# MudraForge Technical Architecture Notes — Day 7 **Topic:** This is Adesha (The Sovereign Mobile Governance Terminal) **Companion Video:** [Watch on YouTube](https://youtu.be/SFCdqncOsgI) **Author:** Mondeep Engti, Founder @ MudraForge **Canonical Specification:** `https://mudraforge.in/series/day7` **Series:** MudraForge — Building Organizational AI (Day 7 of 7) --- ## 1. Executive Summary: The Operational Imperative Autonomous organizational AI running 24/7 across customer-facing channels introduces an operational crisis that classical desktop dashboards cannot solve: **Human Oversight Latency**. When high-consequence agent actions trip circuit breakers, require Tier 3 human approvals, or encounter distributed transaction timeouts at 2:00 AM, traditional corporate consoles (VPNs, SSO portals, Grafana dashboards, database runbooks) stall business workflows for hours or force enterprises to take dangerous risks by bypassing human safety gates. > **"If governance requires opening a laptop, connecting to a VPN, and running database scripts at 2:00 AM, it is not operational governance."** **Adesha** is the sovereign mobile governance terminal designed around the MudraForge edge runtime. It transforms enterprise AI governance from a slow, desktop-bound administrative process into a high-velocity, cryptographic mobile triage capability. ```text ┌─────────────────────────────────────────────────────────────────────────────┐ │ THE OPERATIONAL LATENCY GAP (Illustrative Scenario) │ │ │ │ 2:14 AM: Circuit Breaker Trips (Consecutive Invariant Collision) │ │ │ │ ❌ TRADITIONAL DESKTOP DASHBOARD: │ │ Slack webhook alert ──▶ Operator asleep ──▶ High operational latency │ │ ──▶ Wake up, boot laptop, connect VPN, open Grafana, run DB scripts │ │ ──▶ RESULT: Extended queue stall, customer SLA risk. │ │ │ │ ✅ ADESHA SOVEREIGN MOBILE TERMINAL (Illustrative Interaction Model): │ │ High-priority Edge Push ──▶ Biometric device unlock │ │ ──▶ Inspect exact state transition proposal & ledger signature │ │ ──▶ 1-Tap AUTHORIZE, bounded OVERRIDE, or PAUSE/FREEZE │ │ (each re-validated by the authoritative runtime in seconds). │ └─────────────────────────────────────────────────────────────────────────────┘ ``` > **"Adesha is the sovereign mobile environment between an enterprise's people and its AI workforce."** --- ## 2. Traditional Desktop Consoles vs. Adesha Sovereign Terminal | Dimension | Traditional Desktop Console | Adesha Sovereign Mobile Terminal | | :--- | :--- | :--- | | **Operational Posture** | Passive observer (Grafana / CloudWatch charts) | Active state-transition control plane (Pre-commit CAS hold) | | **Access & Latency** | High friction (VPN + SSO + Desktop browser) | Instant triage (Sub-second Edge push + Biometric unlock) | | **Authority Model** | Role-based web session cookie | Hardware-backed Ed25519 cryptographic device signatures | | **Intervention Scope** | All-or-nothing process kill | Granular 4-tier scoping: Process, Agent, Workspace, Tenant | | **UI Architecture** | Heavy monolithic React SPA (15+ MB) | Server-Driven UI (SDUI) schema (<50 KB) over Cloudflare Edge | | **Offline Capability** | Fails immediately on network disconnect | Offline inspection cache (Local SQLite delta sync engine) | --- ## 3. The 10-Layer Sovereign Stack Breakdown ```text Person ↓ Identity ↓ Tenant Root ├── People & Roles ├── Integrations ──▶ Asset Registry └── Policies ↓ Workspace (Explicitly Scoped Execution Boundary) ↓ Capabilities (Effective Tool Surface) ↓ Agents (MudraSwarm Engine) ↓ Execution (State Transitions & Ed25519 Signed Ledger) ↓ Governance (Adesha Mobile Terminal) ``` | Stack Layer | Architectural Responsibility | Canonical Implementation Artifact | | :--- | :--- | :--- | | **1. Person & Identity** | Cryptographic identity of human operators and administrators | Ed25519 Keypairs & WebAuthn Biometric Keystores | | **2. Tenant Root** | Enterprise boundary hosting roles, integration assets, and master policies | `tenants.js` & Scoped Tenant Configs | | **3. Asset Vault** | Registered enterprise resources (CRMs, payment gateways, messaging lines) | Governed Integration