TESS Public Architecture Module 09

Public “How TESS Works” Architecture Page

A public-safe explanation of how TESS connects education pages, asteroid/comet data, observatory operations, infrastructure status, and automation into one planetary-defense mission system.

This page intentionally describes the system at a high level. Credentials, internal-only endpoints, private keys, and operational secrets are not published.

Public WebsiteMission pages, downloads, education modules, dashboards, and public-friendly status readouts.
TESS Mission CoreCoordinates content, automation, live data views, documentation, and operator workflows.
Observatory LayerBackyard observatory concepts, sensor hub planning, live-stream surfaces, and future AWN node inputs.
NASA/JPL DataCNEOS close-approach data is fetched through same-origin public-safe endpoints.
Status ExportersSanitized infrastructure version/uptime values are exposed without frontend secrets.
Failover PathHost-relative pages and synced origins help keep public pages portable across primary/failover.
Layer 01

Public Mission Interface

The website is the public command surface: homepage, Mission Control, Earth/Moon/Mars pages, observatory pages, downloads, learning modules, and live NEO tools. Links are host-relative where possible so alternate domains and failover origins stay coherent.

Layer 02

Data + Telemetry

  • Live NEO dashboards use same-origin proxy endpoints.
  • Infrastructure status uses sanitized JSON.
  • Missing data is shown as standby or --, never fabricated.
Layer 03

Automation + Documentation

TESS operations create rollback artifacts, verify origin and public responses, and document full source in Obsidian so the mission system remains recoverable and auditable.

Layer 04

Observatory + AWN Growth

The architecture is designed to expand toward observatory telemetry, Asteroid Watch Network node reports, public education kits, and future citizen-science submissions.

Layer 05

Safety Boundary

Public pages explain the mission without exposing secrets. Credentials stay server-side; public UI receives only sanitized, minimal outputs needed for education and status awareness.

Layer 06

Resilience Model

Primary and failover origins are kept aligned for public routes. Rollback directories preserve exact previous files before changes, allowing rapid recovery if a deployment needs to be reversed.