Tonomia · TonoPhysic™ Architecture
Tonomia Platform · TonoPhysic™ · Distributed Architecture

Physical Intelligence
at the Decentralised Edge

TonoPhysic™ connects Tonomia AI agents to the physical world through a sovereign distributed edge network. Encrypted inference — never raw data — is stored across EU anchor sites and orchestrated by TonoFabric™.

6-Layer Architecture EU Data Sovereignty TonoEdge™ Native Mesh-Redundant Storage TonoFabric™ Orchestrated
00

System Topology OVERVIEW

Physical World
LAYER 0 · PERCEPTION
📷 Visual🔭 Depth🌡️ Thermal🎙️ Acoustic📡 Radar🔋 Power
↓   Sensor bus · On-device ISP pipeline   ↓
TonoEdge™ Node
LAYER 1 · LOCAL INFERENCE
🧠 On-device AI🗺️ Scene Graph💾 Encrypted Cache🔒 TEE Enclave⚙️ TonoFabric™ Agent🔄 Delta Sync
↓   Encrypted mesh · WireGuard · 5G / WiFi 6E   ↓
Anchor Storage
LAYER 2 · DISTRIBUTED DATA
🏦 Bank📡 Telco📮 Post Office🏛️ Municipality🏠 Home Worker🏭 TonoForge™ Hub
↓   IPFS · Rook/Ceph · S3-compatible API   ↓
TonoFabric™ Mesh
LAYER 3 · ORCHESTRATION
🕸️ Consensus🔁 Workload Scheduler🔑 Identity & AuthN🤝 Federated Training🛡️ GDPR/DORA Engine
↓   gRPC · NATS JetStream · OpenTelemetry   ↓
TonoForge™ Compute
LAYER 4 · REGIONAL AI HUB
⚡ GPU Cluster📚 Vector DB🧬 Model Registry🗄️ Cold Archive🔬 Federated Analytics
↓   REST · GraphQL · TonoFabric™ API   ↓
AI Agent Layer
LAYER 5 · PRODUCTS
🤖 Personal Agent💼 Professional Agent🎓 Learning Agent🗺️ Scene Browser🔔 Alert Engine
01
Sensor Capture
Multi-modal acquisition
02
Privacy Gate
Biometric anonymisation on pipeline
03
On-Edge Inference
Vision AI · Scene graph
04
Local Write
Encrypted artifacts to NVMe
05
Erasure Shard
Reed-Solomon 8+4 → anchors
06
Anchor Commit
3-of-N ACK → confirmed
07
Fabric Sync
Index update + vector upsert
08
Agent Available
Query-ready via API

01

TonoEdge™ & TonoPhysic™ RELATIONSHIP

TonoEdge™ is the compute unit that runs TonoPhysic™. Every deployment is anchored by TonoEdge™ nodes that acquire physical context, execute on-device inference, and maintain encrypted local Scene Memory — before any data crosses a network boundary.

🏠
Compact · Home

Residential and small-space environments. Feeds the personal agent silo via a device-bound key. Home context stays isolated — never crosses to other agent contexts.

🏢
Professional · Workplace

Enterprise environments. Feeds the professional agent silo under enterprise data controller authority. Workplace context never crosses to the personal silo.

🎓
Academic · Lab

Educational institutions and laboratories. Feeds the learning agent silo. Physical skill activation evidence is witnessed and confidence-tiered by the pipeline.

🔒
Silo Key Binding

Each node is provisioned with a silo-specific encryption key at deployment. The wrong key cannot decrypt data from the wrong silo — context isolation is cryptographic, not policy-based.

🔄
Autonomous Resilience

Nodes operate during network interruption, buffering artifacts locally. On reconnection, only deltas transmit. No data lost. No re-inference required.


02

Physical Sensing Layer LAYER 0

🛡️
Privacy at acquisition, not as policy. Biometric anonymisation runs inline on the hardware pipeline before any frame is written to any buffer — a pipeline constraint, not a software filter.
📷
Visual Scene Capture

RGB + depth for 3D spatial context. Objects detected and classified on-device. Biometric anonymisation before any write.

🔭
3D Spatial Mapping

Depth and LiDAR produce 3D point clouds. Spatial relationships encoded in a local scene graph — queryable without raw video.

🌡️
Thermal Presence

Occupancy and anomaly detection without identifying individuals. Operates in complete darkness. No biometrics produced or retained.

🎙️
Acoustic Events

Event classification flags only — speech activity, specific sounds. Raw audio is never stored or transmitted.

📡
mmWave Radar

Non-visual presence and motion detection through walls and in darkness. No imagery. No biometrics. Pure occupancy signal.