Asset Registry | | **4. Scoped Workspace** | Explicit operational boundary isolating humans, agents, and processes | `workspaceId` Scoped Execution Isolation | | **5. Capabilities** | Effective tool surface calculated via the 3-set intersection equation | `capability_contracts.js` | | **6. Agent Engine** | Autonomous multi-agent orchestration and dynamic planning loop | `mudra_swarm.js` | | **7. Tool Dispatch** | Deterministic tenant gating and skill parameter validation | `tool_dispatch.js` & `VALID_TOOLS` | | **8. State Invariants** | Precondition validation and compound workflow risk accumulators | CAS Hold & Invariant Gating Matrix | | **9. Durable Ledger** | Tamper-evident audit trail with signed cryptographic state transitions | `agent_ledger` & `chat_archive` | | **10. Adesha Terminal** | Native mobile control surface for real-time inspection and intervention | Adesha Android Engine + Cloudflare Edge Router | --- ## 4. Workspaces as Scoped AI Execution Boundaries In Adesha, a Workspace (`workspaceId`) is **not a chat channel or project board**—it is an **explicitly scoped AI execution boundary**: ```text ENTERPRISE TENANT ROOT │ ┌─────────────────┼─────────────────┐ │ │ │ PEOPLE & ROLES INTEGRATIONS POLICIES │ │ │ │ ┌─────┼─────┐ │ │ ▼ ▼ ▼ │ │ CRM Chat Payments │ │ │ │ │ │ │ Asset Asset Asset │ └───────────────┬───────────────────┘ │ ▼ ADESHA WORKSPACE (Scoped Execution Boundary) │ ┌───────────┼───────────┐ ▼ ▼ ▼ Humans AI Agents Processes │ │ │ └───────────┼───────────┘ │ ▼ DETERMINISTIC EXECUTION ``` ### The Effective Access Equation: $$\text{Effective Capabilities} = \text{Role Permissions} \cap \text{Workspace Capabilities} \cap \text{Tenant Enabled Tools}$$ ### The Two-Stage Architectural Invariant: 1. **Authorization Surface:** Effective capabilities determine what tool operations the system may *propose or expose* to the reasoning model. 2. **Execution Authority:** Deterministic runtime policies and state invariant validation determine what state transitions may actually *commit*. > **"The UI reflects authority. It does not create authority."** --- ## 5. Governed Integrations as Tenant Assets Adesha models external systems (CRMs, messaging channels, payment gateways) as **governed tenant resources** rather than static vendor connections: * **Tenant Asset:** The connected resource registered at the enterprise root (e.g., `crm_acme_corp`, `whatsapp_primary_line`, `payment_gateway_stripe`). * **Workspace Capability:** The granular operational permission granted to a workspace (e.g., `crm.read`, `whatsapp.send`, `refund.execute`). ```text ┌─────────────────────────────────────────────────────────────────────────────┐ │ ADESHA — CONNECTED SYSTEMS & ASSETS (support-ops) │ │ │ │ ● CRM Integration ──▶ Asset: crm_acme_corp ──▶ Scope: [crm.read] │ │ ● Messaging Channel ──▶ Asset: whatsapp_primary ──▶ Scope: [send] │ │ ● Payment Gateway ──▶ Asset: payments_primary ──▶ Scope: [refund] │ │ │ │ BASELINE TOOL SURFACE (Autonomous): { crm.read, whatsapp.send } │ │ CONDITIONAL CAPABILITY (Tier 3 Gate): { refund.execute → HITL Required } │ └─────────────────────────────────────────────────────────────────────────────┘ ``` --- ## 6. The "Golden Path" Operational Demonstration ```text ┌─────────────────────────────────────────────────────────────────────────────┐ │ THE GOLDEN PATH OPERATIONAL FLOW │ │ │ │ [ TRANSACTION 1: BORING SUCCESS — AUTONOMOUS MUTATION ] │ │ Customer reserves slot / updates cart ──▶ Tier 2 bounded mutation │ │ ──▶ Preconditions & Invariants pass ──▶ Automatic Edge Commit │ │ ──▶ Ed25519 Ledger written. │ │ ★ "For this transaction, no human intervention was required." │ │ │ │ [ TRANSACTION 2: THE ANOMALY — TIER 3 HITL GATE ] │ │ Customer requests $150 refund ──▶ Threshold > $100 crossed │ │ ──▶ Execution paused at Edge (CAS hold) ──▶ Pushed to Adesha in real time │ │ ──▶ Operator inspects proposal & invariant context on mobile card │ │ ──▶ Operator biometrically unlocks device signing credential │ │ ──▶ Dispatches signed authorization ──▶ Server re-validates & commits. │ │ │ │ [ TRANSACTION 3: RECONCILIATION — DISTRIBUTED SAGA RECOVERY ] │ │ Payment gateway timeout ──▶ Task moved to `mudra_tasks_dead` (DLQ) │ │ ──▶ Operator triggers 1-tap RECONCILE saga from Adesha terminal. │ └─────────────────────────────────────────────────────────────────────────────┘ ``` --- ## 7. The Attention Center & 4 Mobile Operational Primitives ```text ┌─────────────────────────────────────────────────────────────────────────────┐ │ ADESHA UNIFIED ATTENTION CENTER │ │ │ │ [ CRITICAL HITL CARD ] 2m ago │ │ Customer Refund — Order ORD-9912 URGENT │ │ ───────────────────────────────────────────────────────────────────────── │ │ Operator: Support Supervisor Workspace: support-ops │ │ Effective Capability: refund.execute Approval Scope: ≤ $500 │ │ ───────────────────────────────────────────────────────────────────────── │ │ Trigger: Aggregate transaction amount > $100 (Tier 3 Threshold) │ │ Agent Proposal: commit_refund(order_id="ORD-9912", amount=150.00) │ │ Precondition: Customer reported damaged item. Proof uploaded. │ │ State Invariant: Daily refund quota remaining: $850 / $1000 │ │ │ │ ┌─────────────────────────┐ ┌──────────────────────────┐ │ │ │ [ AUTHORIZE & SIGN ] │ │ [ ADJUST & OVERRIDE ] │ │ │ │ Device Credential │ │ Within policy bounds │ │ │ └─────────────────────────┘ └──────────────────────────┘ │ │ │ │ ┌─────────────────────────┐ ┌──────────────────────────┐ │ │ │ [ REJECT / DISMISS ] │ │ [ PAUSE / FREEZE ] │ │ │ │ Send explanation │ │ Process/Agent/Workspace│ │ │ └─────────────────────────┘ └──────────────────────────┘ │ └─────────────────────────────────────────────────────────────────────────────┘ ``` | Primitive | Mobile Trigger & Action | Authoritative Runtime Enforcement | | :--- | :--- | :--- | | **1. INSPECT** | 1-Tap audit trail view with real-time waveform telemetry | Reconstructs state history from Ed25519-signed immutable execution ledger | | **2. PAUSE** | Scoped mutation pause selector (Process, Agent, Workspace, Tenant) | Instantly flips CAS gate to reject non-read mutations at the edge | | **3. OVERRIDE** | Adjust parameters (e.g., approve partial refund of $100 instead of $150) | Modified proposal is re-injected through the full invariant validation pipeline | | **4. RECONCILE** | 1-Tap trigger on stalled Dead Letter Queue items (`mudra_tasks_dead`) | Initiates distributed saga compensation or atomic state rollback | > **"Override modifies the proposal; it does not override the runtime."** --- ## 8. Server-Driven UI & Complete 4-Layer Operating System ```text ┌─────────────────────────────────────────────────────────────────────────────┐ │ SERVER-DRIVEN UI OVER CLOUDFLARE EDGE │ │ │ │ Cloudflare Worker Edge Runtime │ │ ├─ Evaluates tenant permissions & attention state │ │ └─ Pushes dynamic SDUI Document schema (<50 KB) │ │ │ │ │ ▼ Edge Transport / Real-Time Delta Synchronization │ │ │ │ Adesha Android Native Engine (Jetpack Compose) │ │ ├─ `SDUIComponentRenderer.kt` renders native high-performance UI │ │ └─ `AdeshaSyncEngine.kt` handles background SQLite delta synchronization │ └─────────────────────────────────────────────────────────────────────────────┘ ``` ```text ┌─────────────────────────────────────────────────────────────────────────────┐ │ THE COMPLETE MUDRAFORGE STACK │ │ │ │ HUMAN OPERATIONAL LAYER: │ │ Adesha │ │ Identity • People • Workspaces • Assets • Integrations • Capabilities │ │ Attention • Authorization • Inspection • Scoped Mutation Pauses │ │ │ │ │ │ signed intent / authorization request │ │ ▼ │ │ GOVERNANCE LAYER: │ │ Deterministic Runtime Control Plane │ │ Policies • Tiers • Invariants • Accumulators • Circuit Breakers │ │ │ │ │ ▼ │ │ EXECUTION LAYER: │ │ MudraSwarm Engine + Edge Database Proxies (Ed25519 Signed Ledger) │ │ Tool Dispatch • Scoped Workspaces • State Machine Engine │ │ │ │ │ ▼ │ │ REASONING LAYER: │ │ Model-Agnostic LLMs (Sarvam, Gemma 4, Llama 4, Kimi) │ └─────────────────────────────────────────────────────────────────────────────┘ ``` > **"Enterprise AI will not be won by the company with the largest foundation model. It will be won by the enterprise that possesses the most reliable, deterministic, and governable execution runtime."**