Architecture & Privacy

System Overview

Creative Tech Studios systems are engineered under a strict Zero-Inbound, Volatile-Only architectural discipline:

1. Ingress Isolation: Media nodes and background workers never open inbound ports (0.0.0.0/0) on public internet interfaces. All WebRTC media streams transit authenticated relay egress tunnels.
2. Volatile-Only Memory Boundary: Sensitive inference payloads (user video frames, audio buffers, prompt context) operate strictly in transient RAM. On session termination, buffers are immediately overwritten.
3. Multi-Model Routing Plane: The CTS Model Router acts as an intelligent proxy, enforcing rate boundaries, in-flight PII redaction, and cost optimization before dispatching to upstream model providers.

---

Zero-Retention Data Lifecycle

When a prompt or streaming frame arrives at the CTS gateway:

[Client Request]
       │
       ▼
[Edge Gateway: RAM Buffer] ──> (Ed25519 Token Authentication)
       │
       ▼
[FaceGuard Policy Engine]   ──> (PII Regex & Biometric Redaction)
       │
       ▼
[Dynamic Complexity Router] ──> (Classification: Edge vs Frontier)
       │
       ▼
[Upstream Model Dispatch]
       │
       ▼
[Volatile RAM Buffer Purge] ──> (Zero Persistent Disk Persistence)

Guaranteed Privacy Invariants

• Zero Disk Persistence: Raw prompts, completions, and user face meshes are never committed to relational databases, disk logs, or persistent object storage.
• Minimal Metadata Logging: Only tenant identifier, token counts, latency timestamps, and cryptographic hold status are recorded for billing reconciliation.
• Air-Gapped Compatibility: Enterprise deployments can run completely disconnected from the public internet using private on-premise appliances.