"The NAS owns media bytes. Recall owns memory about the video. Ashen Reel owns playing the video. cwkPippa owns judgment."
Ownership Is the Real Architecture
When a system spans several apps, the diagram that matters isn't the call graph — it's the ownership map. Who is allowed to be the source of truth for each thing? Ashen Reel lives in a family of four systems, and almost every design decision in this whole quest is a direct consequence of keeping those four from stepping on each other's toes.
Four owners, one sentence apiece:
- The NAS owns the media bytes — the irreplaceable originals.
- Recall owns the memory about each video: its identity, its canonical path, its transcript, its releases and annotations.
- Ashen Reel owns the act of playing, plus disposable local convenience state (resume, preferences, recents).
- cwkPippa owns judgment: identity, conversation, memory, tools, model routing.
What Each May and May Not Do
The sentences imply a strict set of permissions. Ashen Reel may read the NAS bytes but never write, rename, or delete them. It may resolve and project Recall's transcript but never keep a competing copy. It may create and reset its own local state freely — because that state is convenience, not truth. And it may bind a client surface to cwkPippa but never hold a brain or a model key of its own.
The whole map fits on a card, and it's worth keeping one:
Why the Fourth Owner Matters
It would be easy to list three owners and forget cwkPippa — after all, a video player doesn't obviously need a brain. But Ashen Reel has a Pippa Sidekick, and the temptation to give it 'just a little' local intelligence is real. Naming cwkPippa as the owner of judgment up front is what stops that drift before it starts: the player projects and asks, but it never decides. Track 7 is entirely about honoring that fourth sentence. Name all your owners, even the one you're tempted to absorb.