Switchboard docs
docsuai-explorerredacted view

UAI Switchboard (Fleet SSH Control Plane)

UAI Switchboard is a standalone UAI product: a Rust/Axum HTTP control

Updated 2026-06-25·Freshness: Reference·No secret-like patterns were observed in this view.

UAI Switchboard (Fleet SSH Control Plane)

UAI Switchboard is a standalone UAI product: a Rust/Axum HTTP control

Body

UAI Switchboard (Fleet SSH Control Plane)

Purpose

UAI Switchboard is a standalone UAI product: a Rust/Axum HTTP control plane for SSH exec, SFTP, and systemd operations across a node fleet. It owns RBAC, node lifecycle (promote/quarantine/recover/retire), command policy enforcement, and a tamper-evident audit chain. It is the infrastructure control plane for the lab fleet.

Current State

  • Status: active, production (mesh-only).
  • Version: v0.2.2 (shipped 2026-06-20).
  • Host: production Beacon VPS.
  • Listener: mesh-only 100.119.16.109:7101.
  • Source: /root/uai-switchboard/ (git, tags through v0.2.0; commits 688dfb9 v0.2.2 + 72afd64 v0.2.1).
  • Binary: /opt/uai... (stripped, ~21MB).
  • Config: /etc/uai-switchboard/config.env (mode 0600, root:root).
  • Fleet state: 5/6 nodes managed. Registered: beacon (loopback), ct103-cortex-prod, ct123-beacon-next-sandbox, ct124-cortex-sandbox, nuc-conductor (reverse-tunneled). Blocked: CT121 (SSH credential from Beacon — operator-gated unblock).
  • Audit chain: 44/44 rows verified at v0.2.2 (genesis hash unchanged from v0.2.0 baseline through all v0.2.1+v0.2.2 mutations).
  • Tests: 25 unit + 1 e2e (~30 assertions), all green.

Key Components / Locations

  • Source: /root/uai-switchboard/.
  • Binary: /opt/uai....
  • Config (secret-bearing, filename only): /etc/uai-switchboard/config.env.
  • Fleet-ops token: /etc/uai-switchboard/fleet-ops.token (mode 0600, 30-day TTL).
  • Emitter export root (auto-wired to Explorer inbox): SWITCHBO....
  • Schema (7 tables across 5 migrations): switchboard_nodes, switchboard_services, switchboard_audit (tamper-evident chain), switchboard_identities, switchboard_tokens, switchboard_node_permissions, switchboard_node_command_policies.
  • Genesis anchor: SHA256("uai-switchboard-genesis-v0.2").

Key Endpoints (v0.2 surface)

  • /v1/auth/token (POST/GET), /v1/auth/token/{id}/revoke
  • /v1/discovery/{scan,dry-run}
  • /v1/nodes/{id}/{promote,quarantine,recover,retire}
  • /v1/nodes/{id}/policy (GET/PUT), /v1/nodes/{id}/policy/evaluate
  • /v1/audit/stream (SSE), /v1/audit/verify
  • /metrics

All v0.1 endpoints still work; legacy SWITCHBOARD_ADMIN_KEY is accepted as a bootstrap identity (all-scopes, distinctly logged).

Relationships

  • Manages: uai-doc-ecosystem-hardware-ct103, -ct121 (blocked), -ct123, -ct124, -nuc-ipex, and the Beacon VPS self.
  • Emits audit to: uai-doc-... (Explorer inbox at uai-switchboard namespace).
  • Co-hosted with: uai-doc-ecosystem-product-beacon-v1, uai-doc-ecosystem-product-uai-mesh, uai-doc-....

Status

active — production (mesh-only); v0.2.2 shipped.

See Also

  • uai-doc-...
  • uai-doc-ecosystem-product-beacon-v1
  • uai-doc-... (WS-E)
  • uai-doc-ecosystem-hardware-ct103
  • uai-doc-ecosystem-hardware-ct121
  • uai-doc-ecosystem-hardware-ct123
  • uai-doc-ecosystem-hardware-ct124
  • uai-doc-ecosystem-hardware-nuc-ipex