A working Rust backend, not yet a qualified production release. Initial scope is single-node SQLite; Aira and deadline capabilities are not implemented.

Contact by email
← Home

Binean Echelon

One model for orchestrating humans, machines and AI

Echelon hosts durable orchestration across services and human work, with AI participation planned. A shared model describes the work and its result; identity, authorization and execution protocols remain distinct. This page separates implemented capabilities from design goals.

The problem

Keep the process visible across handoffs

A case may cross service calls, human review and long waits. When each tool keeps only its own fragment, it becomes difficult to see what is pending and who can act.

An orchestration backend makes that journey explicit. Echelon targets processes that need durable state and accountable decisions—not every short API call needs an engine.

Architecture

Separate semantics, authority and hosting

Each layer has a defined responsibility; none should silently take over another’s decisions.

SPINE
The semantic core within Echelon: defines what process execution means.
Basal
The workflow and navigation authority. An executor or UI does not decide independently where a Process goes next.
Echelon
The Rust backend that hosts execution and persists runtime state, currently using SQLite.
Vista
Presents work and captures human intent through backend contracts; it is not a second workflow authority.
Aira
A planned AI participant, still in design and without a Rust implementation. Its integration protocol is not settled.
Scheduler & Timeout
Not implemented; contracts remain open. No deadline, cancellation or compensation behavior should be inferred.

The model

A shared contract does not mean identical execution

Flow
A versioned process definition. Publication creates an explicit version to review and use.
Process
One execution of a Flow, with state that can be inspected.
Task
A unit of work with a defined input and expected result.
Skill
The capability required by the work, described through its contract.
Agent
A participant that performs work. Human identity and permissions differ from worker integration; planned AI participation needs its own controls.

Task and Outcome concepts allow a common description of work. They do not make a service credential interchangeable with a person, nor establish a universal wire protocol. A valid JSON result can still be factually or operationally wrong.

Responsibility

Assign work by suitability, not a cost ladder

People, services and AI have different strengths. Human judgment and accountability are not inefficiencies to remove.

Services
Useful for explicit, testable rules. Integration failures and external effects still need operational controls.
People
Interpret ambiguous evidence, resolve exceptions and accept responsibility for consequential decisions.
AI — planned
Aira is intended as a local service the person starts, acting with their own identity: either to own suitable AI Tasks such as extraction, classification and summarization, or to draft for the person to review and submit.

Operational history is evidence of execution, not automatically clean training data or permission to train. Any reuse needs consent or another appropriate basis, access controls, curation and quality evaluation.

Changing who performs work requires validation of the result and failure handling. Flow versioning makes a change identifiable; it does not make autonomous optimization safe or authorize it. Self-learning and automatic process optimization are not shipping capabilities.

Design choices

What the boundaries buy—and what they do not

Semantics before convenience

SPINE defines behavior; Echelon implements and hosts it. This helps keep UI behavior and execution responsibilities aligned.

Tradeoff: specifications, implementation and integration evidence must stay aligned. A written contract is not release qualification.

Common work model, distinct controls

Human-task surfaces and external worker integration are implemented. Vista supplies human-facing forms and administration.

Tradeoff: identity, authorization and integration testing remain necessary for each execution path.

SQLite today, replaceable boundaries by design

The current Rust runtime packages durable execution with SQLite. Storage abstraction is an architectural boundary, not a menu of supported database backends.

Tradeoff: initial scope is single-node. Arbitrary Postgres or Kafka deployment, HA and multi-tenancy are not current claims.

Reviewable Flow versions

Versioned Flow publication makes the selected definition explicit. A new version is a change to review, not an invisible update.

Tradeoff: versioning alone does not validate business outcomes, migrate live state safely or undo external effects.

Applications

Prove one complete journey

Candidate uses include case approvals, operations and AI-assisted review. These are use cases, not customer deployments. BENOVA is intended to apply EVA to Ingenium alongside Nexus and Orbit.

Once stable, EVA is intended to orchestrate work on VISTA itself: request, human scope approval, AI proposal or patch, machine validation, independent review and human acceptance. Review must identify the exact artifact and version.

This self-hosting direction is not live functionality or a promise of automatic self-modification, merging or deployment. Software work is a proving ground; Echelon remains a general-purpose orchestration backend.

Alternatives

Choose for the workload, not a score

These products address overlapping but different needs. The links describe their own capabilities; they are not endorsements of Echelon. Echelon is not yet equivalent in production maturity.

Qualitative comparison, not a benchmark or ranking.
Product Focus and selection considerations Official documentation
Binean Echelon Rust backend with SQLite, versioned Flow publication, inspection, human-task surfaces and external workers. Single-node initial scope; qualification remains incomplete. Evaluate as a bounded pilot, not a mature substitute.
Temporal Durable execution using Workflows and Activities. Evaluate its execution model, worker operations and versioning approach against your code and deployment lifecycle.
Camunda 8 BPMN-oriented orchestration with Tasklist for human work. Consider it when process modeling and human-task operations are central, and assess integration and deployment requirements.
AWS Step Functions Managed state-machine orchestration in AWS, including immutable state-machine versions. Assess AWS integration, execution semantics and pricing for the specific workload rather than assuming negligible cost.
LangGraph Graph-based orchestration for stateful agents, with durable execution and human-in-the-loop capabilities. Assess it for AI-centric workflows; do not assume human approval or persistence is absent.

Selection depends on the process model, human work, integration ecosystem, operating constraints and support needs. Test representative failures and changes, not just a happy-path demonstration.

For a near-term production requirement, start by evaluating qualified, established options. Echelon offers a model to investigate, not proven uniqueness or a production-maturity shortcut.

Conditions of use

When it fits, and when it does not

Echelon is worth considering when

  • You can bound a pilot and accept that release qualification is incomplete.
  • The process crosses services and human decisions and needs inspectable state.
  • The initial single-node SQLite profile fits the evaluation.
  • Explicit Flow publication and version review matter to the team.
  • You can invest in integration testing and operational acceptance.

Echelon does not fit when

  • You need a qualified production release immediately.
  • HA, multi-tenancy or alternative storage backends are prerequisites.
  • Automatic worker recovery or exactly-once external effects are required guarantees.
  • Built-in scheduling or settled deadline behavior is essential.
  • You need a shipping AI layer, mature ecosystem or an established support commitment.

Status

Current level of completeness

Implemented: a Rust backend with durable SQLite runtime, HTTP interfaces, versioned Flow publication, process and task inspection, external worker integration and human-task surfaces. Release qualification is not complete.

Vista has working Flow inspection and editing, Human Task forms and acquisition, user administration and process activity. Its Process workspace is still being completed, with integrated qualification ongoing.

Aira remains in design with no Rust implementation or settled public protocol. Scheduler and Timeout are not implemented and their contracts remain open. Private deployment is a target profile, not a compliance certification.

Discuss a qualification use case

Bring a bounded process, its failure cases and the evidence your team needs before operational use. We can discuss fit without treating a prototype as a production commitment.