PointSav Documentation
PointSav builds operating systems and services for regulated businesses that need to own their data, their AI, and their record-keeping outright. The platform runs on customer hardware, produces continuous-disclosure-grade records by structure, and operates fully without AI for buyers that require an air-gap.
This wiki is the engineering library for that platform, maintained against an internal editorial standard. It documents the architecture, the services, the operating systems, the governance commitments, and the design rationale that binds future development. It is written for institutional readers — auditors, technical due-diligence reviewers, and procurement evaluators — and for the engineers who build on or extend the platform. Where the engineering monorepo holds the code, this wiki holds the reasoning.
Forward-looking statements in this wiki carry planned, intended, or target language per the internal editorial standard.
Browse by area
How-to guides
All 28 guides →Step-by-step operational runbooks — how to install, configure, and run the platform.
- How to add a node to a running fleet
Adds a node to a running PPN fleet without restarting existing nodes, covering controller health checks, choosing a non-conflicting node ID, and starting its heartbeat agent.
- How to authenticate binary downloads
Verifies an Ed25519-signed release from the PointSav distribution endpoint using a licence token, the detached signature, and the pinned publisher key before the binary runs.
- How to build a co-location map
Renders tier-coloured co-location cluster markers on a MapLibre GL map by authenticating against the GIS API and fetching the cluster GeoJSON layer.
- How to configure a tenant namespace
Configures an isolated tenant namespace: registers the tenant, sets quota limits, issues the root capability token, and verifies isolation and quota enforcement.
- How to configure the Doorman gateway
Configures a single-instance Doorman gateway — tier upstream addresses, circuit-breaker thresholds, and verifying tier state through the health endpoint and console F9 dashboard.
- How to connect to the OSM data pipeline
Ingesting a new retail or service chain from OpenStreetMap: write the ingest YAML, run the Overpass query, register the chain in the taxonomy, and rebuild the cluster layer.
- How to deploy a knowledge instance
Deploys an instance of the app-mediakit-knowledge wiki server from a local content path: build the binary, write knowledge.toml, start the service, and verify it serves pages.
- How to enroll a PPN node
Enrolls a machine into a PPN compute fleet by verifying the controller, starting the heartbeat agent, and confirming the node in the fleet inventory and WORM ledger.