Bambu Print Monitor — System Boundary

Bambu Print Monitor — System Boundary An architecture diagram generated by Archify. TP-Link Tapo C210 · Alert-only / no printer control · visual source TP-Link Tapo C210 visual source Bambu Cloud · fixed HTTPS GET · Alert-only / no printer control · lifecycle read Bambu Cloud fixed HTTPS GET lifecycle read PrintGuard 2.3.12 · camera-only / alert-only · Alert-only / no printer control › Local host / protected runtime · loopback :8000 PrintGuard 2.3.12 camera-only / alert-only loopback :8000 Lifecycle Monitor · 5s poll + 2-sample gate · Alert-only / no printer control › Local host / protected runtime · systemd service Lifecycle Monitor 5s poll + 2-sample gate systemd service Evidence Bundle · 5s JPEG ring + NDJSON · Local host / protected runtime · local 0700 Evidence Bundle 5s JPEG ring + NDJSON local 0700 Status Publisher · authenticated ingest · Local host / protected runtime · two-slot writer Status Publisher authenticated ingest two-slot writer Cloudflare D1 · current + last + diagnostics · Cloudflare public status surface · replace-in-place Cloudflare D1 current + last + diagnostics replace-in-place print.arrgee.org · public read-only status · Cloudflare public status surface · Pages frontend print.arrgee.org public read-only status Pages frontend Defect-Only Bridge · alert + matching snapshot · Alert-only / no printer control › Local host / protected runtime · no shell / at most once Defect-Only Bridge alert + matching snapshot no shell / at most once Rahul's Telegram · private failure alert · Architecture component · human review Rahul's Telegram private failure alert human review Human Reviewer · inspect snapshot · Architecture component · no automation Human Reviewer inspect snapshot no automation fixed HTTPS GET /v1/iot-service/api/user/bind RTSP /stream2 GET /api/health + current frame 5s frame + score observation redacted status + frames sealed/selected JPEG bearer-authenticated ingest public GET / HEAD redacted events + snapshot exact alert + media inspect and decide Local host / protected runtime Cloudflare public status surface Alert-only / no printer control Legend Frontend Backend Database Cloud Security External

Primary contract

  • • Bambu Cloud remains the printing path; the monitor reads lifecycle state only.
  • • The C210 is an independent visual source and PrintGuard stays camera-only.

Safety boundary

  • • No A1 LAN credentials, MQTT, FTP, pause, stop, cancel, or G-code route exists.
  • • Telegram is reachable only through the confirmed-defect bridge and human review.

Public surface

  • • The site exposes coarse status, privacy-cropped frames, and bounded diagnostics.
  • • D1 uses replace-in-place retention: current and last, with no public history.