Type: Synthesis Note
Status: Published
Version: v0.2
Last synthesized: 2026-06-10
Reviewed by: AI-drafted; human content-review pending
Open tensions: 3
A diagram of the same system, drawn by two people. The first draws boxes with product names in them — a server here, a workflow engine there, a database, a model gateway — and arrows for the wires between them. The second draws no product at all. They draw what has to stay true no matter which box you swap out: where the durable record lives, who is allowed to write into it, what survives a session ending and what does not. Both diagrams are of one infrastructure. Only the second one will still be correct next year.
This page draws the second diagram. It is the one place in the handbook that steps back from any single pattern and asks what the whole arrangement has to provide for the rest of them to work — and it asks that as a question about shape, not about parts.
The distinction is borrowed, and worth naming as a borrow before it does any work. Network engineering separates the physical topology of a system — the literal placement of machines and cables — from its logical topology, which describes how data actually flows, independent of where the hardware sits. The two are routinely different: the same logical arrangement can run on entirely different physical layouts, and "their logical topologies may be identical" even when the wiring is not. We take exactly that separation and apply it one level up. The Synthesis Architecture is the logical topology of a Pyragogy network: the set of guarantees the infrastructure must make to the graph of human and synthetic peers learning on it. The machines that happen to make those guarantees are the physical layer, and the physical layer is interchangeable by design.
This is not a setup tutorial, and the difference is the whole point of the page.
A handbook that documented the stack would be obsolete the day a tool was replaced — and tools get replaced. So this page documents the topology and treats the tools as examples of it, never as the thing itself. The rule is the same one the rest of the handbook applies to its concepts: a structure named after a tool dies when the tool changes. Here it is applied to the infrastructure.
There is a concrete way to feel the difference. A running Pyragogy network does, in fact, sit on specific software: a self-hostable deployment platform such as Coolify standing up services on a rented virtual server from a provider such as Hetzner; a workflow engine such as n8n routing events between the parts; a backend platform such as Appwrite holding identity and the structured store; a model gateway such as OpenRouter putting many language models behind one interface; a note vault such as Obsidian holding the human-readable half of the record. Every one of those names is an example, and every one is replaceable. None of them belongs in a definition, and you will not find one in this page's title or in any claim about what the architecture is. What the architecture is, is the set of properties that survives swapping all of them out at once.
So the page is organized around guarantees, not components. Four of them carry the weight.
State them as obligations the infrastructure owes the graph, because that is how the patterns consume them.
One — a durable record that outlives the session. The architecture must hold a store that does not reset when a conversation ends. This is the substrate every persistence pattern leans on: it is what the Pattern: Context Persistence anchors a transient brainstorm to, and what the Pattern: The Shared Ledger of Knowledge accrues entries into. The topological requirement is precise and tool-free: there exists a node in the system whose state survives the end of any single participant's session — and survives, in particular, the model's reset, which is total. Whether that node is a database, a versioned file tree, a note vault, or all three at once is a physical-layer decision. That some node holds across the boundary is the guarantee.
Two — a record legible to two unlike readers. The same durable store has to be readable by a human who forgets and by a model that resets, and those are not the same kind of reader. The human reads prose and recognizes it next morning; the model is loaded with tokens it can weight. This double-faced record is the infrastructure's response to the Cognitive Impedance Mismatch — to the friction of two processing scales that do not mesh — pushed down to the level of storage format: a record stored in a form only one of the two can use has deposited for one participant and let the insight evaporate for the other, which is the mismatch left unanswered. Topologically, the durable node is double-faced — one face human-legible, one face machine-loadable — and the architecture's job is to keep both faces written from a single act of deposit. In a running stack the two faces might live in different products; in the logical topology they are one obligation.
Three — convergence with no central authority. The architecture must let shared knowledge settle across participants who edit it independently — across sessions, across the gap between carbon and silicon — without a node that adjudicates what is true. This is the property the CRDT Bridge borrows and holds against this exact setting: agreement as a consequence of how the record is shaped, not of who is allowed to approve a change. The topological consequence is a refusal, and it is unusual: the diagram has no master node. No box validates. There is deliberately no place in the architecture where a single authority — human or model — decides what the group knows, because the moment such a place exists, the network stops being a graph of peers and becomes a hierarchy with a tool at the top of it. The guarantee here is the absence of a guarantor.
