1. Overview & Diskless Operating Philosophy #

The BEX routing infrastructure enforces a strict RAM-only execution policy across all global gateway nodes. Under this operational spec, physical server nodes are deployed completely diskless, removing all hard disk drives (HDDs), solid-state drives (SSDs), and persistent NVMe storage media from edge hardware. By operating entirely within volatile Random Access Memory (RAM), BEX guarantees legally and technically that data persistence is impossible, as all server state vanishes permanently upon power loss, reboot, or connection termination.

2. Technical Architecture of Diskless Edge Nodes #

To eliminate persistent storage vectors and enforce zero-data-retention at the hardware layer:

• PXE Network Bootstrapping: Gateway nodes boot directly over encrypted PXE (Preboot Execution Environment) streams, loading a read-only, cryptographically signed minimal Linux operating system image directly into system RAM.
• Kernel-Enforced Swap Disabling: Kernel swap partitions, page files, and crash dump storage mechanisms are permanently disabled at compile time. Memory pages can never be written to non-volatile storage.
• Blacklisted Storage Controllers: Kernel drivers for SATA, SAS, and NVMe controllers are removed from the OS image, rendering connected persistent hardware inaccessible to system processes.

3. Ephemeral Session Lifecycle & Automated Memory Scrubbing #

Data handling during active network sessions adheres to strict ephemeral boundaries:

• In-Memory Ephemeral Keys: Cryptographic session keys and handshake material exist exclusively within volatile kernel memory and are bound strictly to active socket lifetimes.
• Microsecond Memory Scrubbing: Upon socket teardown, the system executes explicit memory zeroing routines (explicit_bzero / secure memory wipes) to prevent residual state leakage in RAM buffer pools.
• Cold-Boot & Intrusion Defenses: Edge servers implement physical intrusion detection. Any physical tamper event or power interruption triggers an instantaneous hardware reset, wiping all RAM contents within milliseconds via hardware decay.

4. Non-Retention Legal Guarantees #

From a legal and compliance standpoint, the RAM-only processing specification establishes that:

• Absence of Stored Evidence: BEX cannot be compelled to disclose historical traffic logs or user metadata because such data literally does not exist in any physical storage medium.
• Real-Time Data Ephemerality: Transient packets passing through volatile memory are processed strictly in transit without creating temporary cache files or disk buffers.

5. Key Strategic Benefits #

• Absolute Physical Security: Server seizure or physical theft yields zero data, as powering down the unit permanently destroys all operational memory.
• Elimination of Data Leakage: Microsecond RAM scrubbing prevents cross-session side-channel memory leaks.
• Verifiable Compliance: Simplifies auditing for B2B partners by providing cryptographic proof of diskless operation.