PRIVATE AI ENABLEMENT · DWG CAL-SURF-001

The Private-AI Deployment Blueprint THE AI SURFACE, DRAWN AS ONE ASSEMBLY

Every AI app and agent, the vibe-coded ones included, lives the same lifecycle: it gets built, it runs, someone watches it, something governs it, and something keeps it safe. BROCS is that lifecycle written down: Build, Run, Observe, Control, Secure. This drawing is the framework as one assembly, standing inside your perimeter on infrastructure you own, with each stage served by a Calliope AI machine.

the drawing begins uncolored. scroll, and each machine powers on in its maker's color: WORKBENCH ASTROLIFT ZENTINELLE Download the PDF
SHT 01 The assembly · the AI surface SCALE NTS · DIMETRIC 2:1
Commission
policy, back to the runtime BBUILDRRUNOOBSERVECCONTROLSSECUREWORKBENCHASTROLIFTZENTINELLE CALLIOPE AIthe AI surfaceYOUR PERIMETERONE LIFECYCLE . FIVE STAGESyour computeK8s . ECS . Cloud Run . on-premagents and appsfrom commit to productionnothing leavesmodels, data and audit stay inTHE AI SURFACEDIMETRIC 2:1 . ONE ASSEMBLY . NTSCOMPUTENETWORKASSURANCE

Scroll to commission the line

B

The AI surface

Select a stage, or run the line

Five stages, one assembly. Click a machine on the drawing, or commission the whole line and watch each stage take its machine's color.

Served by

Calliope AI WorkbenchBuild · Run · Observe
AstroliftRun · Observe · Control
ZentinelleObserve · Control · Secure

General notes

  1. Everything runs in your environment. Your cloud, your racks, your rules.
  2. Any model welcome: local open weights, cloud hosted, or bring your own, served inside.
  3. Nothing leaves the perimeter. Models, prompts, data and audit stay in.
  4. Lead time drops. One integrated happy path from idea to governed production.
  5. Technical and business builders alike get autonomy and flexibility, while the org keeps control and visibility.
DrawingThe AI surface
ProjectionDimetric 2:1
StagesB · R · O · C · S
PerimeterYours
EgressNone required
SHT 02 Parts list · the three machines EXPLODED · NTS
the artifactships with its manifesttool benchesIDE, notebooks, SQL, chatFIG. 1THE WORKBENCH . EXPLODED

Calliope AI Workbench →

PART CAL-WB-01 · QTY 1 PER TEAM

BROCS

Compose apps and agents on one governed bench. The tool stack your builders already reach for, assembled and installed inside your perimeter through the Workbench Installer.

calliope.ai ↗
your workloadapps, agents, servicesfoundationyour cluster, any cloudFIG. 2THE LIFT . EXPLODED

Astrolift →

PART CAL-AL-02 · QTY 1 PER CLOUD

BROCS

Deploy and serve at scale. A multi-cloud and on-prem Kubernetes PaaS that lifts what the bench built into production and streams the platform telemetry back.

astrolift.ai ↗
compliance packsSOC2 to NIST AI RMFpolicy engine24 evaluators, in lineFIG. 3GATE + VAULT . EXPLODED

Zentinelle →

PART CAL-ZN-03 · QTY 1 PER FLEET

BROCS

Agent governance, risk and compliance. The sentinel watches what agents do, the gate governs what they may do, and policy is enforced at runtime, with the audit trail to prove it.

zentinelle.ai ↗
CoverageFull = solid cell · shared = dashed cell
Assembly orderAny. The surface composes
SubstrateYour compute
SHT 03 Deployment topologies · compose it to suit ANY SUBSET · ANY GROUND

The machines are independent, and they compose. Adopt any one alone, stand the bench on the platform, put the gate inside it, close the whole loop, or mesh sites that manage each other across regions. Every pattern lands the same way on AWS, Google Cloud, Azure, your own racks on Kubernetes, or air-gapped metal: the drawing does not change when the ground does.

STANDALONEany machine, alone WORKBENCH ON ASTROLIFTthe bench rides the platform ZENTINELLE IN ASTROLIFTthe gate inside the platform THE FULL LOOPbuild, run, watch, govern MESHsites managing sites
PatternsStandalone · stacked · embedded · full loop · mesh
GroundsAWS · Google Cloud · Azure · on-prem · air-gapped
SubstrateEKS · GKE · AKS · Kubernetes · ECS · Cloud Run
SHT 04 Section A-A · zero to governed production DAYS, NOT QUARTERS
BBUILDRRUNOOBSERVECCONTROLSSECUREzero to governed productionleft to right, in daysthe loop closestelemetry, policy and evidence, back to BuildSECTION A-ATHE GOVERNED LOOP . ZERO TO PRODUCTION

Reference architecture

The full assembly drawing for AWS, Google Cloud, Azure, on-prem and air-gapped sites: network layout, substrate sizing, and where each machine stands.

Security and GRC checklist

Control mapping across nine compliance frameworks, so the drawing your engineers deploy is the drawing your auditors sign.

Buy vs build

The honest cost model: what the assembly replaces, what it costs to run, and what building the same surface yourself would take.

Deploy inside your perimeter. Self-host enterprise AI in days. Stop choosing between moving fast and staying in control.
Book a demo Download the PDF
Want what we learn deploying this, in your inbox?
Optional. No spam.

Field note 06 · issued only to those who kept scrolling

Private AI you can actually BROCS.

Tell us what you would build
Talk to us

CAL-SURF-001 · THE AI SURFACE Open the full blueprint ↗ PDF