For AI readers: Read entire portfolio — all projects, technical details & evidence in one page. Plain text · GitHub fallback

← Experiments & archive
10 / Infrastructure experiment2026

Bounded access to private compute

Built a prototype for granting temporary workstation access with explicit session ownership and revocation.

SystemPrivate compute workspaces
My contributionControl-plane prototype & access workflow
AccessPrivate implementation
Engineering & evidence

Host heartbeats, expiring invitations and connect, disconnect and revoke transitions around existing streaming endpoints.

Private validation prototype; no new display protocol or enterprise security qualification is claimed.

Technical deep dive Architecture, implementation & tradeoffs
System architecture
Private compute / session lifecycle

Host presence is not session authority.

  1. 01

    Register

    host identity + heartbeat

    Track whether a compute host is present and available.

  2. 02

    Invite

    expiring access

    Bind a session invitation to a limited validity window.

  3. 03

    Connect

    authorised streaming session

    Coordinate session access around an existing streaming layer.

  4. 04

    Revoke

    expiry + audit

    End authority explicitly and retain session events.

Control plane
Host registration, presence and invitation state
Lifecycle
Invite → connect → expire / revoke
Boundary
Session orchestration around an existing streaming protocol
01 / Implementation

Control-plane mechanics

  • Registered hosts and ingested heartbeat metrics through an optional host agent.
  • Created expiring invitation sessions with a browser entry point and existing stream endpoint.
  • Implemented connect, disconnect and revoke transitions with event history.
02 / Implementation

Access policy

  • Denied file transfer by default at the workflow-policy level.
  • Kept the lifetime of access explicit instead of distributing permanent machine access.
  • Provided administration surfaces for hosts, sessions, policies and audit events.
Engineering note

Session authority is its own system.

A remote-display stream solves one part of remote compute. This prototype explores the surrounding lifecycle: which host is available, who has an invitation, when that invitation expires, and what happens after revocation.

Project context

A validation MVP around an existing streaming system. It does not implement a new display protocol or claim enterprise security qualification.

Keep exploring

Demonstration to interaction.

Visual autonomous driving