Solutions / Government & public sector

Sovereign means it never phones home.
The transparency log runs inside the enclave.

Air-gapped and sovereign deployments can't reach public Sigstore. AIR runs a private Rekor v2 / Tessera transparency log inside your boundary, signed with FIPS-validated cryptography, so agent accountability clears IL5 / IL6 with no network path out.

FedRAMP HighDoD IL5 / IL6FIPS 140-3air-gapped

Request a sovereign briefing See the evidence ↓

No phone-home · US-person operated · dedicated tenancy

· Sovereign enclave · private transparency log · no egress ·

01The stakes

06:20:11 · enclave: classified-workflow-7

An agent acted inside a classified workflow, on a network with no path to the public internet.

IL6 forbids phone-home and public Sigstore is unreachable, yet you still must prove what the agent did and that the record holds. The proof has to be generated and anchored inside the boundary, or it doesn't exist.

02The mandate

Two words, "air-gapped" and "sovereign," carry a lot of law.

What the impact-level ladder and the crypto floor require.

FedRAMP / DoD IL

the impact-level ladder

IL5 requires FedRAMP High plus a DISA Provisional Authorization, FIPS-validated cryptographic modules for all encryption, US-person administrative access, and physical separation from non-DoD tenants. IL6, for data classified up to Secret, can run only in an air-gapped government community cloud.

Naming in flight: FedRAMP "Authorization" becomes "Certification," Impact Levels become Classes A–D, and the Low / Moderate / High labels are removed from January 2027.

FIPS 140-3

the crypto floor

FIPS 140-3 replaces 140-2 by 2026. NIST stopped accepting new 140-2 submissions in April 2022, and existing 140-2 validations sunset in 2026.

AIR's Ed25519 / BLAKE3 / ML-DSA-65 stack runs on FIPS-validated module images, so the signing path clears IL review instead of blocking it.

Sovereign transparency

the wedge

An air-gapped deployment cannot anchor to public Sigstore. AIR runs a private Rekor v2 / Tessera transparency log inside the enclave, so inclusion proofs exist without a packet leaving.

A three-tier checkpoint-key-custody ladder is how sovereignty is priced and how the trust root stays in your hands.

03How AIR answers

Every sovereign requirement, mapped to a capability.

No network path to public Sigstore?

Air-gappedA private Rekor v2 / Tessera transparency log runs inside the enclave.

FIPS-validated cryptography for all encryption?

ProveSigning runs on FIPS-validated module images (FIPS 140-3).

US-person administration and tenant separation?

DeployDedicated, single-tenant, operated by your own cleared people.

Prove an agent never exceeded its authority?

ProtectHuman-bound delegation plus deterministic Structural Verification.

Who holds the trust root?

Key custodyA three-tier checkpoint-key-custody ladder keeps it inside your boundary.

04The evidence

Verified without a single packet leaving your boundary.

The record is signed in-process with FIPS-validated cryptography and anchored to a transparency log that lives inside the enclave. Your own people verify inclusion, offline, with no call to Vindicara and no call to the public internet.

See the evidence model →

AgDR record · agdr/v2 · in-enclave

Delegation · operator authorized classified-workflow-7

Action · task executed — within declared scope

Anchor · private Rekor v2 / Tessera — no egress

Halt · out-of-scope call blocked — SV-SCOPE

sig: ed25519 / ML-DSA-65 · FIPS-validated · in-enclave log

✓ inclusion proven offline · zero network path out

05What you get

The sovereign tier, and the enterprise floor under it.

Air-gapped

regulated · sovereign

Air-gapped license — no phone-home
Private Rekor v2 / Tessera transparency log
FIPS-validated signing (140-3)
Three-tier checkpoint-key custody
Admissibility Pack — FRE 902 + expert support

Request a sovereign briefing

Enterprise

the floor under it

Containment — halt agents before harm
Causal graph, query & replay
SIEM: Splunk · Datadog · Sentinel · Sumo
SSO / OIDC, SLA
SOC 2 · ISO 42001 · EU AI Act · NIST

Talk to us

Sovereignty is the lever: you don't pay us to reach your network, you pay us to prove your agents inside it, with the trust root never leaving your hands.

Prove your agents without leaving the enclave.

A sovereign briefing for your security and accreditation teams. We walk the IL5 / IL6 path, the FIPS posture, and the in-enclave transparency log, on your terms.

Request a sovereign briefing →