ARCHITECTURE / CLEAN-SHEET BEAM

Small trusted core. Explicit outward power.

The primitive vision was a dense multi-cluster fabric. The final direction is more disciplined: keep resilience, isolation, and dynamic routing; retire decorative governance and unnecessary language layers; make every dependency auditable.

BEAM.NINJA target architectureA central clean-sheet BEAM core connects outward through bounded nucleus services to local AI, storage, networking, recovery, and operator interfaces.INPUTLOCAL AImodels + toolsBOUNDARYNETWORKauthenticated peersSTATESTORAGEowned + encryptedCONTROLOPERATORlocal authorityLIFECYCLEUPDATEsigned + reversibleRESILIENCERECOVERYoffline-firstCLEAN-SHEETBEAM COREbare metal nucleus
Target system map. Lines indicate bounded contracts—not proof that every downstream gate has passed.

SYSTEM LAYERS

A dependency chain that can be refuted.

Higher layers inherit no authority merely by existing. They earn bounded capabilities from the layer below and remain incomplete until their own evidence gates pass.

L0–L2

Machine substrate

UEFI bootstrap, owned memory, paging, traps, interrupts, time, SMP, DMA, update, and recovery. Every native boundary is explicit and fail-closed.

active construction
L3

Clean-sheet BEAM core

A fresh loader, terms, interpreter, garbage collection, processes, schedulers, code management, and bounded built-in functions. OTP is a semantic oracle, not a shipping runtime dependency.

planned + early work
L4

Sovereign services

Capability-bound storage, networking, cryptography, distribution, and supervision without Linux, POSIX, or an upstream ERTS underneath BEAM.

planned
L5

Local AI gateway

A usable operator surface for models, tools, data, and policy—packaged for offline-first installation and recovery at the far edge.

target bundle

NON-NEGOTIABLES

No host hiding below the promise.

  • No Linux below BEAM.The release target is bare metal, not a branded Linux appliance.
  • No upstream ERTS as the product runtime.Compatibility is proven against an oracle; the shipping core is fresh.
  • No inferred acceptance.A neighboring test cannot promote an unrun gate.
  • No cloud requirement for useful operation.Networks expand capability; they do not grant local permission.

GROUND TRUTH

Architecture is intent. Evidence is status.

Open the evidence ledger