Local before network
If a useful action can happen on the device, it should. The network adds continuity and collaboration when those things earn their cost.
Technology · the bounded stack
Ten products do not need ten architectures. They need a small set of honest patterns for local work, durable state, institutional records, and paid services.
Drafts and active context begin on the device.
Authentication and row-level rules decide what can cross.
Postgres, Realtime, Storage, and retrieval only where the product needs them.
The first useful interaction happens close to the person. Cloud state is scoped, authenticated, and kept smaller than the interface.
Sensitive work runs server side with narrow request shapes.
Durable records sit in Postgres with isolated environments for change.
Roles, retention, and exports are explicit parts of the product.
Distillation work needs durable records and explicit institutional boundaries. Each request has a visible source, result, and audit trail.
Files stay on the device for immediate, private first use.
Static delivery, caching, and functions serve the public product.
Identity and billing unlock durable team work without enclosing the local core.
The commercial surface stays fast and legible. Paid boundaries are server side. The free local core does not require an account.
The operating rules
If a useful action can happen on the device, it should. The network adds continuity and collaboration when those things earn their cost.
Inference, speech, email, billing, and privileged data access stay server side. Clients receive only the capability they need.
When a product must answer from known material, it retrieves that material and exposes its sources. A plausible sentence is not evidence.
Exports, deletion, and bounded retention are product behavior, not fine print. A person should be able to outgrow the system cleanly.
Primary references
The stack map describes design intent and current implementation patterns. The platform behavior behind it is documented by the platform maintainers.
The architecture
Bring us the sensitive edge, the expensive edge, and the place where trust could fail. That is where the architecture starts.