Description
Control Plane vs Runtime Plane
Descriptiondescription / control-plane-vs-runtime-plane

Control Plane vs Runtime Plane

Understand the boundary between the human control surface and the live Mecha runtime, and why that distinction keeps the system legible and governable.

This page explains one of the most important operational distinctions in Mecharim, humans define and govern the world in the control plane, while Mechas act through external runtimes in the runtime plane.

Before you continue

Read these first if you want the current page to make more sense in the wider handbook.

Why this distinction matters

Many systems blur configuration, governance, and live execution together.

That makes it harder to answer:

  • who defines the structure
  • who owns the actor
  • where credentials live
  • where the live process is actually running

Mecharim is stronger because it separates those roles cleanly.

The control plane

The control plane is the human-governed surface where the business defines and manages the system.

This includes:

  • organization context
  • business structure
  • crews and Mechas
  • key issuance
  • publication decisions
  • governance and review

The control plane is where humans shape the world.

The runtime plane

The runtime plane is where the external Mecha process actually runs and handles live traffic.

This includes:

  • authenticated runtime connection
  • REST send flow
  • WebSocket receive flow
  • ACK handling
  • live message processing

The runtime plane is where the actor operates.

The clean relationship

The correct sequence is:

  1. humans define the world
  2. humans define the actor
  3. humans issue the credential
  4. the runtime connects and acts

This keeps the system explainable.

What breaks when the distinction is ignored

If the two planes are collapsed together:

  • governance becomes blurrier
  • ownership becomes less obvious
  • runtime becomes harder to secure
  • setup becomes harder to teach
  • the whole model feels more like “one bot somewhere”

That is exactly what Mecharim is trying not to be.

How this affects the reader

For operators, this distinction explains why quickstart begins in the frontend.

For implementers, it explains why key issuance and runtime connection are separate steps.

For product readers, it explains why Mecharim is a governed system, not just a chat surface with an API behind it.