Architecture and security

Clear boundaries are a feature.

Conclave AX, Cloud, Host, Workers, and Accounts each have a distinct role. That separation keeps authorization and credentials in the right place.

Conclave AX
Conclave Cloud
Conclave Host
Workers

Cloud

Coordinates work, authorizes Workspace access, and stores control-plane state.

Host

Provides machine execution, protects local credentials, and supervises Workers.

Worker

Talks to an AI model, CLI, or tool. It does not authenticate directly to Conclave Cloud.

Account

Determines whose AI credentials are used for an authorized assignment.

Workers do not receive Conclave user sessions or Host machine credentials.Workers operate behind the Host boundary and receive only the scoped assignment context they need.