Four — many models behind one boundary. The synthetic peers are not one model, and the architecture should not assume they are. A learning network that runs its adversarial friction through a single fixed model inherits that model's particular blind spots as if they were the shape of the world. So the topology puts a boundary between the graph and the models it draws on, behind which the specific model can change — can be plural, can be swapped, can be chosen per task — without the rest of the architecture noticing. A model gateway is the physical-layer name for that boundary. The logical requirement is that no part of the network upstream of the boundary is wired to one model's identity. The peers are functional, in the sense the What is Pyragogy page sets out; the architecture keeps them swappable so that no single provider's weights become load-bearing for what the group can think.
Read together, the four describe a shape: a durable, double-faced record at the center; a graph of human and synthetic peers writing into it; no authority above the graph; and a permeable boundary to the models, behind which the particular intelligence is replaceable. That shape is the Synthesis Architecture. Everything else is wiring.
One physical-layer choice does press up into the logical topology, and it deserves naming because it looks like a deployment detail and is not.
The architecture is self-hosted — run on infrastructure under the network's own administrative control rather than on a third party's managed service. The established framing of self-hosting is about control, privacy, and independence: running a service "instead of using a service outside of the administrator's own control." For most projects that is a preference, weighed against the convenience of a managed platform. For this one it follows from guarantee three. An architecture whose entire point is convergence with no central authority cannot route its durable record through a node that a third party can read, freeze, price out, or switch off at will — because that node would then be the central authority, sitting outside the graph and above it, regardless of how peer-to-peer the diagram looks on the inside. The refusal of a master node has to extend to the infrastructure, or it is not a refusal at all. Self-hosting is the logical topology keeping its own promise down to the metal.
This is also where the page is honest that the promise is partial. Self-hosting moves the authority, it does not abolish it: the rented server still sits in someone's data center, the model gateway still terminates at providers the network does not own, and the boundary to the models (guarantee four) is precisely a place where the graph reaches outside itself for an intelligence it cannot host. The architecture controls its record. It does not control the models, and pretending otherwise would reintroduce the central authority by the back door — as a dependency rather than a server.
It does not tell you how to install any of it. The operational specifics — how the workflow engine is wired, how the deposit moment fires, how a model is selected per task — live inside the patterns that use them, not here. This page exists so those patterns have one shared map to point back to when they say "the store that persists" or "the record both readers can use," and do not each have to redraw the whole topology. The pattern owns the operation; the synthesis owns the shape.
Three tensions stay open, and an architecture page that hid them would be drawing the diagram it wished it had rather than the one it has.
First, the no-authority topology is a target, not a measured property. Guarantee three asks the infrastructure to host convergence without a validating node — but as the CRDT Bridge already flags, the mathematics that makes convergence-without-authority safe applies to data structures whose merge is correct by construction, not to a group's shared knowledge. Shapiro et al. establish the eventual-consistency result for CRDTs; the claim that this safety property does not transfer to a learning network's shared knowledge is an interpretive extension, not an argument made in that paper. The architecture can refuse a master node. It cannot, on its own, guarantee that the convergence which then happens is earned rather than a quiet capitulation recorded as agreement. Removing the authority is a structural choice; making the result trustworthy is not something the topology delivers by itself.
Second, a durable record is also a durable liability. Guarantee one keeps everything that was deposited — including the session's mistakes. The same store that lets an insight survive lets an anchored error survive beside it, waiting to be loaded back with the authority of a written record, which is the failure the handbook treats under Anti-Pattern: Context Poisoning. The architecture provides persistence; it does not provide an immune system, and where the curation that would catch the bad entry should sit in the topology — and whether it can sit anywhere without becoming the authority guarantee three forbids — we do not resolve here.
Third, we have no instrumented network to measure this against. The four guarantees are stated as what the architecture must provide, in the prescriptive — because we have not yet run a documented Pyragogy network long enough to observe which guarantee fails first under load, what the self-hosting boundary actually costs when the rented server or the model gateway goes down, or whether the no-authority refusal survives contact with a group that wanted someone in charge. No instrumented, logged deployment of a full Pyragogy synthesis architecture has been located. The component literatures (network topology, self-hosting, CRDTs, context engineering) are established and cited; their composition into this specific learning-infrastructure topology is project practice, not a documented finding.
The Synthesis Architecture, then, is not a system you can boot. It is the set of promises a bootable system would have to keep — a durable record two unlike readers can use, no node above the graph, and the models held at arm's length — written down so the rest of the handbook can lean on the shape without inheriting the tools, and honest that the shape has so far only been drawn, not yet run hard enough to fail.
↑ Back to Part V — Infrastructure · Handbook · Home