stratumiops/docs/en/stratiumiops_market.md
Jesús Pérez 1680d80a3d
Some checks failed
Rust CI / Security Audit (push) Has been cancelled
Rust CI / Check + Test + Lint (nightly) (push) Has been cancelled
Rust CI / Check + Test + Lint (stable) (push) Has been cancelled
Nickel Type Check / Nickel Type Checking (push) Has been cancelled
chore: Init repo, add docs
2026-01-22 22:15:19 +00:00

411 lines
11 KiB
Markdown

# Development Portfolio: The Complete Platform
## The Challenge of Modern Development
Development teams face growing fragmentation:
- **10+ tools** to manage a typical project
- **Scattered knowledge** in wikis, Slack, docs, and people's heads
- **Manual configuration** repeated project after project
- **Complex infrastructure** without validation or rollback
- **Disconnected AI** from team conventions
## The Solution: An Integrated Ecosystem
Five projects designed to work together, each solving a specific domain.
---
## Vapora: Your Development Hub
### One Platform, Full Workflow
Vapora unifies project management, team coordination, and AI agents in a single platform.
**Project Management**
- **Visual Kanban**: Intuitive drag-and-drop with customizable columns
- **Real-time collaboration**: Instant updates, no refresh needed
- **Clear hierarchy**: Workspaces → Projects → Tasks with isolation
- **Complete tracking**: Change history with context
**Intelligent Orchestration**
- **12 agent roles**: Architect, Developer, Reviewer, Tester, Documenter...
- **Continuous learning**: Agents improve with each execution
- **Automated pipelines**: Sequences with approval gates
- **Cost control**: Budgets per role with automatic fallback
**Native Multi-Tenant**
- **Isolation by design**: Each tenant in their scope
- **Fine-grained RBAC**: Declarative policies with Cedar
- **Audit trail**: Everything is logged
**For whom**:
- Development teams wanting to unify tools
- Organizations using AI agents needing visibility
- Multi-tenant platforms serving multiple teams
---
## Kogral: Your Team's Memory
### Knowledge That Doesn't Get Lost
Kogral captures your team's decisions, patterns, and guidelines in a format that endures.
**6 Knowledge Types**
| Type | Purpose |
| ------ | --------- |
| **Notes** | Observations and general notes |
| **Decisions** | ADRs with context, decision and consequences |
| **Guidelines** | Team and organization standards |
| **Patterns** | Proven and documented solutions |
| **Journals** | Day-to-day development diary |
| **Executions** | AI agent execution records |
**Git-Native**
- Everything in versioned markdown
- No dependency on external SaaS
- Trivial backup and restore
- Code review of knowledge
**Guideline Inheritance**
```text
Organization defines base standards
Project specializes for its context
Developer sees effective guidelines
```
**Integration with Claude Code**
- 7 native MCP tools
- Query guidelines before generating code
- Automatically search for relevant patterns
- Record decisions during development
**For whom**:
- Teams losing knowledge with turnover
- Organizations with multiple projects
- Developers using Claude Code
- Teams with compliance/audit requirements
---
## TypeDialog: Your Universal Interface
### One Definition, All Platforms
TypeDialog lets you define forms once and execute them in CLI, TUI, Web, or with AI agents.
**6 Execution Backends**
| Backend | Typical Use |
| --------- | ------------ |
| **CLI** | Automation scripts, CI/CD |
| **TUI** | Admin tools |
| **Web** | SaaS applications, public forms |
| **AI** | Semantic search, RAG |
| **Agent** | LLM agent execution |
| **Prov-gen** | Infrastructure generation |
**Type-Safe Validation**
- Nickel contracts for pre-runtime validation
- Errors detected before execution
- Reusable schemas across projects
**Advanced Forms**
- 8 field types (text, select, multi-select, date, password...)
