Hybrid retrieval
Semantic recall plus exact-match resilience for acronyms, identifiers, and policy language.
ARCHITECTURE EXPLORER
Inspect each stage, replay the request path, then switch to the security overlay to see trust boundaries and control points.
Combine semantic and keyword search with query expansion, metadata policy filters, freshness checks, and document-level authorization.
DECISION RECORDS
Semantic recall plus exact-match resilience for acronyms, identifiers, and policy language.
Spend model context on the strongest evidence, not the nearest embeddings.
Use code for enforceable policies, schemas, citations, and authorization boundaries.
Expand autonomy only when a bounded graph cannot express the task safely.
ARCHITECTURE IN PERSONAL PRODUCTS
Two concrete applications of boundaries, local state and recovery. These are separate products from the GenAI reference architecture above.
Source adapters feed a local searchable catalog. AVPlayer, ExoPlayer and mpv own playback through platform-specific capabilities. An engine fallback retries the same stream; choosing a different provider stays with the user.
Source adapters · Local search · Playback recoveryExplore the engineeringA SwiftUI shell talks to system WebKit through an engine boundary and to Rust policy and per-profile SQLite through UniFFI. Resource profiles release eligible tabs; session checkpoints preserve a path back after failure.
Engine boundary · Profile isolation · Session recoveryExplore the engineeringVPN, encrypted DNS, Safari blockers and the Mac network filter use platform extensions with explicit boundaries. Checks report observations and limits instead of turning a connected state into an absolute security claim.
Network Extension · WireGuard · Evidence checksExplore the engineering