Reference

Public repositories that show how DBHQ builds. Inspect the deployment choices, follow an answer back to its source and check how a build identifies itself. The implementation is there to judge.

What does the deployment actually include?

Azure AI Landing Zone StarterLive

An opinionated reference build on Microsoft's official Azure AI Landing Zone Verified Module, with golden-path Terraform and tfvars for a secure, private-networked RAG workload in a regulated UK SME. The money-pit resources are flagged off by default, and those defaults are part of the design.

Inspect - Azure AI Landing Zone Starter

  • The official module underneath the build
  • Terraform and tfvars for the intended workload
  • Which costly resources are off by default

LimitThis is an opinionated starting point for a particular workload. Suitability for your estate still needs review.

Source on GitHub (external site)

Can you trace the answer back to the rule?

FCA Handbook AssistantLive

A full-stack C#/.NET reference for regulated-grade AI on Azure: grounded, cited answers over the public FCA Handbook. RAG over Azure AI Search with a pgvector variant to prove both, and a tool-calling agent built on the Microsoft Agent Framework that cross-references specific provisions. Every answer is traced to the source rule.

Inspect - FCA Handbook Assistant

  • Retrieval through Azure AI Search and pgvector
  • Tool calls that cross-reference specific provisions
  • The source rule behind each answer

LimitA cited answer makes the reasoning inspectable. It does not settle a compliance decision.

Source on GitHub (external site)

Which build are you actually running?

DevOps DevContainerLive

One container with the DevOps toolchain already in it - Terraform, Terragrunt, Azure CLI, Kubernetes, Ansible, PowerShell, .NET and the coding agents. Built natively for Intel and Apple Silicon, rebuilt weekly, and every image ships an SBOM and signed build provenance.

Inspect - DevOps DevContainer

  • The toolchain in the container definition
  • Native builds for both architectures
  • The SBOM and signed build provenance

LimitA version tag is a point-in-time snapshot. The digest is the only stable identity.

Source on GitHub (external site)

Want a finding about your own estate?Sixteen installable agent skills (external site)What an Azure landing zone actually isWhen the engineer cannot log into the machine

Does your build need this level of scrutiny?

Bring the workload, the constraints and what needs to be demonstrable. DBHQ can assess the fit and scope a build around those requirements.

Bring me the problemBook a call

I reply within 24 hours