Illustrative reference architecture. Validate requirements for your organization.
Illustrative architecture: An automotive manufacturer notices recurring service complaints associated with a component revision. Engineering and aftersales teams must identify potentially affected vehicle configurations, compare repair evidence, and plan dealer readiness. The system assists investigation and planning without deciding vehicle safety or autonomously authorizing a recall.
Problem
Vehicle build records, replacement parts, and software versions change over a vehicle's life. A broad model-generated affected list can include irrelevant vehicles or omit repaired configurations. Dealer narratives also vary widely in terminology and evidentiary quality.
Why a multi-agent system?
Configuration, service-evidence, parts, and communication specialists work against authoritative records. A deterministic eligibility query produces a candidate population; qualified engineering and campaign owners decide final scope and actions.
Intended outcome
The intended result is a reviewable operational decision with source evidence and explicit ownership. Measure the quality and speed of engineering preparation without claiming defect reduction or safety improvement from the architecture alone. Preserve the evidence needed for teams to challenge the proposed population and revise it transparently.
Specialist agent team
Configuration investigator
Trace build configuration, component revision, and recorded service replacements.
Tools
Vehicle build database
parts genealogy graph
Authority boundary
Cannot certify final campaign eligibility or alter vehicle configuration records.
Service pattern analyst
Cluster complaint descriptions and retrieve supporting diagnostic records.
Tools
Warranty claim search
diagnostic report reader
Authority boundary
Cannot diagnose a vehicle or declare a safety defect.
Parts readiness planner
Compare candidate demand with approved repair parts and dealer stock.
Tools
Parts inventory API
distribution planning simulator
Authority boundary
Cannot substitute unapproved parts or commit allocations.
Campaign packet agent
Draft engineering review packets and dealer instruction summaries with citations.
Tools
Technical bulletin repository
campaign draft workspace
Authority boundary
Cannot publish bulletins, notify owners, or approve campaign scope.
Enterprise systems
Product lifecycle and vehicle records
Own component revisions, build configurations, and approved repair applicability.
Warranty and dealer service systems
Supply service events, diagnostic evidence, and recorded repair history.
Parts and campaign management platforms
Control inventory commitments, dealer communications, and approved campaign populations.
Architecture diagrams
Service campaign evidence coordination — logical architecture — Specialists produce bounded findings; the evidence ledger preserves source versions and human decisions before an authorized adapter changes a system of record.
Failure and decision sequence — A replacement component makes the original build record misleading. The workflow records unresolved work and resumes only after the source state and reviewer authority are checked.
sequenceDiagram
participant O as "Case orchestrator"
participant S as "Product lifecycle and vehicle records"
participant H as "Accountable reviewer"
O->>S: Read candidate vehicle configurations
S-->>O: Build and replacement history
O->>H: Present versioned candidate population
S-->>O: Corrected component replacement arrives
O->>H: Reopen affected inclusion decisions
Runtime flow
1
Register service signal
Capture the observed pattern and evidence window, keeping complaint frequency separate from confirmed engineering findings.
2
Resolve vehicle configuration
Join build records and service replacements using governed identifiers; mark missing repair history explicitly.
3
Compare service evidence
Review relevant diagnostic records and narratives with source citations, preserving contradictory and negative evidence.
4
Calculate candidate scope
Run a versioned configuration query and estimate parts demand using approved repair definitions and declared assumptions.
5
Review engineering packet
Show scope logic, excluded configurations, unresolved evidence, and readiness constraints to qualified engineering and campaign owners.
6
Publish approved planning records
Store the signed scope and approved dealer materials through campaign controls; later configuration corrections trigger affected-list reevaluation.
Failure recovery
A replacement component makes the original build record misleading.
Detect: Service history shows a later part revision that conflicts with build-based eligibility.
Recover: Recompute the candidate population and request engineering review of changed inclusion rules.
A draft bulletin cites an obsolete repair procedure.
Detect: Controlled document revision differs from the draft's evidence manifest.
Recover: Block publication, replace the citation, and revalidate applicability and required parts.
Security & decision boundaries
Keep safety determinations and campaign authorization with qualified accountable teams.
Version affected-population queries and retain inclusion and exclusion evidence.
Require approved technical procedures for every proposed repair or parts assumption.
Minimize owner-identifying information in engineering analysis and dealer aggregates.
Separate observed complaint clusters from validated failure modes in every packet.
Operational metrics
Measurement definitions, not promised improvements.
Configuration coverage
Candidate vehicles with complete relevant build and repair history divided by candidate vehicles reviewed.
Scope correction rate
Vehicles added or removed after engineering review divided by the initial candidate population.
Packet preparation latency
Time from accepted service signal to engineering-reviewable evidence and query logic.
Procedure freshness
Draft instructions citing current applicable procedures divided by audited draft instructions.
Architecture tradeoffs
Decision
Benefit
Cost
Vehicle-level genealogy
Supports precise candidate populations.
Historical service data may be incomplete across dealer networks.
Narrative clustering
Finds related complaints despite varied language.
Requires validation to avoid merging unrelated symptoms.
Engineering approval boundary
Preserves safety and technical accountability.
Campaign timelines remain dependent on expert assessment.
Rollout plan
Archived campaign replay
Engineers validate configuration joins, replacement history, and distinction between candidate and approved scope.
Shadow aftersales pilot
One component family evaluates evidence packets and owner-data minimization without communications.
Controlled campaign workspace
Approved draft integration launches after obsolete-procedure and corrected-configuration exercises pass.