The canonical runtime path.

CLIENTS
Saturn One / Saturn Container
Applications communicate with Saturn-Control.
AUTHORITY
Saturn-Control
Identity, policy, desired state, operations, and audit; it does not run inference.
MANAGED WORKLOAD
managed agent container
The authenticated workload requests private inference.
PRIVATE INFERENCE
Saturn-Node
Private service for authenticated workloads; it is not publicly reachable.
RUNTIME
saturn-mlx-mesh / MLX
In-process inference library and MLX runtime.
BOUNDARIES

Responsibilities stay separated.

CLIENTS
Address Control only
Apple applications do not connect directly to Container Runners, managed workloads, or Saturn-Node. They never receive workload-compute credentials.
CONTROL
Authority, not inference
Saturn-Control owns identity, policy, desired state, operations, and audit. It does not run inference.
WORKLOAD
Calls private inference
Managed workloads call Saturn-Node with workload-scoped authentication. Node does not poll Control as the product architecture.
NODE
Private service
Saturn-Node is not publicly reachable. Secure composition, credentials, transport, and MLX integration remain under development.
CONTAINER
Remote-only operator
Saturn Container operates managed agent containers through Saturn-Control. It is not a local CLI frontend.
NUTRITION
Separate local path
NutriSelf defaults to a standalone local-first MVP. Managed Saturn execution is not a startup dependency.
CURRENT STATE

Contracts first, evidence before claims.

Contracts and required CI exist for Saturn-Control. Deterministic fake-Control and staging behavior, secure Node composition, private transport, the Node adapter, and reproducible Apple Silicon acceptance are still being developed and verified.

EvoIntelligenceFabric names the long-term coordinated architecture. It does not imply current public availability.