KC Enterprise AI & Operations Platform
Knowledge Central — production AI platform for NA retail IT; KCOS is the product vehicle
Knowledge Central for EssilorLuxottica NA retail IT: governed chat and RAG, Open Terminal for safe execution, and KC-Wiki for agent-accessible knowledge with LDAP-backed publishing — one LiteLLM control plane, Traefik, and enterprise observability. KCOS is the product vehicle: an agentic SaaS substrate for a modular agent workspace, with an operator status board, linked into this platform rather than standing alone. Mid-2026 platform work — identity provider, LiteLLM gateway, virtualization station, and a unifying monorepo — attaches here instead of as one-offs.
Client
Luxottica
Completion
Ongoing
Category
Secure AI & Automation
Platform Components
- KCOS Modular Agent Workspace
- KC Auth — Keycloak Identity Provider
- AI Gateway (Light LLM Proxy)
- KC Virtualization Station
- KC-Wiki Agentic Knowledge Platform
- Open Web UI (Lux GPT) - Secure Internal AI Platform
- AZ Tools MCP - Real-time Azure Infrastructure Querying
- KC Fireflies Secure Meeting Bot
- Privileged Access Management (PAM) Jump Server
- Guacamole API Wrapper Service
- OpenVAS REST API Integration
- Optifacts Legacy System Modernization
Situation
Retail IT needed a unified internal platform for secure AI adoption, Azure operational visibility, privileged access, and agentic knowledge management—not a collection of disconnected pilots. Stakeholders required audit-friendly guardrails, cost controls, and integration across chat, inventory MCP, wiki, and jump-server workflows.
Task
Design, integrate, and operate a production agentic platform where Lux GPT, Open Terminal, Azure inventory MCP, KC-Wiki automation, and security services share one LiteLLM control plane with observability and documented runbooks for store and corporate IT partners.
Action
→Shipped Open Terminal inside Lux GPT: multi-user sandboxed engineering environments with Team Tools presets for safe operational workflows
→Established LiteLLM as the shared AI control plane—model routing, guardrails, Skill Hub, enterprise OIDC SSO—for chat, wiki automation, and MCP tools
→Built KC-Wiki as an agentic knowledge layer: LDAP-authenticated MediaWiki, automated document ingest with LiteLLM guardrails, and human review before publish
→Exposed wiki content to agents via MediaWiki MCP so Lux GPT can ground answers and write back governed updates—not just retrieve static docs
→Integrated MCP tooling for live operations: ephemeral-token Azure inventory and programmatic privileged access
→Unified production services on Traefik-routed Podman with Grafana KPI dashboards, self-hosted Sentry-compatible error tracking, GitLab CI, and documented runbooks
→Folded mid-2026 platform work into the same control plane: Keycloak identity for Knowledge Central, LiteLLM gateway, virtualization station, and a monorepo that keeps those services reviewable together
→Productized the agent workspace as KCOS — modular SaaS substrate plus operator status board — so new workspace capability ships as part of Knowledge Central, not a side stack
→Partnered with retail IT, audit, and security stakeholders to consolidate disconnected pilots into one internal platform
Results
✓Closed the agentic loop: operators chat, query live infrastructure, execute in Open Terminal, and publish durable knowledge to KC-Wiki with review controls
✓Delivered an integrated enterprise AI and ops platform replacing fragmented AI/inventory/wiki pilots with one production stack
✓Enabled stakeholder-facing secure AI with guardrails, cost tracking, Skill Hub adoption, and live Azure MCP context without persistent sensitive storage
✓Improved audit and operational readiness through provisioned Grafana dashboards, runbooks, and GitLab-managed IaC