Skip to main content

📚 Coditect Sandbox Platform — Full Technical Architecture (L1 → L7)

🧭 Level 1 — Problem Statement & Context​

Coditect addresses the need for secure, autosaving, multi-runtime sandbox environments that support AI agents, ephemeral developer environments, and dynamic runtime workloads in a zero-trust cloud-native architecture.

Context:

  • Increasing demand for ephemeral compute across AI and software engineering workflows
  • Multi-tenant environments require strong isolation guarantees
  • Git-centric workflows require automatic state capture, snapshots, and traceability
  • Executable environments must span containers (gVisor/Kata), microVMs (Firecracker), and WASM runtimes

🧠 Level 2 — High-Level Architecture​

🔹 Key Components:​

  • Frontend UI (React) — sandbox explorer, logs, creation
  • API (FastAPI) — JWT-authenticated entrypoint for sandbox lifecycle, autosave, and quota
  • Controller (Go) — Kubernetes CRD controller for Sandbox resources
  • Agent (Python or Rust) — GCP Workstation-local gRPC server to launch containers in gVisor, Kata, or Wasmtime
  • Infrastructure (OpenTofu) — GCP project, GKE, WorkstationConfig, Secret Manager, IAM
  • Autosave Engine — GitHub worktree commit/push daemon
  • Monitoring — Prometheus, Grafana, Cloud Logging

🔁 System Flow:​

...

✅ This is the full Coditect architecture from Level 1 → Level 7, covering strategic goals, detailed implementation, runtime isolation, identity, observability, and threat modeling.

Would you like this exported as a PDF or HTML next?