Get Started
For Enterprise · Architecture & Security

Everything your technical team needs to evaluate HireBuddha. No sales pitch — just engineering.

System architecture

Apache · reverse proxy

SSL termination and request routing at the edge.

React frontend

The generative, adaptive UI assembled per user and task.

FastAPI app server

The orchestration core. Async throughout.

Unified AI Gateway

Capability requests and WebSocket streaming to the engine.

Voice server

Realtime audio for OmniBuddha, Gemini Live, and ChatGPT Realtime.

PostgreSQL + pgvector

Relational state plus 768-dim semantic search.

Redis + Arq

Rate limiting and the async job queue for child dispatch.

The kernel

The agent kernel

A single hierarchical_entities table holds all five tiers — Loop, Process, Agent, Skill, Action — each with identity, logic gate, planning, capabilities, governance, I/O contract, and per-entity router prefs.

The AgentLoop

An 8-stage control flow — Perceive, Strategize, Pre-Critic, Act, Observe, Post-Critic, Reflect, Decide — with a circuit breaker after 3 consecutive pre-critic blocks and cost tracking per step.

Async child dispatch

Parent state is serialized to a snapshot, children run on the queue, and a resume worker rehydrates the parent. Cost aggregates across the whole hierarchy.

Memory architecture

Working, episodic, semantic (pgvector, cosine > 0.70), and CORTEX tree memory with auto-checkpointing at 8,000 tokens and viewport slicing.

Intelligence & governance

Multi-model engine

No agent calls a model SDK directly. It requests a capability and the Intelligent Router binds it — BabyBuddha plus Claude Opus, ChatGPT, Gemini, GLM, Qwen, and Mistral.

Model & data governance

Per-tenant allow-lists and data-residency filters decide which providers are eligible before scoring. Pin a model where required; full attribution and audit of every model that touched data.

Meta Agent & self-evolving code

Tool synthesis and self-healing run sandboxed, test-gated, versioned, and rollback-safe, with optional HITL on promotion. Production is never edited in place.

The Learning System

Harvests reflections, KPIs, critic verdicts, router performance, and HITL feedback, then runs a per-tenant optimizer that tunes charters, routing, tools, and the schema.

Security deep-dive

ControlImplementation
EncryptionAES-256-GCM with nonce-prepended ciphertext; master key outside the DB.
AuthenticationJWT access tokens (15 min) + HTTP-only refresh cookies (7 days).
SuspensionASGI middleware that locks suspended tenants at the API.
Key VaultEncrypted storage and retrieval of API keys and OAuth tokens.
Rate limitingRedis-based limits across the gateway.

Schedule a technical deep-dive with our architecture team.