Ridge Runtime Architecture

Ridge Admin, ridged, SQL execution, durable storage, and trust boundaries

Ridge Runtime Architecture Ridge Admin, ridged, SQL execution, durable storage, and trust boundaries ridge-admin process · loopback web application Verified SSH channel · no forwarding listener ridged process · one configured database Operator-controlled data and backup roots Browser UI · Ridge Admin workbench · Architecture component · presentation only Browser UI Ridge Admin workbench presentation only HTTP Security Gate · launch token · cookie · CSRF · ridge-admin process · loopback web application · Host + Origin HTTP Security Gate launch token · cookie · CSRF Host + Origin Admin Services · catalog · SQL · data edits · ridge-admin process · loopback web application · bounded HTTP API Admin Services catalog · SQL · data edits bounded HTTP API PG Client Pool · 4 connections · workspaces · ridge-admin process · loopback web application · no query replay PG Client Pool 4 connections · workspaces no query replay Native SSH · verified direct-tcpip · ridge-admin process · loopback web application › Verified SSH channel · no forwarding listener · strict / accept-new Native SSH verified direct-tcpip strict / accept-new ridged Pgwire · reactor shards · coordinator · ridged process · one configured database · loopback only ridged Pgwire reactor shards · coordinator loopback only Ridge SQL · parse · plan · execute · ridged process · one configured database · bounded subset Ridge SQL parse · plan · execute bounded subset Ridge Core · MVCC · transactions · indexes · ridged process · one configured database · single node Ridge Core MVCC · transactions · indexes single node Durable Data · B+Trees · WAL · rowcodec · Operator-controlled data and backup roots · CRC + fsync Durable Data B+Trees · WAL · rowcodec CRC + fsync OpenSSL 3 · server TLS backend · Architecture component · libssl + libcrypto OpenSSL 3 server TLS backend libssl + libcrypto Hosted OS · sockets · reactor · locks · Architecture component · entropy + fsync Hosted OS sockets · reactor · locks entropy + fsync HTTP on 127.0.0.1 workspace lease pgwire remote profile direct-tcpip typed session plan + transaction commit / recovery TLS I/O + synchronization Legend Frontend Security Backend Database External

Primary flow

  • • The browser never connects directly to Ridge or SSH
  • • Ridge Admin owns sessions, transactions, cancellation, and cleanup
  • • ridged maps pgwire sessions to the same Ridge SQL and storage contracts

Security limits

  • • Both HTTP and ridged listeners bind to loopback
  • • Secrets stay out of profiles and are zeroized from process memory
  • • Unsupported protocol, SQL, size, and queue shapes fail explicitly

External dependencies

  • • OpenSSL 3 supplies the native server TLS backend
  • • The hosted Seed runtime supplies sockets, reactor, signals, entropy, locks, files, and fsync
  • • Durability is Ridge WAL/B+Tree behavior, not PostgreSQL physical WAL