Administration console โ design
Scope: what the administration console is, what each of its screens does and which service answers it.
Agentic AI Layer
Companion to: architecture.md
App authorization
How an app gets an authorization store of its own. Authorization is a
App Catalog, Profiles and Integrations
Companion to: architecture.md, custom-catalogs.md, store-contract.md, app-customization.md
Authorization
One vocabulary for the platform's rights: the rules the model follows, the
Branding
Every page the platform serves shows one brand: the concierge, the
The control plane: which program does what
The programs that run the Gentian OS control plane, what each one holds,
The life of a tenant's and an app's data
Companion to: operations.md (reference detail, ยง9),
The tenant's data is the tenant's
Gentian OS is open source, and what that gives a tenant is this: at any
Identity and Access Management (IAM)
This document describes identity, roles, and access control in Gentian OS.
The Kernel and the Default Install
Companion to: architecture.md
LLM Serving Integration Design
This document details the architecture for integrating Large Language Model (LLM) serving capabilities into Gentian OS.
Mail Kernel Extension
Companion to: architecture.md
Multi-Tenancy, Domains and Security
Companion to:
Networking
How traffic is admitted inside the cluster: the network plugin, the
Operations: Backup, DR, Observability, Image Updates
Companion to: architecture.md,
Partners: identity across clusters
A person who has an account in a realm on one cluster and an account in a
Resource plans and usage โ design
Scope: How a tenant's resource ceiling is chosen, enforced, recorded and invoiced.
Routing and the Edge
Companion to: architecture.md
The App Store contract
A store is a service outside the cluster, run by a vendor, on infrastructure
Versioning and updates
How Gentian OS and the apps on it move from one version to the next. The