Polyglot systems engineering
Use the language that fits each job, then make the handoff explicit enough to inspect, test, and replace.
Alpha · polyglot systems engineering
Several languages. One platform contract.
Platform Zero treats infrastructure as software. Shell owns the host-facing lifecycle, Python resolves and renders structured state, Kotlin coordinates runtime contracts, and TypeScript checks what users actually reach in a browser.
Alpha software: this page describes the current public architecture and test stack. Interfaces and module contracts are still changing.
- 01Manifest + module pinsJSON · YAML · Git revisions
- 02Resolve + check sourcePython
- 03Build + deployShell
- 04Verify runtime contractsKotlin
- 05Exercise auth + browserTypeScript
One failure path can stop activation before the host is trusted.
The engineering proposition
The boundary matters more than the language count.
Infrastructure as software
Turn scattered host decisions into pinned inputs, generated output, repeatable activation, and reviewable rollback.
Full-stack platform work
Carry one change from source resolution and operating-system lifecycle through service contracts and browser behavior.
Core language boundaries · public source
Each layer has a job—and evidence.
These links point to source that is available while signed out. Private site values, credentials, and deployment-specific configuration are not part of the demonstration.
01Shell
Own the operating-system edge.
Build the release, reconcile host state, install units, activate services, collect diagnostics, and restore the prior release when activation fails.
- Build and deployment orchestration
- Lifecycle, readiness, and rollback
- Host-facing safety checks
02Python
Turn structured inputs into checked state.
Resolve exact module revisions, reject unsafe trees, render systemd user contracts, and emit deployment audit data where structured transformations matter more than shell composition.
- Module-lock resolution
- Runtime and systemd rendering
- Deployment auditing
03Kotlin
Express runtime contracts as typed suites.
Model blocking, optional, and advisory checks; compose suites; manage authenticated clients; and produce a consistent verification surface across unlike services.
- Typed suite catalogue
- Service and authentication clients
- Recovery and infrastructure checks
04TypeScript
Check the boundary a user experiences.
Describe public, edge-authenticated, OIDC, and non-UI routes; reuse login drivers; verify session behavior; and capture inspectable browser evidence.
- Route and authentication contracts
- Playwright browser flows
- Visual and screenshot evidence
What holds the layers together
Polyglot does not have to mean fragmented.
Language boundaries stay useful when the contract crossing them is smaller and more stable than either implementation.
Pinned source
A flat site manifest selects modules and records exact revisions before assembly begins.
Runtime model
Module-owned YAML becomes one validated description of services, dependencies, placement, and lifecycle.
Secret-free release
The local build records the selected source and emits deployment material without rendering plaintext runtime secrets.
Executable evidence
Source policy, release provenance, runtime contracts, authentication flows, and recovery drills decide whether the result can be trusted.
Release and identity boundaries · public source
A green build is not enough.
The release path checks what was selected, what was built, how it reaches the host, and whether identity redirects still return users to the place they intended to reach.
Fail before packaging unsafe state.
Organization policy checks module metadata and required security controls; CI also runs secret and vulnerability scanning.
Refuse an unverified deployment artifact.
The host update path consumes a prepared release and has a dedicated regression gate for rejecting unverified input.
Keep runtime state durable and recoverable.
The installer preserves runtime environments across reboot, guards in-place environment updates, and retains versioned activation and rollback behavior.
Verify the redirect, not just the login page.
Coverage includes nested forward-auth destinations, tightened Keycloak OIDC redirects, and Home Assistant mobile callback behavior.
Smaller integration edges
Use another language when the boundary requires it.
The platform does not treat incidental file types as equal evidence. These smaller surfaces exist because a host application, database, or build system defines the integration point.
One change, end to end
Add a service without adding another one-off deployment path.
A module brings its runtime definition, templates, dependencies, tests, and component metadata. The same generator and verification contracts then carry it through the system.
- 01Define
Describe the service contract and keep deployment-specific values outside shared source.
- 02Resolve
Pin the module revision and reject dependencies, paths, or placements that violate the build contract.
- 03Build
Run source policy and emit a secret-free release without changing the target host.
- 04Deploy
Render secrets on the target, install a versioned release, and preserve the previous recovery path.
- 05Verify
Exercise readiness, service behavior, authentication redirects, recovery, and the browser surface users depend on.
The practical result
A platform change has one reviewable path from source to evidence.
The value is not using many languages. It is making each language responsible for a clear part of a system that can still be built, operated, and handed over as one.