CoreDirective reference architecture

one hardened host, 19 services, three trust segments, sanitized, no addresses, ports, or versions

Topology and flowsBack to portfolioClick a box for what it is, the controls it holds, and the file that proves it.
request path, user to service AI agent path, screened on the way out fallback on spend ceiling detection and audit, shipped off-host change path, pipeline only internal dependency inbound SSH, break-glass external service users, operators Claude API allowlisted source range Cloudflare edge off-host, identity checked before origin, WAF and DDoS, no origin address in DNS Access WAF + DDoS Host, single hardened VM published to loopback only cloudflared host network, read-only root host sshd net-ai, sealed no route in or out n8n and Squire bridge in Whisper Ollama voice to text, on host local LLM, sealed net-core state, identity, orchestration n8n Langfuse ×4 Vault Keycloak Squire Guardrails Postgres Teleport SOAR, bridge to net-ai secrets, DB engine OIDC, realm roles SOC agent, allowlist PII, injection, policy backs five services recorded SSH, MFA, JIT every service: no-new-privileges (Falco excepted, documented), CPU, memory, and PID limits net-monitoring reads the kernel via eBPF audit shipper also on net-core Falco, eBPF Falcosidekick event handler Vector Datadog agent Object storage state + backups CMK encrypted retention rule timed restore, monthly Datadog SIEM, events, logs Delivery Terraform is the only supported path for infrastructure change, CI holds no long-lived cloud credentials pull request OIDC exchange plan, scan, lint OPA gates, 4 deny human review apply, main only nightly drift check any diff → alert HTTPS dials out, host initiates no inbound listener proxied to loopback leaves the host only here daily spend ceiling, every call traced trace short-TTL creds OIDC nightly alerts audit, gRPC mTLS audit logs logs, metrics applies re-plans against live SSH, break-glass source-restricted
Requestedge auth → tunnel dialed out → loopback, tunnel dies: site unreachable, no port opens
AIagent → guardrails → API, spend cap, traced, sealed local fallback
Detect + auditkernel → Falco → SIEM, sessions → mTLS → SIEM, sensor sits below the workloads
ChangePR → checks → policy gates → review → apply, nightly drift re-plan, CMK-encrypted state