MODERAN Platform layers — technical briefing EN · FR Console briefing · ARGILETTE LLC

The self-hosted platform, layer by layer

Four layers. One platform. All of it in your network.

This document explains, for each layer of the MODERAN platform, how it actually works — the components, the data flow, the safety rules — and what it earns you: in minutes saved, in disputes won, in revenue created. Everything described here installs into your own Kubernetes cluster, inside your country.

A note on numbering: the platform has exactly four layers, numbered L0 to L3. We start at zero because L0 is the foundation everything else stands on — you cannot run L1, L2 or L3 without it. If you have seen "L4" mentioned, that is a miscount; there are four layers, and the last one is L3.
L3Sovereign Edge-AI ApplianceRevenue add-on
L2Compute BrokerRevenue add-on
L1Interop AssuranceIn base fee
L0Observability & Fault CorrelationIn base fee
Your Kubernetes cluster · your servers · your country

Layer 0 Included in base fee

Observability & Fault Correlation

The operational foundation: one truthful view of a multi-vendor radio network.

What it is

L0 continuously listens to every network element from every vendor — radios (RU), baseband units (DU/CU), the RIC controller, transport links, cloud nodes — and turns their separate alarm streams into single, explained incidents with a probable root cause. Its face is the MODERAN Console; its body is a processing pipeline running on your servers.

How it works — the life of an alarm

  1. Collect. Vendor adapters speak each supplier's management interfaces — the O-RAN O1 interface and gNMI streaming telemetry, including adapters for srsRAN/OAI-based equipment. They pull alarms, counters and health data on a continuous cycle.
  2. Publish. Every event lands on a high-speed internal message bus (NATS). Nothing talks point-to-point; every consumer sees the same stream, and the bus persists state so a restart loses nothing.
  3. Normalize. The normalizer translates each vendor's private format into one versioned common information model. From here on, a Nokia alarm and a Mavenir alarm are the same kind of object with the same fields — severity, element, code, timestamp.
  4. Correlate. The fault-correlator holds a live map of your network topology — which radio hangs off which DU, which DU rides which transport ring. Events that share an ancestor element and a time window are folded into one fault group. In our live demo, 96 raw alarms became one incident.
  5. Explain. The correlator ranks the probable root cause using evidence it can state in words: ancestor of other affected elements · carries the highest-severity alarm in the group · multiple alarms on the same element — and attaches a confidence score (95% in the demo). No black box: every verdict comes with its reasons.
  6. Show and alert. The API gateway serves the Console (live updates over SSE — no refreshing), pushes one notification per incident to Slack, Webex or PagerDuty with a cooldown so on-call phones buzz once, not 96 times, and exposes everything as a documented REST API. Matching runbooks — step-by-step repair procedures in plain versioned files — are attached to each fault family.
  7. Record. Every privileged action and every incident is written to a tamper-evident audit trail, archived to Postgres in write-once form. Your post-mortems, SLA claims and regulator answers come from here.

Under the hood

collector-o1 · collector-gnmi · collector-srsranVendor-facing adapters; add a vendor by adding an adapter, not by replacing the platform.
normalizerVendor formats → one versioned common model.
fault-correlatorTopology + time-window grouping, root-cause ranking, persistent fault-group state.
runbook-serviceVersioned YAML procedures, hot-reloaded — your engineers extend it without vendor tickets.
api-gateway + consoleSSO login (OpenID Connect), role separation, rate-limiting, bilingual EN/FR web console.
notifier · audit-archiverDeduplicated alerts to your chat tools; write-once audit archive; Grafana dashboards and Prometheus rules included.

What it earns you

Layer 1 Included in base fee

Interop Assurance

Proof that a vendor mix works — before deployment, and after every vendor update.

What it is

Open RAN's promise is mixing vendors; its biggest operational risk is that a software update from vendor A silently breaks vendor B. L1 is a conformance-testing engine: it runs test campaigns against specific vendor combinations, records a verdict with a fingerprint, and guards approved combinations against regressions.

How it works

  1. Define the combination. Each vendor mix you care about — say, radio vendor X firmware 5.2 with DU vendor Y release 3.1 — gets a combination ID.
  2. Run the campaign. L1 drives a test harness against that combination. It ships with a built-in harness for immediate use and an exec mode that wraps your own O-RAN test suites (OTIC-style scripts), so your existing lab investment plugs straight in.
  3. Get a verdict with a fingerprint. Every run produces pass/fail detail plus a fingerprint of exactly what was tested. Verdicts are listed, retrievable and comparable — an audit trail of interoperability.
  4. Approve a baseline. When a verdict satisfies you, one action promotes its fingerprint to the approved baseline for that combination. From then on, any new run that deviates is flagged as a regression.
  5. Catch the silent break. When a vendor ships an update, you re-run the campaign before rollout. If the update breaks the mix, you learn it in the lab — not from subscribers.

What it earns you

Layer 2 $0 upfront · 15–25% revenue share

Compute Broker

Turns the idle hours of your edge computing hardware into a revenue line — without ever risking the radio network.

