Skip to content

PointSav Documentation

The engineering library for the PointSav platform — operating systems and services for regulated businesses that own their data, their AI, and their record-keeping outright. Where the monorepo holds the code, this wiki holds the reasoning: architecture, services, security, and the governance commitments that bind future development.

Model tier discipline

← All revisions

84993964 · PointSav Digital Systems ·

editorial(patterns): rewrite model-tier-discipline to describe the real Doorman inference-tier router (Track-B) — the article previously misattributed a Foundry-workspace-internal AI-session practice (deep-think/implementation/mechanical) to the customer-facing Doorman; real mechanism (verified in slm-core/src/tier.rs) is Local/Yoyo/External inference-backend routing driven by a complexity hint, same misattribution pattern already resolved on five-stage-supply-chain; register-clean EN+ES

View the full record as of this revision →

@@ -7,61 +7,39 @@ type: topic
content_type: topic
quality: complete
index_group: collaboration-and-editorial-workflow
short_description: "The discipline for routing work to the appropriate AI model tier — deep-think, implementation, or mechanical — to match model capability to work shape and control inference cost."
short_description: "The Doorman routes every inference request to one of three compute tiers — local, burst GPU, or external API — based on a complexity hint and live budget state, not a caller's direct choice."
status: active
bcsc_class: public-disclosure-safe
last_edited: 2026-05-01
last_edited: 2026-08-22
editor: pointsav-engineering
cites: []
paired_with: model-tier-discipline.es.md
---

**Correction (2026-08-02):** the Doorman does not implement this deep-think/implementation/mechanical taxonomy. The real Doorman tier enum (`service-slm/crates/slm-core/src/tier.rs`) is `Local` (Tier A, on-host inference)/`Yoyo` (Tier B, burst GPU)/`External` (Tier C, external API) — an AI-inference-*backend* routing scheme, confirmed by both `reference/service-slm-operationalization-plan.md` and `ai/doorman-protocol.md`, neither of which mentions "deep-think"/"mechanical." The concept this article actually describes is real, but it's this very Foundry *workspace's own internal* practice for routing AI-development-session work to different Claude model tiers by task shape — `conventions/model-tier-discipline.md` in the workspace root — not something the customer-facing Doorman implements. Same misattribution pattern found and corrected elsewhere in this corpus (Foundry-internal tooling described as a PointSav product) — see [[five-stage-supply-chain]] and [[scaling-coordinated-development-totebox-archives]] for the resolved cases. **Flagged, not resolved** for this specific article.
A platform that routes every inference request through the same fixed compute path spends significantly more per output than necessary, or fails requests that a cheaper path could have served. Model tier discipline is the [[doorman-protocol|Doorman service]]'s routing discipline: every inference request carries a complexity hint, and the Doorman — not the caller — decides which of three compute tiers actually serves it, based on that hint plus live budget caps and warm-instance state.

A platform that routes all inference work through the highest-capability model available regardless of work shape spends significantly more per output than necessary. Model tier discipline is the routing discipline implemented by the [[service-slm-operationalization-plan|compute routing architecture]] through the [[doorman-protocol|Doorman service]]. A platform with no guidance on model selection leaves each contributor to make independent choices that may be inconsistent, cost-inefficient, or both. Model tier discipline is the structured approach that matches work shape to model capability, routes appropriate work to lower-cost tiers, and makes the routing decision explicit and reviewable.
## Three tiers, one router

## Three abstract tiers
The Doorman defines three inference routes:

Work shapes fall into three categories that map to three model tiers:
**Local** — on-host inference, currently a quantized OLMo 3 7B model served over HTTP on the same machine as the Doorman. No network egress, no per-request cost beyond the machine's own power draw.

