dsrailab
2 nodes · online

Compute that stays on the desk.

dsrailab is a two-node, local-first research environment. A cloud reasoning brain orchestrates local executor models and MCP tooling over a private tunnel — independent nodes, least configuration, nothing that can't be rebuilt from a repository.

nodes02
uptimealways-on
authOAuth only
clockIST
system status--:--:-- IST
cloud intelligence
Cloud intelligence layer
reasoning + planning · OAuth
Cloud specialist layer
complex analysis + code synthesis
intercept.py
PreToolUse router + tier-enforcer
private local execution
node 01
always-on server
local AI
node 02
workstation
local AI
Objective
Build secure, practical AI systems that connect executive intent, enterprise knowledge, and operational workflows while keeping sensitive execution local.
Vision
Make trusted, governed AI and AGI the driving force behind smarter decisions, autonomous operations, and meaningful progress for business and society.
Mission
Help businesses and society achieve responsible, sustainable progress by combining secure local-first AI with governed agentic automation and responsibly autonomous workflows - improving operational excellence, productivity, decision-making, and scalable growth while keeping sensitive data under organisational control, people in oversight, and security, privacy, accountability, and governance built into every workflow.
Strategic roadmap
Trust → Intelligence → Autonomy → Impact: Establish sovereign AI, data architecture, and MCP foundations; turn enterprise context into decision advantage; automate high-value operations through governed agents; then scale certified solutions with measurable business value, continuous assurance, and human accountability.
founder & technical leadership

Strategy at board level. Engineering at system level.

Dinesh Srivastava is an enterprise technology leader and hands-on AI engineer with more than two decades of experience spanning IT strategy, digital transformation, data platforms, cybersecurity, and applied artificial intelligence.

He has led technology at national retail scale across a network of 600+ stores serving Tier 2, 3, and 4 markets in India. At dsrailab, he turns that operating perspective into working systems: production LLM architecture, multi-agent orchestration, MCP integrations, governed data platforms, and secure local-first infrastructure.

His approach is deliberately practical and provider-neutral: define the business outcome, design the controls, build the platform, and verify the behaviour. The work connects long-horizon leadership with the discipline to write, test, and ship the code.

enterprise transformation at scale

From distribution centres to data, cloud, and cyber operations.

Dinesh has led the implementation, operational management, modernization, upgrading, and automation of enterprise technology across retail stores, the Head Office, distribution centres, warehouses, and hybrid-cloud infrastructure. His remit connects supply-chain execution with data, AI, cybersecurity, identity, and reliable day-to-day operations.

01

Regional Distribution Network

Technology leadership for the major regional distribution hubs at Palwal, Haryana, and Bengaluru, including the approximately 13.60 lakh sq. ft. Palwal facility and roughly 6 lakh sq. ft. of V-Mart-owned or managed warehouse space across the core logistics network.

02

WMS & Transportation Platforms

Implementation, management, upgrades, and automation across Infor WMS and Fretron TMS, strengthening warehouse execution, transport planning, visibility, and operational control.

03

Warehouse Orchestration & WCS

Leading the ongoing Stackbox WMS orchestration implementation and integration with warehouse control and automation solutions from Falcon Autotech and Armstrong Dematic.

04

Enterprise Operations

Managing the technology environment serving the Head Office, stores, and more than 700 leaders, managers, and executives, with a focus on service continuity, adoption, governance, and scalable operations.

05

Hybrid Data, Analytics & AI

Oversight of an on-premises data centre and AWS cloud estate, including Data Studio as a hybrid-cloud data lake and Insight Studio for AI-driven collaborative analytics and decision support.

06

Cybersecurity, Network & Identity

End-to-end security and connectivity across the Head Office, stores, and Hope Box operations, including Fortinet, Active Directory and domain controllers, SSO, multi-factor authentication, and zero-trust networking.

technical expertise

Architecture, AI, and engineering depth.

01

Enterprise AI & Agentic Systems

Production LLM and multi-agent architecture, reasoning and planning, tool orchestration, RAG, evaluation, and reliable human-supervised workflows.

02

MCP & Agent-Skill Engineering

MCP server and client design, reusable agent skills, and integration patterns that connect knowledge, code, data, and enterprise workflows.

03

Data & Platform Architecture

End-to-end platforms across Postgres, pgvector, and ClickHouse, from ingestion and vectorization through governed analytics.

04

Cybersecurity & Governance

Postgraduate-certified security practice, threat modelling, privacy-aware architecture, PII isolation, and controls embedded across delivery.

05

IT Strategy & Transformation

Multi-year technology roadmaps, team and operating-model design, and retail and supply-chain digitization across hybrid estates.

06

Hands-on Engineering

Python, FastAPI, Docker, private local AI runtimes, cloud intelligence services, agent toolchains, vector search, analytical systems, and reproducible infrastructure.

the thesis

One brain, many local hands.

