets for the operator screen.
Show answer

Answer: A A practitioner record should separate local action, remote analytics, ownership, and validation evidence before platform details are approved.

iotclass.org

Retrieval practice

Recall check 3 of 3

Blueprint Bina says: answer from memory, then check your reasoning.

Q3Why should an application architecture review track logical responsibilities even when several of them run on the same physical gateway?

AResponsibilities carry validation, ownership, failure, and reopen evidence.
BTo plan separate hardware for stronger fault isolation.
CBecause reference architecture layers are only useful when the deployment has exactly one component per layer.
DBecause operations teams should ignore component placement and review only business workflows.
Show answer

Answer: A Under the hood, application architecture separates logical responsibility from deployment location so boundary evidence remains valid as systems evolve.

iotclass.org

Print reference

Answers

Answer key.

  1. A · Application architecture starts with behavior in scope and then maps responsibilities, boundaries, owners, evidence, and reopen triggers.
  2. A · A practitioner record should separate local action, remote analytics, ownership, and validation evidence before platform details are approved.
  3. A · Under the hood, application architecture separates logical responsibility from deployment location so boundary evidence remains valid as systems evolve.
iotclass.org