BVLOS 4-Tier Architecture

ADR-0018 (binding). Zero-trust, air-gap-friendly C4ISR stack: sensor edge to global command. Tiers 1-3 manifests live in repo/infra/; Tier 4 is live in production.

← Back
T1 — Sensor Edge
6x Raspberry Pi 5
PROVISIONED
  • Shifu device abstraction (PLC / Modbus / CCTV)
  • Splinter zero-trust workload identity
T2 — Tactical Edge
2x Workstations (K3s HA)
PROVISIONED
  • NATS JetStream event backbone
  • Ollama local SLMs (llama3, phi3)
  • Memgraph topology + InfluxDB telemetry + Qdrant RAG
  • MinIO object storage
T3 — Strategic Cloud
VPS (K3s, GitOps)
PROVISIONED
  • Hermes multi-agent coordinator
  • SimDB Monte Carlo + redundancy
  • ArgoCD + Harbor + Splinter control plane
  • Prometheus / Grafana / Loki
T4 — Global DMZ
Vercel + Supabase
LIVE
  • Next.js C4ISR UI (lunav-r.com)
  • Supabase Auth + immutable audit ledger
  • Multi-tenant RBAC (12 roles, D08)
  • /api/hermes gateway proxy