The lab separates reasoning from execution. A cloud model holds the plan and makes the hard calls; small local models do the volume work — code, retrieval, embeddings, drafting — with nothing leaving the network unless a decision genuinely needs the brain.

Everything runs under one rule: the two nodes never depend on each other. Either can be wiped and rebuilt on its own, and the system still stands. What sits on top of that base is a set of specialised programs — coding, knowledge work, design, data, and context — that all share the same router, the same enforced boundary, and the same local-first default.

why it runs local

Local-first is a security posture, not a preference.

Running the models next to the data changes what's possible and what's exposed. Iteration stops costing money, latency drops to the network's own speed, and the hardest question in enterprise AI — where did the data go — has a boring answer: it stayed here.

Data sovereignty
Content stays on the network. Nothing is sampled, logged, or trained on somewhere else.
No metering
Bulk generation, embeddings, and iteration cost nothing per token, so agent loops can run long.
Low latency
Models sit beside the data instead of across a public API on the far side of the internet.
Offline resilience
The lab keeps working when the connection doesn't. Cloud reasoning is an enhancement, not a dependency.
Reproducible
Every service rebuilds from a repository. No hidden state, no undocumented setup, no drift.
Enforced boundary
One audited gate decides what may ever reach the cloud — and refuses everything else by default.
the two nodes

Two nodes, drawn on purpose.

node 01 — always-on server

The server

AI tier
private local AI  ·  embedding services
runtime
Containerised services, kept warm
role
Persistent services, retrieval, and embeddings that never sleep.
node 02 — workstation

The workstation

AI tier
private local AI  ·  execution harness
runtime
Containerised services, interactive
role
Interactive development and the routing brain.
the routing layer

The tier router.

A single hook decides where each task goes. Work passes through a PreToolUse interceptor that classifies it and dispatches to the right backend — reasoning to the cloud brain, everything else to a local executor. A stdio tier-enforcer guards the boundary so nothing silently escalates.

Classify
intercept.py reads the pending tool call and scores the work against the tier map.
Route
Reasoning and review stay within the cloud intelligence layer; complex generation can use a cloud specialist; volume execution stays with private local AI.
Enforce
A FastMCP stdio tier-enforcer holds the boundary across a six-layer harness.
Return
The brain only ever sees what actually needs a decision.
Hybrid AI Tier System · v10.1 six-layer harness production-grade · local-first
what the lab builds

Eight programs on one substrate.

Each program is a specialisation with its own crew of models and MCP tools, and each earns its keep the same way — local where it can, cloud where it must, private throughout. Two of them are foundations the rest stand on: a context layer that remembers, and an orchestration layer that decides.

program 01

Hybrid AI coding system

A production-grade, local-first coding system: a cloud intelligence layer handles high-complexity reasoning over a six-layer harness, private local AI handles volume generation and execution, and an elastic cloud specialist supports the hardest work. The cloud layer plans and reviews; the private local layer writes, runs, and iterates; the harness decides what is worth escalating.

individuals
Cloud-grade code, but most tokens run free and on-machine — no key sprawl, no meter anxiety on long runs.
businesses
Bounded reasoning spend with an auditable line for where code and data are allowed to travel.
program 02

dsr-CoworkAI

An agentic knowledge-work partner that runs briefs, research, drafting, and multi-step tasks against local models first, escalating to the brain only for judgment. MCP connects it to documents, calendars, and tools without handing them to a third party.

individuals
A private operator for the daily grind — notes, research, prep — that keeps your material on your own network.
businesses
Sensitive workflows in HR, legal, and finance run without shipping their contents to an external API.
program 03

DSR-codesign

An agentic design-and-build loop: turn intent into working interfaces and prototypes, iterate on layout and behaviour with a model in the loop, and hand off clean, reproducible artifacts. Local models generate the volume of variants; the brain arbitrates structure and taste.

individuals
Go from a sketch to a running prototype without a front-end team, exploring many directions cheaply.
businesses
Compress the design-to-prototype cycle and produce spec-backed handoffs engineering can build from directly.
program 04

Data Architect

A local-first data agent that models schemas, wires pipelines, and answers questions over a warehouse — natural language to SQL, semantic layers, and quality checks — with embeddings and retrieval held inside the perimeter.

individuals
Query and shape your own data without memorising a dialect or standing up heavy tooling.
businesses
Governed, explainable access to the warehouse for everyone, with PII kept inside the boundary because retrieval runs locally.
program 05

AGI layer

The orchestration layer that composes the crews — routing a goal across coding, knowledge, design, and data agents, holding shared state, and choosing which specialist and which tier each step needs. Not a claim of general intelligence: a general-purpose coordinator over specialised, verifiable parts.

individuals
One entry point that breaks a messy goal into the right sequence of agents and tools.
businesses
Cross-function work runs as one supervised process with a clear trail of what ran where, and why.
program 06

Obsidian hub — with local

A knowledge hub that turns a personal vault and its graph into live context — connected through MCP to the agents, versioned in Git, synced with the tools already in use — with search and embeddings served by local models.

