in-lockstep Runtime Architecture

in-lockstep Runtime Architecture An architecture diagram generated by Archify. CI trampolines · GitHub Actions, GitLab CI · Architecture component CI trampolines GitHub Actions, GitLab CI in-lockstep CLI · composition root · Architecture component in-lockstep CLI composition root Lifecycle loader · lockstep.py, trusted ref · Architecture component Lifecycle loader lockstep.py, trusted ref RunContext · spend, deadline, kill switch · In-process run RunContext spend, deadline, kill switch Container · verb -> adapter · In-process run Container verb -> adapter Middleware · budget, approval, otel · In-process run Middleware budget, approval, otel AI adapters · review, triage, implement... · In-process run AI adapters review, triage, implement... Deterministic · build, test, validate, run · In-process run Deterministic build, test, validate, run Sandbox + worktree · container, no network · Privileged tier: outside any middleware chain Sandbox + worktree container, no network AiInvoker · retry, price, scan, settle · In-process run AiInvoker retry, price, scan, settle ProviderRegistry · routes, caps, prices · In-process run ProviderRegistry routes, caps, prices Model providers · Anthropic, OpenAI, Ollama... · Architecture component Model providers Anthropic, OpenAI, Ollama... Redact + sink · every write masked · Privileged tier: outside any middleware chain Redact + sink every write masked EgressPolicy · probe-verified · Privileged tier: outside any middleware chain EgressPolicy probe-verified ChangeGuard · tiered path policy · Privileged tier: outside any middleware chain ChangeGuard tiered path policy Ledger · orphan branch, append-only · Architecture component Ledger orphan branch, append-only Run artifacts · changeset, scorecard, bundle · Architecture component Run artifacts changeset, scorecard, bundle SCM host · GitHub / GitLab · Architecture component SCM host GitHub / GitLab Ticket source · issues and chat-ops · Architecture component Ticket source issues and chat-ops Evaluation · corpus, verdict sidecars · Architecture component Evaluation corpus, verdict sidecars run <workflow> trusted ref binds context() ctx.do() by capability spends executes priced model generate() commands staged writes check first record masked changeset propose chat-ops harvest, judge, around Privileged tier: outside any middleware chain In-process run Legend Frontend Backend Database Cloud Security External

One process, two tiers

  • • Middleware is the module's chain; the privileged tier runs outside it
  • • Every model call goes through one invoker and one registry

Determinism first

  • • Tests, lint, build and run are the repository's own commands
  • • A model is reached only where a judgment is required

Evidence

  • • Every run leaves a masked, append-only record
  • • The corpus and the judge read those records back