Corezoid Platform — Core Runtime Architecture

Corezoid Platform — Core Runtime Architecture An architecture diagram generated by Archify. External Clients · Browsers, REST, hooks · Architecture component External Clients Browsers, REST, hooks APIGW · Go 1.26 + chi · Corezoid platform — Kubernetes / Erlang cluster · HMAC-SHA1 signed APIGW Go 1.26 + chi HMAC-SHA1 signed account · Go 1.24 identity · Corezoid platform — Kubernetes / Erlang cluster · OIDC / SAML / MFA account Go 1.24 identity OIDC / SAML / MFA conveyor_api · Erlang/OTP 24.3 + Cowboy · Corezoid platform — Kubernetes / Erlang cluster · REST + WebSocket conveyor_api Erlang/OTP 24.3 + Cowboy REST + WebSocket RabbitMQ · vhost /conveyor · Corezoid platform — Kubernetes / Erlang cluster · 18+ exchanges RabbitMQ vhost /conveyor 18+ exchanges conveyor_worker · BPM execution engine · Corezoid platform — Kubernetes / Erlang cluster · sharded conv_id rem 100 conveyor_worker BPM execution engine sharded conv_id rem 100 conveyor_http_worker · outbound HTTP · Corezoid platform — Kubernetes / Erlang cluster · SSRF blacklist conveyor_http_worker outbound HTTP SSRF blacklist GitCall · Go 1.26 on K8s, 8 runners · Corezoid platform — Kubernetes / Erlang cluster › Tenant code sandbox · modern user code GitCall Go 1.26 on K8s, 8 runners modern user code conveyor_usercode · Duktape JS + C-nodes · Corezoid platform — Kubernetes / Erlang cluster › Tenant code sandbox · legacy CCE conveyor_usercode Duktape JS + C-nodes legacy CCE dbcall · Go DB bridge · Corezoid platform — Kubernetes / Erlang cluster dbcall Go DB bridge conveyor_timers · delay semaphors · Corezoid platform — Kubernetes / Erlang cluster conveyor_timers delay semaphors worker_archiver · tasks to tasks_archive · Corezoid platform — Kubernetes / Erlang cluster worker_archiver tasks to tasks_archive PostgreSQL · conveyor + cp_0..cp_99 · Corezoid platform — Kubernetes / Erlang cluster · system of record PostgreSQL conveyor + cp_0..cp_99 system of record Redis 7 · counters, hot cache · Corezoid platform — Kubernetes / Erlang cluster Redis 7 counters, hot cache Mnesia · sessions, snapshots · Corezoid platform — Kubernetes / Erlang cluster Mnesia sessions, snapshots Elasticsearch · object search + logs · Corezoid platform — Kubernetes / Erlang cluster Elasticsearch object search + logs enigma · AES-256-GCM engine · Corezoid platform — Kubernetes / Erlang cluster › Key material — no tenant code path enigma AES-256-GCM engine Vault Transit · KMS :8200 · Corezoid platform — Kubernetes / Erlang cluster › Key material — no tenant code path Vault Transit KMS :8200 External APIs · Stripe, customer APIs · Architecture component External APIs Stripe, customer APIs Customer Databases · PG, MySQL, Oracle, Mongo · Architecture component Customer Databases PG, MySQL, Oracle, Mongo HTTPS HTTPS signed HTTP verify JWT publish create_task consume by shard task state SQL dispatch async logics http_request gitcall-v2 db_call timer_request usercode-proxy migration outbound HTTPS queries counters sessions encrypt configs wrap DEK archive sweep object search Corezoid platform — Kubernetes / Erlang cluster Key material — no tenant code path Tenant code sandbox

Primary task path

  • • capi publishes create_task to RabbitMQ
  • • worker consumes on shard conv_id rem 100

Code execution

  • • git_call_v2 → GitCall K8s pods, 8 runners
  • • api_code → legacy CCE, Duktape JS

Trust boundaries

  • • Tenant code only in GitCall pods or CCE sandbox
  • • enigma wraps DEKs via Vault Transit