Pages / Workers
Product UI and authenticated API boundary.
Cloudflare coordinates identity, fleet, policy and events while kingaid retains local execution, defense and recovery authority.
Product UI and authenticated API boundary.
Per-node and fleet real-time coordination and session state.
Tenant, node, policy, approval, incident and audit metadata.
Asynchronous events, commands, retries and enrichment.
Signed artifacts, exports and evidence bundles where appropriate.
Optional governed cloud-model routing and observability.
Local management, monitoring and pre-approved playbooks continue.
Deterministic Core Mode continues.
Node reconnects with backoff; local authority remains.
Preflight should prevent activation; failed activation rolls back.
Future local-lockdown mode can reject remote mutation.
Signed artifacts, canary rollout, health gates and rollback direction.