- Conditional and dynamic fields
- Repeatable groups
- Reusable fragments with inheritance
- Internationalization with Fluent
**Agents from Markdown**
Define agents in `.agent.mdx` files:
- 4 LLM providers (Claude, OpenAI, Gemini, Ollama)
- Templates with variables
- Output validation
- Real-time streaming
**Infrastructure Generation**
- 6 supported clouds (AWS, GCP, Azure, Hetzner, UpCloud, LXD)
- Forms → Validated configuration → Ready IaC
- 7 validation layers
**For whom**:
- Teams maintaining CLI and Web in parallel
- DevOps needing configuration wizards
- Organizations with multi-language requirements
- Teams wanting to automate with agents
---
## Provisioning: Your Controlled Infrastructure
### Declarative IaC + Enterprise Security
Provisioning combines typed configuration, advanced orchestration, and complete security.
**Nickel IaC**
- Typed language with lazy evaluation
- Validation at compile time, not runtime
- Composable and reusable schemas
- Better than YAML/HCL for complex configuration
**True Multi-Cloud**
| Provider | Capabilities |
| ---------- | -------------- |
| **AWS** | EC2, EKS, RDS, S3, IAM, VPC |
| **UpCloud** | Servers, networking, storage |
| **Local** | LXD containers, VMs |
**Advanced Orchestrator**
- Automatic dependency resolution
- Checkpoints with recovery
- Automatic rollback on failures
- Parallel execution with balancing
- Retry with exponential backoff
**Enterprise Security**
| Component | Capability |
| ----------- | ----------- |
| **Authentication** | JWT + Argon2id + MFA (TOTP + WebAuthn) |
| **Authorization** | Cedar policies (fine-grained RBAC) |
| **Secrets** | Dynamic secrets with TTL |
| **KMS** | 5 backends (RustyVault, Age, AWS, Vault, Cosmian) |
| **Audit** | 7-year retention, 5 export formats |
| **Break-glass** | Multi-party approval |
**39,699 lines of security code** across 12 components.
**Integrated AI**
- Native MCP Server (1000x faster than Python)
- RAG with 1,200+ domain documents
- Natural language queries
- Validated Nickel generation
**Developer Experience**
- 211-line CLI (84% reduction)
- 80+ shortcuts (`s` → server, `t` → taskserv)
- Integrated interactive guides
- Configuration system with 476+ accessors
**For whom**:
- DevOps teams wanting typed IaC
- Multi-cloud organizations
- Teams with compliance requirements
- Organizations needing complete audit
---
## SecretumVault: Your Post-Quantum Vault
### Future Cryptography, Today
SecretumVault is the first Rust vault with production-ready post-quantum cryptography.
**Cryptography Agnostic**
| Backend | Algorithms | Status |
| --------- | ------------ | -------- |
| **OpenSSL** | RSA, ECDSA, AES-256-GCM | Production |
| **OQS** | ML-KEM-768, ML-DSA-65 | **Production (PQC)** |
| **AWS-LC** | RSA, ECDSA | Experimental |
| **RustCrypto** | AES-GCM, ChaCha20 | Testing |
**Secrets Engines**
- **KV Engine**: Versioned storage with metadata
- **Transit Engine**: Encryption-as-a-service with rotation
- **PKI Engine**: X.509 certificates and CA management
- **Database Engine**: Dynamic credentials with TTL
**Multi-Backend Storage**
| Backend | Use |
| --------- | ----- |
| **Filesystem** | Development, single-node |
| **etcd** | Kubernetes, high availability |
| **SurrealDB** | Complex queries, time-series |
| **PostgreSQL** | Enterprise, ACID |
**Enterprise Security**
- **Shamir Secret Sharing**: Distributed unsealing (K of N)
- **Cedar ABAC**: AWS-compatible policies
- **TLS/mTLS**: Transport encryption with client verification
- **Audit Logging**: All events logged
**For whom**:
- Teams preparing for quantum threats
- Organizations with cryptographic agility requirements
- Platforms needing Rust-native vault
- Multi-cloud teams with self-hosting
