(ORGANIZATIONAL VISION // 03)

The Geological Intelligence Philosophy & Architecture

Why we built KURIPP: To replace black-box, hallucination-prone chatbots with an imposing, architectural research studio grounded in mathematical provenance.

(The Premise)

“Modern enterprise knowledge is treated like ephemeral noise. We treat it like permanent mineral strata.”

Organizations produce millions of pages of agreements, clinical studies, engineering specifications, and strategic whitepapers. Yet, contemporary enterprise search remains broken—fragmented across siloed drives, vulnerable to token theft, or reliant on chat assistants that fabricate plausible falsehoods.

KURIPP was conceived as an antidote to ephemeral software. Drawing inspiration from brutalist architecture and geological rock strata, every document is treated as an immutable layer in a permanent knowledge deposit.

// ZERO COMPROMISE ON ATTRIBUTION · STRICT MULTI-TENANT ISOLATION · OPEN SOURCE HERITAGE

(Systems Anatomy)

The 4-Tier Infrastructure Stack

Engineered as a clean monorepo architecture leveraging Turborepo, pnpm workspaces, and cloud serverless primitives.

TIER 01 / INGESTION

Raw S3 Object Vault

Direct client-to-storage presigned streaming. Large binaries (PDF, XLSX, DOCX) bypass the API gateway directly to S3-compatible object storage with SHA-256 integrity checksums.

AWS S3 / MinIO / R2
TIER 02 / GEOMETRY

PostgreSQL 16 + pgvector

Prisma ORM schema governing relational entities paired with native pgvector HNSW indices. Executes 1536D cosine similarity queries in sub-20ms latency budgets.

PostgreSQL 16 · Supabase
TIER 03 / ORCHESTRATION

Redis 7 + BullMQ Queue

Asynchronous task workers handle chunk parsing, vector embedding generation, and cross-encoder re-ranking without blocking interactive GraphQL user sessions.

Upstash TLS · BullMQ
TIER 04 / GATEWAY

GraphQL Yoga v5 Gateway

Unified typed schema executing on Node Express, serving live Server-Sent Events (SSE) streaming, Socket.IO channels, and enforcing strict dual-token authentication.

Render · Port 10000
[SECURITY ARCHITECTURE PROMISE]

Zero Browser Storage · Strict HttpOnly Dual-Token Isolation

Most modern web applications store sensitive JWT tokens in `localStorage` or `sessionStorage`—leaving them exposed to any cross-site script (XSS) payload or rogue browser extension.

KURIPP guarantees zero browser storage security: 15-minute access tokens exist strictly in volatile client memory. 7-day refresh tokens reside inside cryptographically hashed, `SameSite=Lax`, `HttpOnly` secure cookies bound exclusively to `/graphql`.

✓ RFC 6750 Bearer Authorization
✓ HttpOnly Path=/graphql Cookie
✓ Argon2id Memory-Hard Password Hashing
✓ Multi-Tenant Row-Level Separation
(Lead Architect & Provenance)

Crafted by Jay-Raam

Designed and engineered with relentless standards for typographic beauty, database integrity, and verifiable artificial intelligence.

COORDINATES: 13.0827° N, 80.2707° E · CHENNAI, TAMIL NADU