individuals
Your notes become a queryable second brain every agent can read and write, privately.
businesses
Institutional knowledge stays owned and searchable; runbooks and decisions become context, not dead documents.
program 07

SynaptIQ — context intelligence

The shared context substrate beneath everything — a private memory and knowledge-graph layer of retrieval, embeddings, and relationships that gives every agent long-lived, relevant context instead of a cold start each session. Local by default, so context accrues without ever leaving the network.

individuals
Agents that remember your projects, people, and preferences across sessions — without handing that memory to a vendor.
businesses
The context graph is the moat: agents sharpen with use and the knowledge compounds inside the organisation, not inside someone else's model.
program 08

dsr-OMS — omnichannel operations

A browser-based, mobile-responsive order-management platform for Indian retail. It brings marketplace, ONDC, webstore, store/POS, warehouse, logistics and ERP workflows into one operational model, with deterministic routing and an advisory AI copilot.

operators
One workbench for order exceptions, allocation, fulfilment, returns, refunds, inventory and reconciliation.
retailers
A governed foundation for omnichannel scale, with explicit integration boundaries and human-controlled AI.
dsr-OMS · Indian omnichannel retail

One operational spine for every order channel.

dsr-OMS normalises orders from marketplaces, ONDC, the brand webstore, stores and warehouses into one canonical workflow. Operators see orders, shipments, routing, inventory, locations, integrations, AI insights and audit history in a single responsive workspace.

The transactional core is deliberately deterministic. It reserves sellable stock, minimises shipment splits, selects eligible fulfilment locations, enforces a four-hour allocation-acceptance SLA, and releases stock before rerouting when a location does not accept on time.

01
Ingest
Idempotent channel order intake
02
Reserve
Sellable stock and safety stock
03
Route
Zone, distance and priority scoring
04
Accept
Four-hour SLA or atomic reroute
05
Fulfil
Invoice, AWB, pick and pack
06
Dispatch
Manifest and stock commitment
07
Resolve
Return, QC, refund and reconcile

Unified order workspace

Central views for multi-channel orders, shipments, exceptions, inventory, locations, integrations and audit history.

Deterministic smart routing

Scores sellable stock, safety stock, service zone, proximity, location priority and warehouse bias while minimising splits.

Fulfilment lifecycle

Confirm, GST invoice, delivery partner and AWB, pick, pack, manifest and dispatch with guarded state transitions.

Returns and refunds

Return request, item-level QC, sellable or damaged disposition, restock handling and refund queueing.

Integration resilience

Signed idempotent webhooks plus a transactional Ginesys invoice/refund outbox with retry, replay and reconciliation.

Governed administration

Channel catalogues, master data, PIN codes, logistics, ERP, gateway policy, RBAC and platform controls without storing secrets in the UI.

AI inside the guardrails

An operations copilot that advises, never transacts.

AI cannot accept, cancel, reroute, reserve stock, issue refunds or update ERP state. Deterministic services remain authoritative.
  • Reads a masked operational snapshot and returns structured summaries, risks, recommendations and confidence.
  • Uses a private local AI runtime by default; approved cloud intelligence services are opt-in through server-side configuration.
  • Flags breached acceptance SLAs, stockout exposure, channel exceptions, and shipment delay or return-to-origin risk for human review.
  • Falls back safely to an explicitly labelled deterministic summary when a model is unavailable or returns invalid output.
  • Audits provider, model, input hash, latency, status and fallback use without recording the full prompt or customer PII.
research · test · build

MCP is the socket. Local is the sandbox.

Local models turn iteration into a free operation. Large agent loops, evaluation runs, and adversarial tests all execute on-machine, so behaviour is validated at volume without a meter running — the difference between reading about an agent's failure mode and reproducing it a thousand times before it reaches anything real.

MCP is the standard socket. Every tool, dataset, and vault plugs into the agents through one protocol, so new capability composes instead of being re-integrated each time. The same harness that runs experiments runs production, which means what you validate is what ships — new behaviour is prototyped on local models, gated through the enforcer, and promoted to the brain only where judgment is genuinely required.

security & resilience

Default closed. Independent by design.

The default is closed. Content leaves the perimeter only when a decision genuinely needs the brain, and that path is explicit — an agent cannot quietly route sensitive work to the cloud, because the tier-enforcer holds the boundary rather than trusting the model to respect it.

Credentials are the usual leak. The brain authenticates over OAuth with no API keys written to disk, removing a whole class of exposure; the nodes reach each other over a private WireGuard mesh behind a Cloudflare Tunnel and are never published directly to the internet.

Independence is the resilience story. The two nodes share nothing, so either can fail without taking the system with it, and recovery is a repository checkout rather than a backup restore. Because every service is reproducible, the worst case is measured in minutes.

Reached over a WireGuard mesh and a Cloudflare Tunnel, published at dsrailab.com.