Execution policies
Retry · timeout · cancellation
Orion Core is a product developed by Orion Impact to compose and operate AI capabilities across explicit boundaries. Its local-first architecture separates contracts, orchestration, provider integration, and execution control so the system can evolve without being tied to a single model, service, or deployment topology.
The Core already has an operational runtime, ingestion, retrieval, RAG, conversational memory, observability, and replaceable capability composition. It is in pre-release: some foundations are consolidated, while retrieval and RAG remain under active evolution.
Orion Core is an infrastructure product in pre-release, not an end-user application or a vertical. It separates contracts, use-case orchestration, provider integration, and execution control across explicit boundaries. User experience belongs to a different layer. The Core already exposes an HTTP transport API today, while its technical surface continues to evolve.
Dependency direction protects the nucleus from external details. The execution path shows how an intention enters through transport and reaches a concrete capability. The two flows are not the same thing.
Dependency
Infrastructure → Adapters → Application → Core. That direction is the project’s official boundary and is already enforced by dependency gates in the code.
Builds and wires concrete implementations, runs bootstrap, and keeps the operational machinery. Composition lives here: DIContainer, UseCaseFactory, plugin bootstrap, and the capability registry.
Implement Ports and translate concrete technologies into Core contracts.
Declares intent and orchestrates use cases exclusively through Core contracts. It does not select a provider.
The protected center. It defines the fundamental contracts and operational models without depending on frameworks, databases, or providers.
Outside the internal boundaries
They are not part of the Core’s architectural identity. They enter through an Adapter, behind a Port, and can be swapped without rewriting the nucleus.
Work crosses the system on a different axis. The Execution Runtime is not a step between Adapter and Provider: it wraps the operation.
An intention arrives at the transport edge.
Validates the request, builds the command, and returns the serialized response.
Application declares what should happen and under which policies.
The stable contract through which intent leaves the nucleus.
Translates the contract into a concrete technology.
The external capability or persistence backend that executes the detail.
Application declares what the system should do. The Runtime contract lives in Core; the concrete implementation lives in Infrastructure. Adapters should not reinvent retry, timeout, and concurrency — the Runtime is the authority for those policies.
That separates the business decision from operational control. A use case can request durable work; the Runtime decides how that work survives failure, waiting, cancellation, and resource limits.
Retry · timeout · cancellation
Jobs · queues · leases
Concurrent execution
Delayed and recurring work
Reconciliation · checkpoints
Backpressure · resource limits
Events · audit trail · tracing
Plugins declare capabilities. The Capability Registry is the selection authority. Composition builds and injects. Application does not choose the provider; the provider does not become the Core’s identity.
An implementation declares itself as an available capability.
Centralizes selection. Health and priority inform the policy; the fine-grained algorithm stays in the technical documentation.
A concrete capability is chosen without leaking that decision into the nucleus.
Infrastructure composes and injects the chosen implementation.
The rest of the system keeps speaking to a contract, not to a vendor.
The paths exist. Retrieval and RAG quality remain under evolution and evaluation.
Document sources · Eligibility · Processing · Chunking · Embeddings · Indexing · Jobs / backpressure
Semantic retrieval · Hybrid path · Reranking · Query context · Answerability · Context assembly · Evidence return. The flow includes optional contextualization, generation, and memory recording. It works; it is not finished.
MemoryPort · ConversationStorePort · session scope · in-memory · SQLite/WAL. The conversational backend can already be durable.
Metrics · Correlation · Tracing · Audit · Runtime events. There is an operational signal; that does not promise a perfect reconstruction of everything.
The Core exposes a technical API; user experience belongs to another layer.
The boundary is planned and marked as Next. It is not presented as existing.
They work, but remain Evolving. They are not state of the art, and this is not “advanced RAG”.
Providers remain replaceable. It is not a vertical either: specialized applications belong to future layers.
These engineering commitments derive from Orion Impact’s institutional principles.
Explore the thesis behind this architecture in the Manifest, or follow Development for a verifiable view of what exists today and where the product is heading.