# Private compute workspaces
Source: https://kaustubhkr.github.io/projects/private-compute.html

← Experiments & archive (https://kaustubhkr.github.io/archive.html) 10 / Infrastructure experiment 2026

# Bounded access to private compute

Built a prototype for granting temporary workstation access with explicit session ownership and revocation.
System Private compute workspaces
My contribution Control-plane prototype & access workflow
Access Private implementation

Engineering & evidence Host heartbeats, expiring invitations and connect, disconnect and revoke transitions around existing streaming endpoints.
Private validation prototype; no new display protocol or enterprise security qualification is claimed.

Technical deep dive Architecture, implementation & tradeoffs
System architecture Private compute / session lifecycle

### Host presence is not session authority.

- 01

#### Register

host identity + heartbeat Track whether a compute host is present and available.

- 02

#### Invite

expiring access Bind a session invitation to a limited validity window.

- 03

#### Connect

authorised streaming session Coordinate session access around an existing streaming layer.

- 04

#### Revoke

expiry + audit End authority explicitly and retain session events.

↖ A live heartbeat does not renew an expired invitation. Host availability and a user’s authority to connect remain separate state.
Control plane Host registration, presence and invitation state
Lifecycle Invite → connect → expire / revoke
Boundary Session orchestration around an existing streaming protocol

01 / Implementation

## Control-plane mechanics

- Registered hosts and ingested heartbeat metrics through an optional host agent.

- Created expiring invitation sessions with a browser entry point and existing stream endpoint.

- Implemented connect, disconnect and revoke transitions with event history.

02 / Implementation

## Access policy

- Denied file transfer by default at the workflow-policy level.

- Kept the lifetime of access explicit instead of distributing permanent machine access.

- Provided administration surfaces for hosts, sessions, policies and audit events.

Engineering note

## Session authority is its own system.

A remote-display stream solves one part of remote compute. This prototype explores the surrounding lifecycle: which host is available, who has an invitation, when that invitation expires, and what happens after revocation.

Project context A validation MVP around an existing streaming system. It does not implement a new display protocol or claim enterprise security qualification.

Keep exploring

## Demonstration to interaction.

↗ (https://kaustubhkr.github.io/projects/visual-driving.html) Visual autonomous driving

END OF SECTION 15: projects/private-compute.html