# Architecture

Read from `plans/kxm-roadmap/state.json` and the pages linked below.

Verified date: null. A review pass has not set `architecture.verified`.

| Page | What it covers |
| --- | --- |
| [Platform](platform.md) | Local-first processes and how they connect |
| [Surfaces](inventory.md) | Executables, listeners, and the stores they own |
| [Access](access.md) | Roles, claims, and tool presets observed in code |
| [Authentication](authentication.md) | How harness login is probed, and where credentials are not stored |
| [Agent path](agent-path.md) | `kxm run` through the drive receipt |
| [Hosted direction](hosted-direction.md) | Target only. Not a live deployment |

## Related

- [Roadmap](../roadmap/dashboard.md)
- [Trust model](../concepts/trust-model.md)