CloudAI Fusion is a cloud-native control plane for managing multi-cloud AI infrastructure, emphasizing verifiable auditability and cryptographic evidence. It unifies GPU scheduling, security red-teaming, FinOps, and GitOps under a single evidence ledger that records tamper-evident receipts for all control-plane actions. The architecture is polyglot, using Go for the high-performance control plane (API Server, Scheduler, Agent) and Python for AI/ML agents (anomaly detection, LLM orchestration). It integrates deeply with Kubernetes, supporting multi-tenancy, edge-cloud federation, and WebAssembly-based serverless workloads. The system distinguishes itself through a 'Verifiable Moat' architecture where subsystems are unified under a cryptographic ledger using Ed25519 signatures and Merkle transparency logs. It enforces 'honesty' by explicitly reporting backend modes (real vs. simulated) via a capability registry, preventing production deployments from relying on simulated backends. Key functionality includes verifiable model provenance, authorized red teaming with reproducible exploit witnesses, and cross-cluster failover attestation. The platform supports major cloud providers (AWS, Azure, GCP, Aliyun, Huawei, Tencent) through a standardized abstraction layer. While primarily an application, it contains significant data engineering and ML components, particularly in the `ai/` directory for RL-based scheduling and anomaly detection. These are integrated as features of the platform rather than standalone research artifacts. The codebase demonstrates high craftsmanship in distributed systems patterns, including Raft consensus, event-driven messaging, and plugin-based extensibility. However, the complexity of the cryptographic evidence layer and the mixed language stack introduce maintenance overhead.
ClawManager is a full-stack, Kubernetes-native control plane for managing AI agent runtimes (OpenClaw, Hermes, OpenCode, DeepSeek Harness, Workbuddy). It provides instance lifecycle management, secure AI gateway proxying with governance and cost tracking, skill management (import, versioning, hub), team collaboration with leader-mediated orchestration, and a comprehensive security protection platform (SecPlane) covering runtime behavior, egress policy, intrusion detection, and compliance reporting. The backend is built in Go with Gin, uses MySQL for persistence, Redis for real-time events, and the Kubernetes client-go library for orchestration. The frontend is a React 19 SPA with TypeScript, Vite, Tailwind CSS, and i18n support for five languages. The repository also includes Playwright-based E2E tests, Docker Compose local development stacks, and a Hermes desktop web component with its own build pipeline. While the codebase demonstrates solid architecture (repository pattern, service layer, middleware), some areas show drift (many SQL migrations, hardcoded dev secrets, incomplete feature flags) and the sheer number of runtime types and configurations introduces complexity.