---
## The Ecosystem in Action
### Scenario 1: Feature Development
```text
1. Kogral provides guidelines and patterns to the team
2. TypeDialog captures requirements with validated forms
3. SecretumVault manages credentials and API keys
4. Vapora coordinates agents (Architect → Developer → Reviewer)
5. Kogral records decisions made
6. Provisioning deploys necessary infrastructure changes
```
### Scenario 2: Team Onboarding
```text
1. Kogral exports project knowledge graph
2. TypeDialog presents interactive quizzes
3. Vapora assigns progressive onboarding tasks
4. Provisioning configures development environments
```
### Scenario 3: Infrastructure Migration
```text
1. Kogral documents migration ADRs
2. TypeDialog validates configuration parameters
3. Provisioning executes with checkpoints and rollback
4. Vapora orchestrates monitoring and reports
```
### Scenario 4: New Project
```text
1. TypeDialog wizard for initial configuration
2. Provisioning generates infrastructure
3. Kogral creates initial knowledge graph
4. Vapora configures development pipelines
```
---
## Why This Ecosystem
### Against Fragmentation
| Problem | Typical Solution | Our Solution |
| --------- | ------------------ | -------------- |
| Project management | Jira + Notion + ... | Vapora (all-in-one) |
| Knowledge | Wiki + Docs + Slack | Kogral (git-native) |
| Configuration | Scripts + YAML | TypeDialog (type-safe) |
| Secrets | HashiCorp Vault / SaaS | SecretumVault (PQC) |
| Infrastructure | Terraform + Ansible | Provisioning (Nickel) |
| AI | Separate tools | Integrated everywhere |
### Technical Advantages
| Aspect | Us | Alternatives |
| -------- | ----- | -------------- |
| **Stack** | Rust end-to-end | Python/JS/Go mix |
| **Config** | Nickel (typed) | YAML/JSON (runtime errors) |
| **Multi-tenant** | SurrealDB scopes | DIY isolation |
| **AI** | Native in all | Retrofitted |
| **Self-hosted** | Complete | SaaS lock-in |
### Confidence Metrics
| Metric | Value |
| -------- | ------- |
| Rust Crates | 40+ |
| Tests | 4,360+ |
| Lines of code | ~206K |
| Security lines | 39K |
| LLM Providers | 4 |
| Supported clouds | 6 |
| Crypto backends | 4 (incl. PQC) |
---
## Getting Started
### Flexible Adoption
Each project works independently:
1. **Need only knowledge management?** → Kogral
2. **Need only multi-backend forms?** → TypeDialog
3. **Need only post-quantum vault?** → SecretumVault
4. **Need only development orchestration?** → Vapora
5. **Need only enterprise IaC?** → Provisioning
### Progressive Adoption
For maximum benefit:
```text
1. Kogral → Establish knowledge base
2. TypeDialog → Enable structured inputs
3. SecretumVault → Secure secrets management
4. Vapora → Orchestrate development
5. Provisioning → Complete infrastructure
```
### Natural Integration
Projects connect automatically:
- Share SurrealDB for state
- Use Nickel for configuration
- Speak the same MCP protocol
- Share Axum/Leptos patterns
---
## Technology Stack
The entire ecosystem built on:
| Technology | Purpose |
| ------------ | --------- |
| **Rust** | Performance, type-safety, zero-cost abstractions |
| **Nickel** | Configuration language with validation |
| **SurrealDB** | Multi-model database with scopes |
| **Axum** | Composable async web framework |
| **Leptos** | Reactive WASM frontend |
| **Ratatui** | Terminal UI |
| **NATS** | Messaging with JetStream |
| **rig-core** | Multi-provider LLM abstraction |
| **OQS** | Post-quantum cryptography (ML-KEM, ML-DSA) |
---
## Contact
- **Repositories**: GitHub (private projects)
- **License**: Proprietary / To be defined
- **Stack**: 100% Rust
---
*One ecosystem. Five projects. Real integration.*
*Modern development without fragmentation.*