Deep dives from building an event-first, multi-user AI platform: agents, credentials, memory, runtime.
Search covers titles, summaries, tags and full article text.
A user's memory here is not one store but three folds , each a different aspect: mem holds curated durable entities (what is true), conv records the temporal stream with its production context (what happened, when & where), and cnv gathers cross-world references on a focus board (what is kept at hand). Formed differently, meaning different things, designe...
Your MCP handler should never see an unauthorized call. A managed surface declares its auth in descriptors; one shared Connection Hub guard then runs a fixed sequence of fail-closed checks — credential valid → authority → resource (exact) → tool allowed → grants present → tool consented — before the bundle handler is ever called. This Deep piece walks the...
You have an external app and you want it to reach one KDCube service. Connecting it issues a delegated credential — carrying only the resource grants and selected operations/tools you approved, recorded as a durable consent edge that keeps the app as its own actor and you as the grantor. This Deep piece walks the connect → consent → delegated-credential f...
The same person is not the same as one user_id . They arrive through many channels, each with its own verified identity. The platform keeps those ids separate , links them into a family , and asks two different questions of that family: who is this for? and what may this execution do? This Deep piece defines the foundational vocabulary the rest of the Con...
A KDCube scene mounts independent app surfaces — chat, pinboard, memories, tasks, stats — into one usable workspace without making them a monolith. The design rule is one sentence: the scene knows where surfaces are and how to reach runtimes; providers know what objects mean and what actions are allowed. This Deep piece walks the four registries, multi-ru...
An app owns a realm — task: , mem: , cnv: — with its own schema, search, actions, and rendering. Named services let a ReAct agent enter that realm without learning any of its private domain rules. The agent gets one generic interface ; the provider remains the owner of meaning. This Deep piece walks the four agent surfaces, the pull/read materialization p...
A normal app — its own backend, data, and UI — becomes a connected realm the moment you expose it once through a generic named-services surface. After that, agents and people across a whole network of runtimes can search it, pin it, cite it, and act on it — with no host ever learning what your domain "is."
The pinboard isn't a database — it's a board of proxies . Each pin holds a canonical object ref from one of many realms, never the provider's data. A conversation is an object too — pin a chat to reopen it later — and anything a chat produces can be pinned the same way, because these are generic proxies as well. Name a board and it becomes portable contex...
Every time an agent thinks, it receives exactly one thing : an ordered block of input, read top to bottom, assembled fresh for that call. This short maps its structure — the parts, in order — and the provenance of each part, with one fact framing the whole thing: the input is per agent.
The agent receives one long input every round. Where does it know to look first for what's true right now ? This short opens the tail we kept pointing at: the attention zone at the very end — a tail pair of sources pool and live view — and what lives in that live view, why it's never cached, and how a signal in it lives a short, deliberate life: refresh n...