1. Ingestion and Triage
The Ephemeral Airlock
We do not persist intake payloads as a default rail. Incoming WhatsApp text and media are processed through a volatile buffer, transformed for governance use, then dropped from intake context once vault routing is complete.
The Logic: Data is transcribed, sentiment-tagged, and metadata-indexed in real time, then wiped from intake workflow state.
The Result: No ghost data and no persistent history on the messaging rail.
2. Governance
The 0.75 Confidence Gate
We solve hallucination risk at the substrate level with a hard confidence gate in retrieval-augmented orchestration.
The Logic: If the system cannot verify a retrieved memory or command with at least 75% confidence, it stops and issues a learning prompt instead of guessing.
The Result: Fiduciary-grade reliability. The Steward behaves as a librarian, not a storyteller.
3. Storage
Partitioned Data Residency
Every estate and every Journal user sits in partitioned Firestore rails with explicit control boundaries.
The Logic: Silo A (Personal Journal) and Silo B (B2B Field Ops) are mapped to separate lanes and cannot cross-read by design.
The Result: Absolute prevention of context bleed and cross-contamination.
4. Runtime
The Unified Node.js 22 Runtime
The estate is normalized on Node.js 22 over Firebase and Google Cloud serverless infrastructure.
The Logic: Current V8 runtime optimizations are used for speed, security, and cold-start efficiency in last-mile deployments.
The Result: Institutional-grade performance across continents.
Audit Layer
Verified Stack, Not Wrapper Theater
hlomo runs as a hardened estate on Google Cloud and Firebase with explicit intake gating, partitioned data rails, and confidence-governed retrieval behavior.