**Deep-think.** Architectural decisions, doctrine authoring, cross-cutting analysis, novel problem framing, multi-source synthesis. These are the tasks where a more capable model's additional reasoning ability produces materially better outputs. Examples: authoring a new convention, debugging a problem whose root cause is not yet identified, coordinating decisions across multiple workstreams.
**Yoyo** — burst compute on a preemptible multi-cloud GPU instance, currently a larger OLMo 3 model tuned for deeper reasoning. Used when a request's complexity exceeds what the local tier can serve well, at the cost of the burst-instance's startup latency and running cost.

**Implementation.** Following an established plan, single-component scoped work, well-specified feature implementation, code review against ratified conventions. A model at this tier can produce correct output on an established specification without needing the full reasoning capacity required for deep-think work. Examples: scaffolding a new module from a documented spec, drafting a runbook from a known template, writing unit tests for a defined interface.
**External** — an external API (Anthropic, Google, or OpenAI), reserved for narrow, precision-critical tasks and gated behind an explicit allowlist rather than opened to arbitrary requests. **A request only reaches an external API when the task genuinely needs it — every request defaults toward staying on infrastructure the operator controls, not away from it.**

**Mechanical.** Pattern-matching work with clear inputs and outputs, no architectural judgment, repeatable structure. The work is correct or incorrect in an unambiguous way. Examples: file moves, version number bumps, registry row updates, formatting normalization.
## The caller hints; the Doorman decides

## The preferred in-seat routing mechanism
A caller does not pick a tier directly. It submits a complexity hint — low, medium, or high — describing the shape of the work, and the Doorman maps that hint to a concrete tier using its own budget caps and current instance state. The same "high complexity" hint might route to Yoyo when a burst instance is already warm, or hold at Local under tight budget conditions — the caller's hint is an input to the routing decision, not the decision itself.

When a work session reaches a natural pause and the next bounded chunk of work fits a lower tier, the session dispatches a foreground sub-agent at the appropriate tier rather than continuing to perform that work at the current tier. The parent session retains its context and waits for the sub-agent to complete, then reviews the result and either commits it or queues the next chunk.
This indirection is what makes the discipline enforceable rather than aspirational. If callers picked their own tier, cost discipline would depend on every caller consistently choosing the cheapest tier that would work — the same problem a platform with no tier guidance has, just moved one layer down. Routing through the Doorman means the enforcement point is one piece of code, not every caller's judgment.

This approach preserves session context while routing volume work through lower-cost tiers. The parent pays parent-tier rates only for orchestration — reviewing results, authoring commit messages, making the next structural decision. The sub-agent does the volume work at a lower rate.
## Why this matters for cost

Four properties govern how sub-agent dispatch works in practice:

**Bounded brief.** One task, one result, self-contained. The brief includes file paths, names the desired output shape, and caps response length. Open-ended exploration is not a sub-agent task.

**Foreground and serial when writing.** A sub-agent writing to files runs to completion before the next one starts. Parallel dispatch is appropriate for read-only work — research, scanning, triage — but not for write operations that share a file index.

**Confidence gate.** Dispatch only when there is high confidence the sub-agent will produce output matching or exceeding what the current tier would produce on the same bounded task. Mechanical edits, well-specified implementations, read-only research, and scoped refactors against a clear spec pass this gate. Architectural decisions, doctrine drafting, cross-layer coordination, and anything requiring novel framing do not.

**Layer scope preserved.** A sub-agent dispatched from one layer operates within that layer's scope. Cross-layer work travels through the established coordination mechanism rather than through sub-agent dispatch.

## The cost framing

The three-tier structure produces a significant effective multiplier at fixed daily token budgets. Using the same daily token cap, running mechanical work at the mechanical tier instead of the deep-think tier extends the budget by approximately a factor of fifteen. A contributor pool operating at tier discipline can sustain a substantially larger volume of committed output within the same infrastructure cost as a smaller pool operating without tier discipline.

This multiplier is the structural reason why a contributor model that includes a larger pool of paid contributors is operationally viable. Without tier discipline, that model is expensive enough to be impractical. With it, the cost structure works.

