DEFENCE
& CRITICAL

Air-gapped operation, attested workloads, sovereign by default. Designed to operate when the wider network is gone or assumed hostile. The operator owns everything: keys, data, control plane, the trail of what each model saw and decided.

Tactical · deployment

What it brings

Air-gapped	Fully offline as the default posture. Updates land via signed bundles. Receipts never leave the perimeter.
Attested	Every node proves what it's running before it speaks. Boot, image, workload — signed end-to-end, recorded locally.
Sovereign	Operator owns keys, data, control plane. No vendor cloud in the loop, ever.
Hardened	Designed for remote, unmanned, hostile environments. Same software the whole way down to a Micro on a sensor.
Resilient	Local decisions hold when the wider network is gone. Cross-witness federation between sibling sites, by grant only.

All four nodes · supported air-gapped configuration

Start a deployment ────►