From managed PaaS to strict air-gap — without changing the cognitive contract

Managed headless cognitive orchestration

PaaS

Value

Add governed cognition through authenticated APIs while keeping inference pools explicit and replaceable.

What exists

Tenant-aware HTTP runtime, PostgreSQL state, policy, routing, shared admission, turn-effect reconciliation and tenant-scoped normalized commercial-usage evidence with non-invoice readback.

Promotion gate

Server-wide adoption of provider idempotency, durable multi-instance conflict coordination, operator resolution for indeterminate dispatch, external tariff and invoice systems, high-throughput qualification, heterogeneous endpoints, SSO/SCIM and production SLOs.

Complete managed product experience

SaaS

Value

A turnkey service for teams that want Mentaview-operated lifecycle, quotas, support and control plane.

What exists

Reference Kubernetes manifests and the shared server runtime exist.

Promotion gate

Commercial control plane, tenant self-service, support SLOs, DR evidence and production qualification.

Customer-operated private runtime

On-premises

Value

Keep data, credentials and inference inside the customer's server, LAN or VPC boundary.

What exists

Core-only Compose, explicit optional inference, tenant auth, PostgreSQL RLS, atomic logical restore and a sealed physical backup/WAL exercise recovered to one measured LSN.

Promotion gate

Installer and upgrade qualification, encrypted off-site retention, scheduled recovery monitoring, production RPO/RTO, application reconciliation and full egress allowlisting.

Local cognition with no mandatory network

Embedded / Edge

Value

Run state, ingestion, retrieval and policy locally; add verified on-device inference only when the host chooses it.

What exists

Network-denied core-only restart plus a sealed content-addressed offline update and one-time device/manifest-bound rollback with exact state handoff.

Promotion gate

Physical-device evidence, hardware-rooted signing and identity, fleet rollout/revocation, power-loss, storage, RAM, latency, energy and packaging qualification.

Linked runtime for devices and appliances

OEM

Value

Embed a policy-governed cognitive layer behind host callbacks, selected accelerators and product-specific constraints.

What exists

Provider-neutral Rust traits, direct API boundaries and endpoint dispatcher.

Promotion gate

Stable ABI, integrator kit, compatibility matrix, signed packs and per-SKU assurance.

Build Mentaview into another product

SDK / Headless

Value

Consume cognition in-process for performance or through HTTP for remote clients without importing provider policy into the UI.

What exists

An unpublished Rust SDK v1 facade provides bounded in-process contracts plus a 14-test injectable synchronous network-transport contract with host-owned authentication references; it does not implement or qualify real HTTP.

Promotion gate

Real HTTP/TLS/DNS/egress qualification, timeout and cancellation enforcement, registry distribution, compatibility history, language bindings, streaming transports and stable ABI decisions.