Technical Architecture Deep Dive

Under the Hood of the Meynos Governance Kernel

Explore the microservice topology, event distribution paths, dynamic SQL AST rewriting engine, and cryptographic verification algorithms that power Meynos.

Pipeline Topology

End-to-End Event & Query Pipeline

Data mutations stream through high-speed NATS JetStream subjects, while read queries pass through an inline AST masking parser that guarantees zero raw PII is ever transmitted to unauthorized AI agents or external consumers.

01. Ingestion
Postgres WAL / Webhooks

f1 daemon validates HMAC, wraps data in canonical CloudEvents envelope, publishes to NATS.

Latency: <1.2ms
02. Persistence
f2 Sink Worker

Consumes stream, builds dynamic ON CONFLICT DO UPDATE merges, isolates failures to DLQ.

ACID Guaranteed
03. Serving Kernel
f4 DAB AST Engine

Intercepts incoming query, rewrites AST with masking expressions based on caller role, clamps row limit.

MCP JSON-RPC 2.0
04. Drift Radar
g1 Crawler Worker

Computes SHA-256 fingerprint, detects column addition or removal, flags BREAKING drift.

Continuous Polling
Platform Services

Microservice Component Specifications

meynos-f1-ingest-daemonPython 3.11 / FastAPI / NATS

High-Throughput Ingestion & Verification

Sub-millisecond ingress webhook gateway. Validates HMAC-SHA256 signatures, normalizes payloads into canonical Meynos CloudEvents envelopes, and publishes onto NATS JetStream subjects (e.g. meynos.cdc.v1.>).

HMAC Header Validation
NATS JetStream Publishing
Zero In-Memory Buffering Lag
meynos-f2-sink-workerPython 3.11 / AsyncPG / JetStream

Idempotent Storage & Lakehouse Dispatcher

Consumes durable NATS JetStream streams, generates dynamic idempotent ON CONFLICT DO UPDATE SQL merges, commits transactions, and handles error isolation with automatic Dead-Letter Queue (DLQ) routing.

Dynamic Idempotent Upserts
Dead-Letter Queue Isolation
Multi-Sink Fan-Out
meynos-f4-dab-engine.NET 9 / C# / Microsoft DAB

Governed Serving & Dynamic AST Engine

High-performance data serving kernel. Rewrites SQL AST queries on the fly using PostgresMaskingQueryBuilder (REGEXP_REPLACE, MD5, REDACT), enforces McpQueryLimiter row/token caps, and serves dual-mode REST, GraphQL, and native MCP JSON-RPC 2.0.

Dynamic SQL AST Rewriter
Native MCP JSON-RPC 2.0
Row & Token Context Clamping
meynos-g1-crawler-workerPython 3.11 / Catalog Introspection

Continuous Schema Drift Radar

Periodically introspects live database catalogs (PostgreSQL, Iceberg, Delta Lake), computes canonical SHA-256 fingerprints (name:type:nullable:pk), and emits BREAKING vs NON_BREAKING schema drift alerts over NATS.

Deterministic SHA-256 Hashing
Live information_schema Queries
Breaking Change Early Warning
meynos-contractsJSONSchema / Python / C# / TS Codegen

Canonical Platform Contract Hub

The single source of truth for platform schemas: meynos_envelope.json, compiled_spec.json, and schema_drift.json. Automated codegen keeps Python, C#, and TypeScript type definitions 100% synchronized.

Cross-Language Synchronization
Zero Contract Divergence
Strict Schema Validation
meynos-deployDocker Compose / Envoy / PostgreSQL 16

Production & Dev Infrastructure Mesh

Wired orchestration environment with zero hardcoding. Configures Envoy proxy routing, PostgreSQL Control Plane with Row-Level Security (RLS), and NATS JetStream message brokers.

Envoy Sub-15ms Ingress Proxy
PostgreSQL Tenant RLS
Isolated Docker Network Mesh

Explore the Live Developer Tooling