Skip to content
Now in Early Access

The AI-Native Infrastructure Change

AI-drafted proposals. Human signatures. Cryptographic memory.

---
ubx: intent/v1
stack: payments
---

# Payments infrastructure

## Goal
Postgres ~half of staging, settlement queue,
S3 bucket for payment receipts, and a Helm
release wiring the API to the DB.

## Requirements
- DB reachable only from payments — never public
- Data stays in eu-west-1 · queue retention ≥ 4 days
- S3 bucket private, versioned, lifecycle 90d
- Helm release injects db_host at deploy time via OCI chart
- Cost ceiling: $350/month

## References
- staging db: @staging.aws_db_instance.main
- network:    @network.vpc_id
- helm chart: oci://ghcr.io/ubiquex/charts/payments-api:1.2.0
ubx propose 
$ ubx propose --from-doc intents/payments.md

  ⠿ resolving  staging.aws_db_instance.main (live)
             @network.vpc_id @7fc2 · 4 policies

  Proposal 9f3a81  (draft)       stack: payments
  ──────────────────────────────────────────────
  + aws_db_instance  main          db.r6g.large · 100GB · pg15.4
  + aws_sqs_queue    settlements   retention 4d
  + aws_s3_bucket    receipts      private · versioned · lifecycle 90d
  + helm_release     payments-api  oci://ghcr.io/ubiquex/charts/payments-api:1.2.0
  ──────────────────────────────────────────────
  blast radius  +4 ~0 -0       cost Δ  +$244/mo
  invariants    no_public_db ✓  eu-data ✓  cost_ceiling ✓
  pinned        @network.vpc_id @7fc2 · staging read 11:42:03Z

  accept:  ubx accept 9f3a81     team:  git push → PR

█

Why ubx

Trust you can verify

The ledger is the source of truth. Every claim is provable.

Hash-chained Every proposal cryptographically linked to the last
Human-signed Nothing applies without an explicit human signature
AI-attributed Every drift traced to an actor, session, and timestamp
Append-only The ledger never rewrites history
Provider-native Talks directly to Terraform providers. No engine.
Apache 2.0 Open source, no BSL, no license surprises.
How it works

One ledger. Every change.

From intent to signed proposal to applied reality. Every step is recorded, attributed, and verifiable.

Proposal ledger

Every infra change is a typed, hashed, signed proposal. The ledger is the only source of truth. No state files, no drift surprises.

AI-drafted proposals

Describe intent in any medium: markdown, diagram, SDK, or chat. ubx resolves it into a typed proposal with cost delta and blast radius.

Drift attribution

When reality diverges from the ledger, ubx surfaces who changed what, traced to the CloudTrail actor, session, and timestamp.

Human acceptance

Every proposal is accepted by a human signature bound to an exact hash. PR merge, local sign, or cryptographic key. Your choice.

Provider-native execution

ubx speaks tfplugin directly to Terraform provider binaries. No Terraform engine, no state files, no intermediary.

Adopt or revert

Drift becomes a choice: adopt it into the ledger with a signed record, or revert it with a signed restore. Nothing happens silently.

Who it's for

Built for teams that own their infra

Whether you're fixing drift at 2am or auditing a compliance review, ubx has a signed record of every decision.

Drift under control

Every divergence from the ledger is surfaced, attributed, and resolved with a signed record. Not a Slack message.

Audit-ready by default

Every proposal carries who authored it, who signed it, and what live state was read at resolution time.

Policy without ceremony

Invariants run at proposal time. Before a human ever signs. No separate policy pipeline, no post-apply surprises.

Open Source

Star ubx on GitHub

ubx is open source under the Apache 2.0 license. Star the repo to follow development and help others discover it.

Star on GitHub Read the docs