What it is

Your edge cloud sites carry processors and accelerators sized for peak radio traffic. Most of the day — and almost all of the night — much of that capacity sits idle, depreciating. L2 sells that idle capacity to paying compute tenants (AI startups, research groups, enterprises) as scheduled jobs, and takes it back the instant the radio network needs it. This is the same "AI-RAN" thesis that MTN, NVIDIA and others funded with $45M in 2026 — L2 is the sovereign, operator-owned version of it.

How it works

  1. Sense capacity. A capacity sensor reads live telemetry — free accelerator units per node and a radio-demand signal derived from the same L0 metrics pipeline. The broker always knows what is truly spare, per site, right now.
  2. Accept jobs. Tenants submit compute jobs through a simple API with a priority level. Jobs are queued, placed on nodes with headroom, and metered from the moment they start.
  3. Enforce the golden rule: radio always wins. A configurable reserve of capacity is never sold. Beyond that, a pre-emption loop watches radio demand continuously; the moment it rises, tenant jobs are pre-empted — suspended or evicted — to hand capacity back. The pre-emption mechanism is deliberately pluggable so it binds to your real infrastructure controls (Kubernetes eviction, container freeze) and is validated before the broker ever touches nodes carrying live radio traffic.
  4. Account for everything. Every pre-emption is logged against an SLO budget you set — you can see exactly how often tenants were interrupted and prove that radio service was never degraded. Every consumed compute-hour is metered per tenant for billing.

What it earns you

Layer 3 Per appliance + per tenant/month

Sovereign Edge-AI Appliance

In-country AI inference for banks, insurers, hospitals and government — with cryptographic proof that data never left.

What it is

Regulated organisations in West Africa want modern AI but legally cannot send their data abroad — and practically cannot trust a foreign cloud's promise. L3 is an appliance installed in-country (in your data centre or on the customer's premises) that runs AI models locally, meters usage per tenant, and produces signed sovereignty attestations — verifiable evidence, not policy PDFs.

How it works

  1. Load models locally. The operator loads approved AI models into the appliance's catalogue at deployment. Models run on the appliance's own hardware; no inference request ever transits a foreign API.
  2. Provision tenants with quotas. Each customer — a bank, a ministry, an insurer — is a tenant with its own credentials, its own model access and a monthly usage quota. Tenants see their own consumption; the operator provisions, suspends and bills.
  3. Serve inference, meter everything. Tenants call a simple inference API. Every call is counted per tenant and per model — that metering is the billing record, and it flows into the same monthly invoice machinery as the rest of the platform.
  4. Enforce sovereignty in code, not in promises. The appliance software refuses to start if cross-border egress is enabled without a written override reason — and if an override is ever set, it prints a loud warning in the logs at every startup, forever. A quiet exception is impossible by construction. On demand, the appliance produces a signed attestation a regulator or auditor can verify.
  5. Inherit the operational floor. The appliance emits its audit events onto the same bus, is watched by the same L0 console, and follows the same runbook discipline — so the infrastructure hosting a bank's AI is run to telco grade, and you can show it.

What it earns you

Sovereignty, precisely

What runs where — and what ever crosses the border

Every layer above installs from Helm charts (or fully GitOps via Argo CD) into your own Kubernetes cluster. Operators sign in with your SSO. Here is the complete list of data that can leave your country, and only if you enable it:

DataWhere it livesCrosses the border?
Alarms, telemetry, topology, incidentsYour L0 clusterNever
Interop verdicts and baselinesYour L1 serviceNever
Tenant jobs, SLO ledger, compute meteringYour L2 brokerNever (aggregate revenue counts are shared for the revenue-share settlement)
AI prompts, model inputs/outputs, tenant dataYour L3 applianceNever — enforced in code
Usage counts for billingMetered locallyA count — a number — is reported for invoicing. Never content.
Health heartbeatOptionalAnonymous up/down signal only, so we can honor the support SLA. You can disable it.

The same platform, four audiences

Who gains what

RoleL0 + L1 give themL2 + L3 give them
CTO / Network DirectorOne truthful screen over every vendor; proof before every rollout; freedom to negotiate with suppliers.An AI-era roadmap that runs on infrastructure they already control.
CFOShorter outages and one flat platform fee instead of per-cell metering and consultant hours.Two new revenue lines — one at zero upfront cost, one aimed at premium regulated customers.
NOC / Operations lead96 alarms become one card with the reason attached; runbooks encode the best engineers' judgment; new hires train on injected scenarios.The same console and discipline extends over the compute and AI estates — nothing new to learn.
Regulator / AuditorTamper-evident audit trails and timestamped incident evidence.SLO ledgers proving radio was never degraded; signed attestations proving data never left the country.

Next step

See the foundation layer live

The console briefing shows L0's screens photographed during a real injected outage. For a guided walkthrough of any layer — including the fault-injection demo, live — write to us.

Write to sales@argilette.com or visit moderan.org