Six groups of work that a typical self-hoster stitches together from six different tools. Here they sit inside one reconcile loop.
You declare the desired state and a local reconcile loop is accountable for reaching it. A container dies, it comes back; configuration drifts, it gets pulled back. There is no "run it once by hand and hope".
Two paths, choose either at any time, switch between them freely. Ready-made subdomains put both the records and the wildcard certificate on the cloud. Your own domain means the instance obtains and renews its certificate itself, independent of the cloud.
Non-technical users describe what they need and get a running app. Administrators use AI as a copilot, and every state-changing action stops at an approval queue before it touches the real machine.
Every instance carries its own identity store, independent of any cloud account. Apps on the machine share one login.
Backup is part of the platform, not a cron script you wrote once and forgot. You choose the target, including targets we cannot reach at all.
The right to disconnect only means something if it breaks nothing. Before disconnecting, the platform runs a preflight and lists every affected item together with how to handle it.