mosaic/stack
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 2 Wiki Activity

docs(design): MS22 DB-centric agent fleet architecture #604

Merged
jason.woltje merged 3 commits from docs/ms22-architecture into main 2026-03-01 14:35:15 +00:00
Conversation 0 Commits 3 Files Changed 1 +413

3 Commits

Author SHA1 Message Date
Jason Woltje
a640a2f7b8 docs(design): add security isolation model — zero cross-user access 
- Full container, volume, and DB-level isolation per user
- API enforcement: all queries scoped by authenticated userId
- Admins cannot see other users' keys or chat history
- Container-to-container communication blocked by default
- Team workspaces explicitly out of scope
 2026-03-01 08:34:44 -06:00
Jason Woltje
3974e08b6c docs(design): add per-user container model, Docker API lifecycle, full schema 
- Per-user OpenClaw containers (on-demand, scale to zero)
- Users bring their own API keys/subscriptions
- ContainerLifecycleService manages Docker containers dynamically
- User containers NOT in docker-compose — created at runtime
- 11 task phases with clear dependencies
- Config update strategy: DB change → container restart
 2026-03-01 08:28:35 -06:00
Jason Woltje
3ceb45c0b2 docs(design): MS22 DB-centric agent fleet architecture 
Minimal env vars (DATABASE_URL + MOSAIC_SECRET_KEY), all config in Postgres,
onboarding wizard, breakglass auth, OIDC via settings UI.
 2026-03-01 08:17:11 -06:00