Deployment profiles
Which ways of running Recursift are qualified, which are pending, who owns each one, and the starting footprint for a customer-hosted server.
Qualification status
Recursift marks a deployment profile as qualified only when its qualification owner has published an acceptance receipt for it. Core qualification belongs to two open issues: agent#118, the cross-service regression and performance harness, and webapp#23, a fresh customer-hosted install with outbound traffic denied and monitored. Neither has produced a receipt, so every profile on this page is pending.
Core profiles
| Profile | What it covers | Status | Owners |
|---|---|---|---|
| Core SaaS ephemeral | Recursift hosts the console, Query API and MCP service. Questions run on your endpoints and results are shown without a lasting evidence copy in the hosted service. | Pending qualification. The hosted console and API store questions and answers today; see Data flows. | api#5 (ephemeral API and MCP mode), webapp#16 (ephemeral views), agent#118 (qualification) |
| Core disconnected | You host the console, Query API, MCP service, relay and application database on one Linux server with local sign-in, enrollment, endpoint questions and read-only Plays, and no connection to Recursift. | Pending qualification. The server package is merged but has not been installed on a real Linux server. The signed Linux endpoint artifact has not been supplied. | webapp#23 (qualification), webapp#22 (upgrade and recovery), agent#117 (endpoint artifact), agent#118 (harness) |
- api#5: resource queries and explicit ephemeral API and MCP mode (MR-15)
- webapp#16: resource controls and ephemeral investigation views (MR-16)
- webapp#22: offline upgrade, trust rollover and disaster recovery (MR-24)
- agent#117: signed offline endpoint artifacts (MR-23A)
- Source: customer package prerequisite register
Optional profiles
Optional roles are absent from the core package, and the installer refuses a release that lists any. Each is pending and has its own owner. Their guides are tracked in dev#4.
| Optional profile | Status | Owners |
|---|---|---|
| Retained history (customer database retention, export spool, lifecycle and holds) | Pending | agent#106, agent#107, agent#108, agent#105, webapp#17 |
| Retention exports to other customer databases | Pending | agent#109, agent#110 |
| Retention failover and high availability | Pending | agent#111 |
| Shared compute and inference | Pending | agent#113, agent#114, agent#115, agent#116 |
| Private result delivery to the browser | Pending | relay#3, agent#112, webapp#19, webapp#18 |
| Private network transport between endpoints | Pending | knowledge#24, agent#101, agent#102, agent#103 |
| Recursift in Chrome and the mobile app against a customer-hosted server | Pending. Their implementation issues are closed; they are outside the core server profile and not qualified in it. | extension#1, mobile#2, webapp#24 |
| All optional roles in a disconnected installation, with real response effects | Pending | webapp#24 |
Starting footprint
These are the package's starting points for a customer-hosted server, not measured capacities. Recursift has not measured database growth, API latency, active endpoints or relay connections on this profile.
| Resource | Starting point |
|---|---|
| Host | A dedicated Ubuntu 24.04 LTS x86-64 virtual machine |
| CPU | 4 logical CPUs |
| Memory | 16 GiB |
| Storage | 250 GB of local SSD, with room for the application database, the complete verified release and at least two backups |
| Relay | One instance; routing is held in memory |
| Availability | Single server. Not a high-availability profile. |
Versions and commits
Measured on September 27, 2026 from each repository's main branch. No approved signed release exists yet, so there is no release version number to publish.
| Component | Commit | Artifact state |
|---|---|---|
| Console and customer package | webapp c7009d7 | Package, verifier and scripts merged. No approved signed release. |
| Query API, MCP and admin utility | api 92e785d | Signed offline artifact builder merged. Production public key not yet published. |
| Relay | relay b977996 | Signed offline artifact builder merged. Production public key not yet published. |
| Linux endpoint | not supplied | agent#117 is open; core verification fails without it. |
| Query API contract | api 92e785d | OpenAPI 0.1.0, identical to the OpenAPI download on this site |
| Endpoint security log schema | agent e30b084 | OCSF 1.9.0 |
Endpoint protection is qualified separately
A deployment profile passing does not qualify endpoint detection or response. Endpoint coverage is measured on its own and published on Detection capabilities with its denominators.
Guides
- Install a customer-hosted server
- Customer-hosted sign-in and recovery
- Back up, restore and remove
- Troubleshoot a customer-hosted server
- Data flows and retention
- Retention and shared-resource guides (tracked in dev#4)
Publishing these core guides does not complete the deployment program or any optional profile. dev#4 tracks every remaining profile.