The architecture needs to cover a range of directives from security, access control, and service level agreements to business workflow, event processing, and information management and business rules.
You can implement your services using a variety of programming paradigms, from process-flow style BPEL processes, to state machine-style eventmanagement, to declarative business rules style.