🗺️
Scene Memory Graph

All modalities converge into a persistent, queryable Scene Memory indexed by object, location, and time — on-device.


03

Anchor Storage Architecture LAYER 2

Encrypted storage shards distributed across trusted EU physical sites — not a single cloud. Each anchor type contributes distinct security posture and connectivity, forming a sovereign mesh with no single point of failure.

🇧🇪
EU Sovereignty by Architecture. All anchor nodes are Belgium/EU by design. TonoFabric™ enforces geo-placement at scheduler level. No hyperscaler dependency. GDPR, NIS2, and DORA compliant.
Anchor SiteStorage ProfileConnectivityRole
🏦 Bank Node
NVMe HotCold Archive 10 GbE + 5G failover Highest security posture. Ideal for long-term archival. Min 2 data shards per policy.
📡 Telco Node
NVMe HotCarrier-Grade SSD Dedicated fibre · 5G · PoP Carrier-grade uptime. Nationwide coverage. Ideal gateway for urban deployments. Proximus, Orange, Telenet.
📮 Post Office Node
SSD Tier-1HDD Tier-2 FTTH 1 Gbps Low admin overhead. Dense rural coverage across Belgium. Plug-and-play deployment.
🏛️ Municipality Node
HDD Object StoreSSD Cache Dedicated 10 GbE + fibre ring Regional aggregation hub. Hosts TonoFabric™ region controller. GDPR deletion API. Min 1 shard per policy.
🏠 Home Worker Node
NVMe Micro FTTH 50–1000 Mbps Ciphertext only — operator never sees plaintext. Earns storage credits. Max 2 shards. Auto-eviction at 30 days.
🏭 TonoForge™ Hub
All-NVMe Tier-0PB-scale Archive 100 GbE · InfiniBand Central aggregation. Federated learning receives model gradients only — never raw data.

04

Platform Integration PLATFORM

TonoPhysic™ is a native Tonomia module — extending the platform from GPU compute into physical-world AI memory and enabling new revenue streams through existing infrastructure.

TonoEdge™ → Physical Compute

Each TonoEdge™ node registers on the TonoFabric™ mesh as a billable compute resource — GPU-as-a-Service and Token Inference API.

🕸️
TonoFabric™ → Orchestration

TonoPhysic™ scenes are a native resource type in the TonoFabric™ API. Integration requires a single deployment per TonoForge™ region — no new infrastructure stack.

🏭
TonoForge™ → Intelligence Hub

GPU clusters aggregate anonymised scene embeddings for model improvement via federated learning. Cross-location semantic queries without raw data centralisation.

🤖
Agent Layer → Silo Routing

Physical context routes to each agent through isolated encrypted silos. Silo keys never cross boundaries — physical intelligence serves each agent without contamination.

💰
Anchor Credits

Banks, telcos, and municipalities earn monthly credits against Tonomia services for hosting anchor nodes.

🔎
Scene Query API

Per-query billing for semantic scene search across the physical memory fabric. REST API. Per 1,000 queries.

📦
TonoEdge™ Hardware

Physical device sales with managed deployment and TonoFabric™ subscription bundle.

🧠
Federated Model SaaS

Sector-specific models trained on opt-in federated data. Licensed without exposing raw source data.


05

Privacy & Compliance BUILT-IN

Privacy, data minimisation, and EU sovereignty are architectural properties — enforced at the pipeline, key management, and scheduler level. Not configuration. Not policy.

🕵️
Biometric Blur at Acquisition

Face detection and anonymisation run inline on the ISP pipeline before any frame reaches any memory buffer. Biometric retention is architecturally impossible — not policy-prohibited.

📋
Data Subject Rights API

GDPR Article 17 deletion cascades to all 12 anchor shards within 72 hours, verified via cryptographic deletion receipts in an immutable audit log.

🗓️
Retention Policy Engine

Per-site configurable retention: 7d, 30d, 1y, 7y. Automatic data minimisation enforcement. Immutable audit logs for GDPR, NIS2, and DORA.

🌍
Geo-Placement Enforcement

TonoFabric™ verifies each anchor’s jurisdictional certificate before placing any shard. No administrative action can route data outside the declared EU perimeter.

ℹ️
On-premise hardware means no hyperscaler dependency. Every anchor site runs Tonomia-managed on-premise hardware. No data is processed by any US-incorporated cloud provider. The CLOUD Act exposure that affects every hyperscaler customer does not apply — structurally, not contractually.
ARCH REV 2.0 · Confidential · Battice/Herve, Liège, Belgium · © 2026 Tonomia SRL · BE0802716273