Why Offline Compute Is Separated from Real-Time

The architectural decision to keep heavy, non-deterministic foundation compute strictly apart from the microsecond control plane.

A firewall between clocks

The most important structural decision in the Kronos architecture is the strict separation of L0 offline compute from the L1 real-time control plane. They are not merely different layers; they are different worlds with incompatible requirements, and the boundary between them is deliberate and hard. Mixing them would compromise both safety and depth.

Real-time cannot wait

The control plane enforces a sub-10-microsecond command boundary and hosts the autonomous hardware failsafe that dumps a quench with zero AI dependency. Nothing that can stall, garbage-collect, page from disk, or take an unbounded amount of time is allowed in that path. A Monte Carlo campaign or a retraining run has exactly those properties, so it must live elsewhere.

• Real-time: bounded, deterministic, simple, safety-critical
• Offline: unbounded, thorough, exploratory, non-critical
• No offline dependency in the failsafe path
• Models cross the boundary only after offline validation

Offline cannot be rushed

The reverse is equally true. Deep simulation, uncertainty quantification, and full validation cannot be squeezed into a control budget without becoming worthless. Forcing the foundation to answer in microseconds would mean answering badly. Separation lets L0 take the time correctness requires.

The two worlds meet only at controlled interfaces. Models trained and validated on L0 are compiled and promoted into the real-time twin; residuals and data flow back up for the next cycle. But the failsafe never depends on the foundation, and the foundation never sits in the actuation loop. The latency gradient is the physical expression of this separation.

This discipline protects both machines. The breeder's disruption failsafe and the burner's plug-stabilization interlocks act deterministically at the edge regardless of what the foundation is doing, while the foundation improves the intelligence behind them without ever being able to jeopardize the reflex. Depth and safety coexist precisely because they are kept apart.