System Overview

NOME maintains state across sessions, models, and devices in tenant-isolated Postgres records. Bounded retrieval selects only the durable preferences and project facts relevant to the current turn.

Memory retrieval is user-scoped and relevance-ranked — it finds what matters without copying an entire history into every request.

NOME classifies intent, assigns roles, and determines effort budgets for every request. Routing decisions consider workload type, complexity, latency requirements, and cost constraints.

The routing layer is deterministic-first with explicit route policy. When a selected model, seat, key, or host cannot run, NOME fails closed with a visible reason instead of silently switching providers.

Every objective opens a Run — the canonical unit of governed work. A run binds to a work item, thread, session, workspace, and project. Receipts, artifacts, and approvals are typed, cross-device shared truth.

The run contract is surface-neutral: Agents, CoWork, Code, Productivity, CLI, and any future surface are profiles over this contract, not parallel definitions. Models are replaceable; the contract is not.

NOME uses a three-tier state split for cross-device continuity:

Shared state — durable truth synced across all devices (threads, work items, receipts).

Soft state — last-writer-wins preferences like draft buffers and tab registries.

Per-device state — local-only data like viewport scroll position and transient UI state.

Object-based continuity is keyed to the active work item, with fail-closed restore and schema validation.

NOME dynamically routes each request to the right model based on workload characteristics, cost constraints, and latency requirements. Multiple aggregation strategies are available when high-stakes outputs benefit from comparison.

Effort budgets on each run prevent over-investment in simple queries and under-investment in complex ones. Cost tracking is a first-class run metric.

Model turns use an explicitly selected provider route and fail closed when that route is unavailable. A paired Mac or private VM may execute a provider seat that was signed in on that host.

Blackout can retain previously downloaded field data for network outages, but NOME does not ship an offline language model.