ON-DEVICE AI ARCHITECTURE

The student’s iPhone
owns the intelligence layer.

PRISMS AI is a Campus OS for student work—not a cloud chat wrapper. The phone owns agent orchestration, memory, personal context, task continuity, permissions, and output rendering. Cloud services remain replaceable capabilities.

On-device agentsStateless relayIsolated control plane

THREE-PLANE DESIGN

Runtime, inference, and management
are deliberately separated.

This separation reduces the number of systems that can access student content and makes every responsibility explicit.

01STUDENT iPHONESystem of record

On-device agent runtime

Intake selects one responsible business agent. Skills, profile context, memory recall, private knowledge, the task ledger, confirmations, system actions, and rendering run locally.

AgentsMemoryTasksDevice tools
02STATELESS RELAYIn-memory forwarding

Independent model data plane

The relay authenticates use, injects provider credentials, forwards bytes, and returns the result. It has no database, admin interface, or content log.

No DBNo body logsNo student ID upstream
03CLOUD LLMReplaceable

Reasoning engine

The selected model reasons over the bounded request. It does not own the PRISMS AI agent roster, profile, memory store, personal knowledge, or task state.

QwenMiniMaxProvider choice
SEPARATE CONTROL PLANEManage the system, not student conversations

The school control plane manages authentication, agent and skill versions, runtime fingerprints, structured knowledge retrieval, knowledge gaps, and anonymous technical diagnostics. It does not receive full conversations, profile bodies, personal-knowledge bodies, agent reasoning, or model answers.

EXECUTION MODEL

One owner, shared capabilities,
traceable completion.

01

One responsible agent

Intake routes a new task to at most one business owner. A presentation-only artifact agent may join when the output form requires it.

02

Evidence before claims

The owner retrieves school, external, personal-knowledge, or detailed-memory evidence through stable locators before making source-dependent claims.

03

Receipts, not status theatre

Stages, models, skills, retrieval, corrections, actions, and artifacts are bound to one durable request receipt and runtime fingerprint.

HONEST BOUNDARY

Stateless is precise.
It is not end-to-end encryption.

The relay can process plaintext while forwarding, and the chosen model provider receives the content required for inference. “Stateless” means PRISMS AI does not persist that content in the relay or expose it to the management control plane. Content that must never leave the phone requires an on-device model.

LIVECROSS-APP CONTINUITY

Content enters; actions hand off.

Share Extension, App Intents, Shortcuts, files, photos, speech, Maps, Calendar, and Reminders connect through explicit student intent and iOS permission.