Sovereignty Disclosure
Every deployment mode Sovern supports, auto-projected from the canonical registry. Sovereign-tier modes are substrate-code-immutable-from-the-inside (CC-1 invariant).
Generated from lib/registry/deployment-modes-registry.ts · 5 registered modes
CC-1 invariant — sovereign-mode immutability
Sovereign-tier modes (on-prem, air-gapped, jv-bespoke) are substrate-code-immutable-from-the-inside: no Sovern Digital phone-home, no remote code mutation, no remote kill-switch. Substrate updates ship as signed license, release, and revocation bundles the customer operator applies — Ed25519 signatures over JCS-canonicalised JSON, verified offline at the deployment boundary.
Modes
saas
Sovern Cloud continuous deployment
tenancy: Shared (multi-tenant) · release: Continuous (vendor CD) · network: Always outbound · federation: Full online federation · license: not required
on-demand
Continuous deployment locked to SaaS train; per-customer pinning
tenancy: Pinned (dedicated sub-cluster) · release: Continuous (vendor CD) · network: Always outbound · federation: Full online federation · license: not required
on-prem — sovereign
Customer-controlled on-premises substrate; signed bundle ceremony
tenancy: Sovereign (customer-controlled) · release: Quarterly bundle (operator applies) · network: Outbound allowed · federation: Full online federation · license: required
air-gapped — sovereign
Network-isolated substrate; transfer-media bundles only; V.sub6 federation
tenancy: Sovereign (customer-controlled) · release: Quarterly bundle (operator applies) · network: No outbound (air-gap) · federation: Air-gap bundle only (V.sub6) · license: required
jv-bespoke — sovereign
JV-controlled train; pulls Sovern Digital release tags + layers JV-authored bespoke expression code
tenancy: Sovereign (customer-controlled) · release: JV-controlled train · network: Outbound allowed · federation: Full online federation · license: required
Guarantees
CI guards backstop the CC-1 invariant against accidental regression. See docs/architecture/DECISIONS.md §CC for the full sub-decision lock and lib/registry/compliance-enforcement-registry.ts for the 8 deployment-modes guards (DUAL-MODE per SOVERN_LAUNCH_GATE).