How It Works
Propose, admit, run, observe, verify.
See /architecture/ for the real design: Raft control plane, sovereign hosts with 18 admission checks, userspace WireGuard mesh, content-addressed storage and a health-gated edge.
The loop
An operator applies a dh/v1 manifest. The Raft control plane records it as desired state, the scheduler plans placements, and the reconciler turns them into signed assignments, each carrying a capability bound to one host, generation, digest and resource ceiling. Each host checks the assignment against its pinned root and its own policy (18 ordered checks), runs it if every check passes, journals what it did, and reports signed observations. The control plane never marks anything running until a host has observed it.
Propose, admit, run, observe, verify. See /architecture/ for the real design: Raft control plane, sovereign hosts with 18 admission checks, userspace WireGuard mesh, content-addressed storage and a health-gated edge.