SIA is a local-first automation platform in development. This is a concept preview, not a verified installed system.
Hardware / edge architecture
The home needs infrastructure, not another fragile hub.
SIA's proposed deployment model includes native Station software,
local services, segmented networking, resilient protocol paths,
supervised safety I/O, and power-aware recovery. Optional compute
adds intelligence without becoming the root of authority.
CORE
Primary SIA Station and local services
Runs local Core, identity, policy, state, data, protocol services,
and low-latency orchestration. The production reference design
targets secure or measured boot, device-bound key material,
encrypted storage, a stable clock, and watchdog recovery.
GPU
Optional compute node
Handles heavy local vision, avatar, generative, and accelerator
workloads. Failure should reduce advanced features without
disabling ordinary home control or safety functions.
PoE
Managed Ethernet fabric
Carries cameras, access points, wired endpoints, and edge services
with VLAN and ACL segmentation so cameras and untrusted IoT do not
become peers of Core or management networks.
TBR
Thread Border Routers
Provide resilient Matter-over-Thread reachability. The reference
model favors multiple compatible border-router paths rather than
treating one border router as a permanent device identity.
GW
Protocol gateways
Zigbee, Z-Wave, KNX, vendor buses, serial, RF, and other bridges
remain permission-bounded adapters. Gateway compromise should not
automatically imply Core compromise.
UPS
Power supervision
UPS state and recovery are observable so an outage or restart does
not silently extend stale authorization, stale state, or unsafe
assumptions.
Network trust zones
Segmentation reduces blast radius. Identity still decides.
SIA does not equate network location with trust. Devices,
services, users, safety systems, management functions, and cloud
coordination live in distinct trust zones with explicit
contracts between them.
Z0 — Root / Management
Secure boot · hardware root of trust · break-glass recovery
Z1 — Core Services
Core · local data · policy · evidence · workload identity
Z2 — Device Networks
IoT · cameras · protocol gateways · industrial buses
Z3 — Safety / Security
Alarm I/O · safety controller · cellular guardian · approved outputs
Z4 / Z5 / Z6 — Users, service, internet
Authenticated surfaces · temporary access · outbound cloud coordination
Protocol fabric
One capability model above many radios, buses, and vendors.
Protocol details are adapter concerns. SIA Home experiences reason
about stable capabilities such as power, dimming, temperature,
shades, locks, media, cameras, alarms, and energy readings.
Matter 1.6 / Thread / Wi-Fi
Zigbee
Z-Wave
BLE
MQTT / ESPHome
RS-485 / Modbus RTU/TCP
ONVIF / RTSP
KNX / BACnet
Vendor bridges
Sub-GHz / supervised RF
Reference responsibilities
What each hardware layer is expected to do.
| Layer |
Primary responsibility |
Architectural guardrail |
| Edge controller |
Core, state, policy, local services, device orchestration |
Hardware-backed identity, encrypted storage, watchdog, stable time |
| Compute / GPU |
Vision and heavy intelligent workloads |
May fail without disabling ordinary control or safety |
| PoE / Ethernet fabric |
Cameras, APs, wired endpoints, edge service transport |
VLAN and ACL segmentation around lower-trust device classes |
| Protocol gateways |
Translate Zigbee, Z-Wave, KNX, serial, RF, and vendor buses |
Declared capabilities and minimum permissions |
| Safety controller / I/O |
Supervised alarm and designated life-safety signals |
Independent from optional assistance and device execution |
| Cellular guardian |
Out-of-band alarm and health path where commissioned |
Independent power and bounded safety-plane protocol |
| UPS / power supervision |
Orderly shutdown and bounded degraded operation |
Recovery cannot silently revive stale authority |
Secure / measured boot
Installation identity
Watchdog
Encrypted state
Production posture
Optional accelerators are resources, not authority.
SIA's hardware design keeps the ordinary control plane and safety
responsibilities independent of discretionary model or GPU
workloads. That lets advanced perception and agents improve the
experience without making them prerequisites for basic home
operation.
Stable cryptographic installation identity
Device-bound key material
Fail-bounded watchdog recovery
Observable power and degraded state
Build for the property
Every SIA deployment starts with the real home.
Room count, building materials, network topology, cameras, existing
protocols, life-safety boundaries, media, climate, and resilience
requirements should shape the hardware plan before devices are
commissioned.