Orchestration Serialization Engine
Sold once. One buyer acquires the complete IP outright — every line of source, every test, every audit artefact — and it is then denied to every other party. No licence, no recurring, no second buyer.
Acquire — begin due diligence →Technical Ledger
| SKU | VLA-GEN-ORC-V1.0 |
|---|---|
| Vendor | Vlaander LTD |
| Classification | Engineering Asset |
| Variant | Default Title |
| Availability | ProvisionedPASSING |
Provenance & integrity.
| Language | Rust 1.75+ (stable) |
|---|---|
| Build | warning-free · clippy::pedantic · missing_docs |
| Memory safety | safe Rust · every unsafe block carries an inline safety proofPASSING |
| Tests | 46 unit + workspace e2e · full suite < 1sPASSING |
| Dependency surface | 5 deps · no copyleft · one-page SBOM |
| Signing scheme | ed25519 signed releases |
| Signing key | Publishing 2026-Q3 |
| SHA-256 | Publishing 2026-Q3 |
| Release | Publishing 2026-Q3 |
| External audit | Publishing 2026-Q3 |
Value, in your metrics.
| Metric you track | Magnitude |
|---|---|
| Agent-mesh substrate build time | 9–15 engineer-months of lock-free systems work, delivered as reviewed Rust source. |
| Supply-chain / dependency surface | 5 dependencies, no copyleft anywhere in the tree, a one-page SBOM. |
| Memory-safety class | Safe Rust; every unsafe block carries an inline safety argument; the arena cannot dangle a pointer (borrow-checked reset). |
| Reference throughput | ~70k payloads/sec four-node drain; ~2.2M records/sec codec round-trip (reference figures, commodity hardware). |
Build-vs-buy basis.
Reproducing this in-house: approximately 9–15 engineer-months for a senior team familiar with lock-free Rust systems programming — arenas, hybrid logical clocks, work-stealing schedulers, and zero-copy codecs. At a loaded cost of $25,000 per engineer-month, that is $225,000–$375,000, or $468,750 after a 25% risk premium for scope overrun. Purchasing the source: $200,000 plus approximately 4 weeks of integration effort. Stated biases: we compare against the high end of the build estimate, apply a 25% risk premium for scope overrun, and exclude opportunity cost. Editable assumptions: engineer-months (9–15), loaded cost per month ($25,000), risk premium (25%). Flip any of these and the comparison adjusts accordingly — the model is yours to defend, not ours to dictate.
Risk allocation.
| Risk | Borne by | Basis | Buyer’s recourse |
|---|---|---|---|
| IP cleanliness | Vlaander LTD | Source warranted as original work, clean of third-party IP at point of sale. | Indemnification capped at the purchase price paid. |
| Benchmark performance | Vlaander LTD | Published numbers must reproduce on the documented hardware. 30-day inspection window from delivery. | Refund of the purchase price within the inspection window. |
| Integration into buyer’s stack | Buyer | Integration footprint published on every product page. No warranty extends to bespoke environments outside the documented targets. | Use the published footprint as the integration spec; engage Vlaander engineering at sales@vlaander.com for paid support. |
| Regulatory compliance in buyer’s jurisdiction | Buyer | Export classified EAR99. Buyer self-screens against restricted jurisdictions and parties under their own legal counsel. | Request a pre-sale export review at sales@vlaander.com — provided at no charge. |
| Vendor continuity | Buyer | No vendor can warrant its own continuation. Source delivered without licence server, kill-switch, or expiry — risk transferred to buyer by the outright-sale model. | Self-maintain in perpetuity using the delivered source; fork freely under the Sale terms. |
| Source-code escrow | Joint | Source is delivered to the buyer at sale, so escrow is structurally unnecessary. Available on request when buyer counsel mandates a third-party deposit. | Request escrow at sales@vlaander.com — buyer-funded; Vlaander participates without charge. |
| Security disclosure post-sale | Joint | Vlaander acknowledges security reports within 24 hours and honours coordinated disclosure indefinitely on shipped versions. Buyer applies remediation in their environment. | Report to sales@vlaander.com — disclosure policy published at /security. |
Scope & maturity.
- All six substrate crates: identity/clock/errors, lock-free arena, versioned codec, epoch state store, priority router, work-stealing orchestrator.
- 46 tests plus a workspace end-to-end mesh test; warning-free under clippy::pedantic; full suite under one second.
- A one-page SBOM with no copyleft anywhere in the tree.
- No network transport, cluster-membership, or distributed consensus — intentionally left to the acquirer.
- No durable persistence, async runtime, multi-tenant security model, or observability sinks — each is the acquirer’s opinion to bring.
- Reference performance figures only; no competitive benchmark position is claimed.
- Nothing is blocked. The exclusions above are deliberate positioning that preserves the acquirer’s optionality, not unfinished work.
System Abstract
A Rust 1.75 in-process agent-mesh substrate, delivered as a Cargo workspace of six narrowly-scoped library crates — identity and time, a lock-free bump arena, a versioned self-describing codec, an epoch-versioned state store, a four-tier priority router, and a work-stealing orchestrator — plus a reference operator binary.
Its discipline is architectural: arena allocations are borrow-checked so a freed pointer cannot dangle; hybrid-logical-clock timestamps stay monotone under wall-clock regression; archives refuse mismatched schema, version, or CRC; state readers never observe a partially-applied transaction; payload fan-out is an O(1) refcount bump, not a byte copy. Every invariant is enforced by the compiler or by a property test, and the full 46-test suite runs in under a second.
The substrate deliberately excludes a network transport, persistence layer, async runtime, multi-tenant security model, and observability sinks — each a category in which the acquirer brings their own constraints. Their absence is positioning that preserves optionality, not omission.