## What the discipline is not

Model tier discipline does not refuse work at the current tier. Sessions write a dispatch recommendation or proposal; a human principal decides whether to act on it. The discipline is a cost-optimization recommendation mechanism, not a gate.

It is also not a constant check. Recommendations fire only at substantive work-shape pivots. Constant suggestions create overhead that erodes the cost savings they are intended to produce. The trigger is a genuine pivot, not a micro-pause.

Tier discipline and model version progression are orthogonal axes. A new model version earning a role through a supervised period of demonstrated correctness is a different question from which tier of the current model family to use for a specific bounded task. Both apply simultaneously.
Running work at whichever tier can actually serve it — rather than defaulting every request to the most capable tier available — produces a large effective cost multiplier at a fixed compute budget. Simple, well-specified requests that a local model handles correctly never touch the more expensive burst or external tiers at all. The savings compound: a platform running at tier discipline sustains substantially more request volume within the same infrastructure cost than one that does not.

## See also

- [[compounding-substrate]] — the contributor model this discipline makes economically viable
- [[service-slm-operationalization-plan]] — the compute routing architecture that applies the tier structure
- [[doorman-protocol]] — the Doorman service that enforces routing at the inference gateway
- [[service-slm-operationalization-plan]] — the compute routing architecture the Doorman implements
- [[doorman-protocol]] — the Doorman service that performs this routing at the inference gateway
- [[zero-container-runtime]] — the deployment discipline the Doorman itself follows as a systemd-managed binary
Important Information

Corporate structure. PointSav Digital Systems ("PointSav") is currently a trade name of Woodfine Capital Projects Inc. ("Woodfine"), planned to become a wholly-owned Woodfine subsidiary upon incorporation. PointSav does not itself offer, sell, or solicit any security. Any securities offering associated with Woodfine's real-property direct-hold solutions is made exclusively by Woodfine, and only by means of the applicable Private Placement Memorandum.

No investment advice. This wiki's content is provided for engineering, operational, research, and development purposes. Nothing on this wiki constitutes investment advice or a solicitation to invest in any Woodfine partnership or direct-hold solution.

Intellectual property. The PointSav name, trade name, wordmark, and marks, together with all current and future PointSav- and Totebox-branded products, services, and offerings — and the software, source code, documentation, design system, and all related materials — are proprietary to Woodfine and its affiliates, except for components identified as open source. No rights are granted except as expressly set out in a written license or agreement. The full trademark notice appears in the footer of every page on this site.

Open source components. Portions of the platform are made available under permissive open-source licenses identified in the accompanying repository. Use of those components is governed by their respective license terms.

No warranty; informational use. Content on this wiki is provided for general informational purposes only and does not constitute a representation, warranty, or commitment with respect to product functionality, availability, pricing, or roadmap. Some articles describe planned or intended features, capabilities, and milestones — language such as "planned," "intended," "targeted," "may," and "expected" marks this forward-looking content, which is subject to change and does not constitute a commitment regarding future performance.

Confidentiality. Where an article describes an operational or deployment detail that is not intended for public disclosure, that article is not published on this wiki. Content here is general-purpose engineering documentation, not customer-specific configuration.

Jurisdiction. Woodfine Capital Projects Inc. is organized in British Columbia, Canada. References to the Sovereign Data Foundation on this wiki describe a planned or intended initiative only, not a current equity holder or active governance body.

Changes to this notice. PointSav may update this notice from time to time; the version posted on this page governs.

Not a filing system. This wiki is not a securities filing system, an electronic disclosure repository, or a substitute for SEDAR+ or any other regulatory filing system. Formal securities filings are made through the applicable regulatory filing system, not through this wiki.

Full disclaimer. This notice supplements, and does not replace, the full Disclaimers article. In the event of any conflict, the full Disclaimers article governs.

Read the full disclaimer →