Portable deployment
Build Docker images, render Compose, and lint/render Helm profiles; runtime cluster validation remains pending.
Operations plane
Run the same control plane inside your boundary.
Build the portable Node and web images and render the Helm chart without a managed cloud dependency; production cluster proof is still pending.
Product boundary
On-prem is a first-class open deployment target. The chart and runbooks are a preview until live install, recovery, upgrade, and air-gap tests pass.
- Available now
- Behavior backed by the current local vertical slice and automated tests.
- Preview
- Useful implementation exists, but the complete operating journey is not proven.
- Planned
- Part of the open MCP-native roadmap, not current product behavior.
- Deployment
- Managed cloud and self-hosted targets share portable packages; live parity remains an acceptance test.
Capabilities
What on-prem operations controls
Status labels distinguish tested behavior from useful previews and the open roadmap.
Existing infrastructure
Render external MongoDB, Secret, Ingress, certificate, and network-policy configuration; vault and telemetry integration are planned.
Lifecycle operations
Use checked-in operational scripts and runbooks; live backup, restore, upgrade, and rollback proof remains outstanding.
Restricted environments
Target disconnected operation with mirrored, signed artifacts after the release and air-gap test gates pass.
Operating flow
The target journey, with current maturity called out above.
Preflight
Validate storage, DNS, ingress, certificates, secrets, and identity before install.
Install
Render reviewed Helm values; deploy pinned and signed artifacts after the release gates exist.
Operate
Use documented backup, restore, upgrade, rollback, and diagnostic runbooks.
Target control surface
Designed for platform and security teams.
These controls define the intended product boundary; the capability labels above are the current implementation record.
- Docker Compose evaluation
- Production-oriented Helm target
- Air-gapped artifact mirroring
- External secret providers
- Backup and restore jobs
- LTS release channels
Evaluate locally or inspect either deployment target.
The managed cloud and Kubernetes paths are previews of one open codebase, with no intended capability gate or mandatory call-home path.