Platform

Master validator, registry, proxy, runtime, and weights.

PlatformPlatform

Docker and GPU orchestration

Local challenge containers, brokered Docker jobs, and remote GPU routing.

#platform/docker-gpu-orchestration
platformdockergpubroker

Challenge runtime

The Docker orchestrator pulls GHCR images, creates the challenge network, creates named SQLite volumes, mounts per-challenge secret files, starts containers, and validates health/version readiness.

Broker and GPU routing

The Docker broker lets challenges request bounded Docker jobs without direct host socket access. GPU routing sends challenge runtime operations to configured GPU agents when challenge resources require remote capacity.

SurfaceControl
Docker brokerAllowed image prefixes, resource limits, safe archive mounts, authenticated challenge token.
GPU agentToken-protected start, stop, restart, and status endpoints.
GPU routerCapability checks for known, enabled, and sufficiently sized GPU servers.