Module

Identity, Policy and Sovereign Runtime

Apply organization, tenant, identity, policy and deployment controls consistently across source, artifacts, agents and delivery.

Module responsibility

Apply organization, tenant, identity, policy and deployment controls consistently across source, artifacts, agents and delivery.

Isolate organizations, repositories, artifacts, models, agents, policies and evidence through one authority chain.

Shared infrastructure cannot become cross-tenant visibility or mutation.

Bind principal, workload, purpose, resource, action and evidence to ARGUS decisions.

Every protected action is attributable, explainable and revocable.

Run self-hosted, managed, BYOC, hybrid, edge, air-gapped and classified profiles with explicit capability manifests.

Customers retain code, model and artifact custody under declared operational limits.

Isolate organizations, repositories, artifacts, models, agents, policies and evidence through one authority chain.

Bind principal, workload, purpose, resource, action and evidence to ARGUS decisions.

Run self-hosted, managed, BYOC, hybrid, edge, air-gapped and classified profiles with explicit capability manifests.

Organization and TenancyIsolate organizations, repositories, artifacts, models, agents, policies and evidence through one authority chain. Local caches and indexes never mint tenancy authority.
Policy and AuthorizationBind principal, workload, purpose, resource, action and evidence to ARGUS decisions. Haephestus does not issue shadow authorization.
Sovereign Deployment ProfilesRun self-hosted, managed, BYOC, hybrid, edge, air-gapped and classified profiles with explicit capability manifests. Disconnected operation cannot extend expired grants or invent global state.