Part C1 · Technical due diligence · [company]

Whole-platform ecosystem review

The production-readiness assessment of the whole Trilivy.AI platform: six ranked subsystems around one shared, grounded knowledge corpus.

A- · 8.8 / 10Status: production-ready with the required owners in placeVendor-provided review, July 2026

1What was assessed

~283,000 lines of source (155 Python scripts and 396 UI/UX scripts), six ranked subsystems, 111 live technical documents and the integration patterns between them. The add-ons and learning companions are covered in C5.

6
Ranked subsystems
~283K
Lines of code
111
Live technical documents
3
Platforms: web, iOS, Android

2Scores by dimension

DimensionScore
Documentation completeness9.5
Innovation & features9.2
Overall architecture & design8.9
Subsystem integration8.7
Security & governance8.5
Operational readiness8.5
Code quality & testing8.0

Code quality and testing is the lowest score. This is where our technical team should look hardest; see "what to probe" below.

3Key findings

Architecture

Security and operations

Technology stack

RetrievalPostgreSQL + pgvector, vector(1536), HNSW index (m=16, ef_construction=64), retrieve-then-rerank
ModelsEmbedding: Cohere embed-v4.0 · Rerank: Cohere rerank-v3.5 · Generation: Claude, GPT, Cohere, self-hosted Llama
Ingestion40 file formats, 20+ loaders, OCR fallback for scanned PDFs, audio/video transcription
Delivery258 REST endpoints, MCP server, tool-using agent, streaming chat, report generation
InterfaceUI/UX scripts for the administration and application screens; Flutter mobile apps

4Objections the review answers

ObjectionAnswer in the review
"This locks us into a vendor."Full source is delivered, uncompiled. LLM-agnostic, on standard PostgreSQL/MySQL, open protocols, no license server.
"We do not have an AI team."We need an AI Data Expert and engineers, not researchers. The specialist choices (embeddings, chunking, indexes) are made and documented. What remains is ordinary application engineering: REST, queues, auth, front ends.
"Why not LangChain or LlamaIndex?"Every pipeline stage is a readable file, so the receiving team can learn and modify it, rather than working behind framework abstractions.
"Can we use our own front end?"Yes. All 258 REST endpoints can be consumed from any front-end language without touching the shipped UI/UX scripts.
"There is no observability story."Structured logging, per-service health probes, per-tool usage counters, retrieval logs and a conversation audit surface. The APM tool is left to us.
"Where are the benchmarks?"It ships the instrument instead of a score: a QA workflow, per-answer citations and a debug payload, to evaluate on our own corpus.

5What our team should probe

ProbeOur finding
Automated test coverage and the regression process (the lowest-scored dimension, 8.0)[p_c1_1]
UI/UX scripts skills: do we have them, or will the certified integrator cover that layer?[p_c1_2]
Disaster-recovery procedure on our infrastructure[p_c1_3]
Fit with our monitoring / APM tooling[p_c1_4]

6Verdict, as stated by the review

Approved for adoption, grade A-. A mature, coherent, production-ready system. Its defining advantage is coherence: engine, interface, knowledge, documentation and training were designed as one system. Success depends on a mandatory AI Data Expert on the customer side, plus a certified system integrator or the customer's own IT team, and, for mission-critical or compliance-heavy use, an organization-specific security and performance review.

Our assessment: [as_c1]. [as_c1_why]

← C0 SummaryC2 · RAG engine →