Mistral Governed Reference Architecture

Overview

Create a workload-aware architecture separating identity, policy, transport, state, and side effects. Route each job to the simplest stable surface and isolate preview/stateful APIs.

Prerequisites

• A workload inventory for chat, embeddings, classifiers, files/OCR, audio, batch, FIM, and orchestration.
• Identity, tenant, data, retention, spend, SLO, and incident requirements.
• Current endpoint/model evidence and owners for stateful stores.

Current Contract

Mistral exposes distinct stateless and stateful surfaces including chat, embeddings, classifiers, files, OCR, audio, batch, Workflows, and Public Preview Agents/Conversations. Their contracts are not interchangeable.

Authentication

Terminate app identity/authorization at a policy gateway; inject provider keys only in trusted adapters. Use approved service identity patterns when supported.