Architecture overview
The Nebbos platform is composed of four product surfaces operating on a shared substrate. Each surface has a distinct role in the operator’s day-to-day workflow. Every capability the platform exposes is an interaction among two or more of these surfaces.
The four product surfaces
| Surface | Function | Deployment |
|---|---|---|
| Platform | Web application. Hosts department-scoped Pearls, dashboards, approval workflows, task tracking, and audit-chain readers. Every action is recorded against a resolved identity. | Cloud (us-east-1 default; eu-west-1 available for Enterprise deployments) |
| App | Native desktop client. Provides the offline execution path for operator work; synchronises with the Platform when network is available. | macOS 13+ and Windows 11+ |
| MCP | The Model Context Protocol capability layer. Classifies each tool call to the appropriate data tier on the operator’s host, applies redaction before egress, and forwards the call to the substrate. Policy enforcement is operator-scoped. | Runs on the Cradle |
| Cradle | Hardware device. Carries the MCP binary, the operator’s Pearl memory slice, and the cryptographic keys that authorise Host and Architect-tier operations. Elevated capability is bound to physical possession of the device. | FIPS 140-3 Level 3 secure element |
Substrate consistency across surfaces
Every request from the Platform, every action taken by the App, every read mediated by the MCP, and every elevated write authorised by the Cradle is committed to the same audit chain, evaluated against the same policy classifier, and constrained by the same row-level isolation at the database layer. Isolation is enforced at the substrate rather than at any single surface, so application-layer errors in one surface cannot cross a scope boundary.
Reading path
- Security model — enforcement mechanisms for the four governance pillars.
- Glossary — canonical definitions of Cradle, Pearl, MCP, and related terms.
- The audit chain — the substrate record of every platform operation.