# tcp.systems

> One suite for models and the work around them: acumen routes every model call, studio runs the work, console operates it. Eight surfaces, one identity, one contract.

The suite is 8 surfaces on one identity and one published contract.
Every URL below is served today. Numbers are deliberately absent from this file: read them from the proof
endpoint, which dates every check.

## Suite

- [acumen — the model layer](https://ai.tcp.systems/): One API in front of every provider. ai.tcp.systems/v1, aliases, per-request metering.
- [studio — the workspace](https://studio.tcp.systems/): The workspace that runs the work. projects, runs, live, previews, deploys.
- [console — the operator surface](https://console.tcp.systems/): Operate it without a shell. seats, keys, audit, runbooks.
- [search](https://search.tcp.systems/): Search you host, not rent. searxng, proxy pool, egress-pinned.
- [chat](https://chat.tcp.systems/): Talk to the suite. acumen round-trip, metered.
- [docs](https://docs.tcp.systems/): The contract, published. openapi 3.1, versioned, llms.txt.
- [status](https://status.tcp.systems/): The record, dated. snapshot, SSE, incidents.
- [massprox](https://status.tcp.systems/): The pool under search. gatherer, ranker, internal only.

## Contract

- [OpenAPI 3.1 document](https://docs.tcp.systems/openapi/acumen-v1.openapi.json): the canonical gateway contract.
- [Plain-text contract](https://docs.tcp.systems/llms-full.txt): the whole contract in one fetch.
- [API reference](https://docs.tcp.systems/acumen/api/): versioned reference generated from the route tables.

## Live proof

- [/api/proof.json](https://tcp.systems/api/proof.json): JSON, no auth, every check carries its own
  measured time and HTTP status. A failed check is reported as failed.
- [/api/proof/stream](https://tcp.systems/api/proof/stream): the same object pushed as SSE (`proof` events).

## Identity and connections

- [Pocket ID](https://auth.tcp.systems/): OIDC authorization code with PKCE; passkeys at the provider.
- acumen gateway (model access): Virtual keys per project, vendor ids resolved by the gateway, aliases for the common shapes. No product holds a vendor key.
- GitHub App (source + webhooks): Repository read and write scoped to the installed app, with webhook delivery verified against a stored HMAC — not an environment variable.
- PostgreSQL (durable state): Runs, packets, scorecards and audit rows are rows with a schema version; migrations run forward and are verified before the binary swaps.
- Cloudflare DNS (naming): The zone is managed from code with a drift check, DNSSEC is active, and every record resolves to a host we operate.
- SSE + WebSocket (realtime): One-way state is SSE with a snapshot event; bidirectional control is a WebSocket with an account-scoped snapshot and cancel/steer.

## Skills

29 skills across 6 agent postures, derived from tcpsystems/ops:skills/registry.json at
7a49c61. The full list is on the front door at https://tcp.systems/#skills.

## Status

- [status.tcp.systems](https://status.tcp.systems/): dated snapshot, SSE push on change, incidents feed.
- [security.txt](https://tcp.systems/.well-known/security.txt): security contact and disclosure policy.