ATR (Aetherium Transmission & Retrieval) is a Class D Deep Core Server operating as a Ground Truth Authority.
ATR Core is not:
- an application runtime,
- a business-workflow orchestrator,
- an agent reasoning engine.
ATR Core is:
- a contract enforcement kernel,
- an immutable truth recorder,
- a canonical event publisher.
- NATS JetStream backbone in containerized mode.
- Deterministic envelope transit between gates and internal workers.
- Tachyon phase target: zero-copy pathways and kernel-bypass-ready transport.
Mandatory envelope checks on ingress:
- Schema validation
- Deterministic canonicalization (byte-level)
- Signature verification (Ed25519)
- Inspira ruleset enforcement
Validation failures are routed to quarantine (audit.violation) and never admitted to main flow.
Truth model is fixed:
Truth = Immutable Log + Materialized Snapshot
- Immutable Log: append-only, replayable source of truth.
- Materialized Snapshot: idempotent derived state for low-latency read/query.
- Recovery: reconstruct snapshot deterministically from log + ordered replay.
Only four external gates are allowed:
- Ingress (submit envelope)
- Stream (subscribe canonical events)
- Query (state + ledger)
- Admin (health + governance)
Any additional endpoint requires explicit architecture review.
- Canonical bytes, not pretty JSON, define hash/signature identity.
- No hidden nondeterminism from map iteration, timing side effects, or randomized behavior.
- Ordering authority must come from stream/broker sequence, not wall-clock assumptions.
- State transitions must remain idempotent under at-least-once delivery.
Ingress → Immune Validation → Stream → Log → Worker → Snapshot
Rejected envelopes:
Ingress → Immune Validation (failed) → Quarantine/Audit Stream
- Docker/Kubernetes deployment
- SSD/NVMe-backed persistence
- Primary goal: operational correctness + stable p99 tail latency
- Unikernel + kernel-bypass networking (RDMA/DPDK/XDP by profile)
- NVMe optimized write path
- Target throughput and latency defined by benchmark contract
Performance and correctness claims are governed by specs/benchmark_contract.yaml.
- Tail latency percentiles (p50/p95/p99/p99.9/max) are required.
- Effectively-once semantics is default claim.
- Exactly-once requires explicit failure-injection proof.