Single source of truth
What runs where, on which track, under which policy — declared and versioned. The manifest is the fleet.
The unit of isolation is the business, not the location. One environment runs all of a business's locations, channels, and devices; anything that requires separation receives its own. The estate is declared once, converged continuously, and governed by one authority.
The fleet is described in a declarative manifest: environments, versions, tracks, policies. The control plane continuously compares declared state against observed state and converges the difference — planned, applied, verified, and recorded.
What runs where, on which track, under which policy — declared and versioned. The manifest is the fleet.
Divergence between declared and observed state is detected and converged without operator intervention.
Maintenance windows, restart guards, and placement constraints bound when and where change applies.
Hosts join the fleet and offer capacity. Each business receives one environment; every location it operates runs through it. Separate businesses — or anything requiring hard separation — receive separate environments. Devices enroll once and pull configuration for life.
Warm capacity provisions new environments in under sixty seconds and evacuates a failing host without ceremony.
All of a business's locations share its environment. Separate businesses run in separate environments, placed by declared constraint — never by hand.
Screens, terminals, and sensors receive releases by track, tolerate disconnection, and reconcile on return.
Every fleet operation — rollout, migration, backup, placement — is a typed operation. Agents execute them at machine tempo. People see decisions, evidence, and nothing else.
The control surface is typed end to end: declared parameters, scoped credentials, required confirmation for destructive actions. Built for agents to operate; legible to the people who review them.
Every operating agent carries a budget with a hard stop and reports heartbeats with work evidence. An idle agent is an incident. An overspending agent is stopped, then reported — in that order.
The ledger aggregates across the fleet: every deployment on every environment, every gate outcome, every reversion, every approval. One queryable record answers for the estate.
Fleet-wide changes pass the same approval gates as everything else. The platform brings decisions to the person who holds authority — never operations. That is what makes the ratio possible.
Turbine onboards a limited number of organizations each quarter. Selection favors operations prepared to run under agents.