Aquilon features a broker daemon with overall ownership of the system including profile compilation and host notification. The broker models an organisation's infrastructure as objects in a RDBMS, generating configuration code from this as needed. User interaction takes place over a kerberos secured connection to the broker, which delegates sandboxes (cloned git branches) to users when changes to configuration code is needed.