Problem
Agent ecosystems become unsafe to explain when documentation accidentally doubles as an operational control surface.
Private core · public architecture
Yggdrasil
Private nine-realm local ecosystem with a deliberately non-operational public architecture model.
Overview
Design
Responsibilities are separated into bounded realms for agents, memory, interfaces, creative generation, tools, evidence and automation.
Outcome
A public mental model for a private system, useful for understanding boundaries without creating a remote control plane.
Verification
The website verifies the disclosure boundary rather than claiming public access to the private implementation.
Multi-agentLocal-firstPersistent memoryAutomationAI systemsOrchestrationMemory
Architecture
- bounded realms
- operator-facing interfaces
- governance
- memory and evidence
- creative generation
- tools
- automation
- model experimentation
Components
Asgard
Governance, identity and authority boundaries.
Midgard
Operator-facing applications and inspectable interfaces.
Jotunheim
Knowledge and evidence boundaries.
Muspelheim
Creative-generation responsibility without public datasets or endpoints.
Niflheim
Long-lived private persistence and memory.
Svartalfheim
Low-level tools and implementation surfaces.
Vanaheim
Automation and auxiliary services.
Helheim
Controlled model experimentation.
Alfheim
Visual and interface expression.
Decisions
Separate responsibility by realm
Distinct authority and responsibility boundaries are easier to inspect than one unrestricted agent surface.
Publish architecture, not control authority
The public site can explain the system without becoming a route into private execution or memory.
Timeline
- Nine-realm public architecture modelmilestone · documented
- Private operational coremilestone · bounded
- Architecture is public; execution, memory, credentials and source remain private — public_boundaryevidence · 2026-08-11
Experiments
yggdrasil
Status: bounded
Open bounded Lab →Releases
No project-specific public release record.
Evidence
Architecture is public; execution, memory, credentials and source remain private
Architecture is public; execution, memory, credentials and source remain private
source-contract · checked 2026-08-11 · fresh until 2027-08-11
Boundaries
The website exposes architecture only: no remote execution, memory access, credentials or private clone path.
- No private memory payloads, credentials, workstation access, agent invocation or internal endpoints are published.