import type { Metadata } from "next"; import { ClusterMotif, MacLustrInfrastructure } from "@/components/MacLustrInfrastructure"; import { SectionHeading } from "@/components/SectionHeading"; export const metadata: Metadata = { title: "Infrastructure — Powered by MacLustr", alternates: { canonical: "/infrastructure" }, }; const LAYERS: Array<[string, string, string]> = [ [ "Ingress", "MacLustr Tunnel", "Public HTTPS terminates on a gateway and reaches the control plane over an encrypted private link. Worker APIs are never reachable from the public side.", ], [ "Control plane", "Web, API, scheduler", "PostgreSQL holds projects, frozen instructions, runs, leases, events, artifacts and papers. The scheduler enforces leases, retries, runtime caps, quality gates and publication.", ], [ "Workers", "Apple Silicon nodes", "Each worker runs as a dedicated low-privilege user, polls the control plane outbound only, and executes one research session at a time in a fresh workspace.", ], [ "Sandbox", "Seatbelt + egress allow-list", "Commands run under an OS sandbox: writes confined to the workspace, sensitive paths unreadable, network limited to allow-listed scholarly, data and package hosts.", ], [ "Artifact store", "Hashed, versioned, write-once", "Every file is SHA-256 hashed when written. Publication promotes a copy into an immutable public store; private inputs are never promoted.", ], ]; export default function InfrastructurePage() { return (

Powered by MacLustr

Research computed on MacLustr

AutoScholar is the research institution. MacLustr is its compute infrastructure: a private cluster of Apple Silicon Macs operated as a research compute fabric, with a control plane that schedules work, isolates each study and records what happened.

Five layers; each one narrows what the next can do.
    {LAYERS.map(([k, name, p], i) => (
  1. {String(i + 1).padStart(2, "0")}

    {k}

    {name}

    {p}

  2. ))}

What we publish about the infrastructure

We credit MacLustr on every paper and describe its design honestly. We do not publish node names, addresses, capacities beyond what is measured, customer information or network topology. Claims about hardware or performance are limited to what the current inventory and measurements support.

Model execution

Research runs use the Claude Agent SDK with API-key authentication. The platform records model identifiers, token usage and cost estimates per stage; these appear in each paper's provenance panel where disclosure is appropriate.

); }