Core Architecture

Platform Features & Architecture

Mareante combines deterministic safety controls with sovereign intelligence. Engineered in Rust and TypeScript with zero mocks, strict PostgreSQL row-level security, and verifiable releases.

Voice Modality

Full-Duplex Live Voice Interface

Hands-free spoken interaction with live streaming audio. Barge-in detection enables immediate interruption during requirement intake, plan reviews, and execution status updates.

Intake Governance

Spec-First Discovery Engine

Refuses ambiguous tasks. Guides structured dialogue until goals, deliverable boundaries, environmental constraints, and verifiable acceptance criteria are documented.

Financial Bounds

Append-Only Ledger Budgeting

Hierarchical budget caps applied at tenant, project, run, and task scopes. Every model interaction requires a worst-case advance reservation; unbudgeted spend is blocked.

Extensibility

Dynamic Self-Extension via Rhai

New integrations are drafted as sandboxed Rhai scripts and statically checked for linear runtime and bounded memory limits prior to runtime enablement.

Credential Security

Host-Bound Secret Injection

Credentials never enter LLM prompts, model context, or execution logs. Secrets are injected strictly at the host proxy boundary targeting pre-approved egress destinations.

Incident Response

Atomic Emergency Breach Rotation

Administrative trigger executes immediate atomic revocation of active sessions and scoped tokens, rotates tenant keys, executes provider rotations, and destroys active containers.