# Architecture and Infrastructure
Hybrid **Edge + Cloud**. The edge captures and pre-processes; the cloud models and serves.
## Edge
- **Edge Connector** deployed at **Purdue Level 3 / DMZ**.
- Speaks **OPC UA** to historians/SCADA.
- **Outbound HTTPS (443) only — no inbound ports.** This single design choice is what passes plant security review. See [[Renacore/Security and Zero Trust]].
## Data & modeling
- **TimescaleDB** — time-series hypertables for sensor streams.
- **Qdrant** — vector database powering RAG over asset history, manuals, and prior events.
- **Hybrid model core**: statistical features + **gradient-boosted trees** + deterministic thresholds + **physics-constraint validation**. Practical and deployable — the engineering-grade cousin of [[Physics Informed Neural Operators]].
- **1 Hz analytics loop**, results pushed over **WebSocket** to the UI.
- **Agentic triage** drafts work orders → CMMS (**SAP PM, IBM Maximo**), human approves.
## Deployment
- MVP runs on **Docker Compose**; **Kubernetes** on the roadmap.
- Delivery options: **On-Prem / VPC** to satisfy data-residency and OT isolation.
## Why it matters
The architecture is the proof that the [[Renacore/Asset-Centric Intelligence Layer]] is genuinely low-touch. Every choice — outbound-only, read-only, on-prem option, physics validation — is bent toward *installable in <30 days without disrupting operations*. See [[Renacore/Pilot Structure and KPIs]] and [[Model Compression & Edge AI MOC]].
## Related
- [[Renacore MOC]]
- [[Renacore/Security and Zero Trust]]
- [[Renacore/Physics-First Quality and Governance]]
- [[Physics Informed Neural Operators]]
- [[Knowledge Graphs for Industrial Data]]