Last verified: 28 September 2026

Marketplace Surfaces Disclosure

The three marketplace surfaces Sovern operates over a single substrate primitive set, auto-projected from canonical registries.

Generated from lib/registry/marketplace-surfaces-registry.ts + lib/registry/marketplace-scopes-registry.ts · 3 surfaces · 3 scopes

Three surfaces, one substrate

All three marketplace surfaces share a single set of substrate primitives (products, store_orders, expression_access_grants). Visibility differs by audience and grantor type, not by underlying schema. The v1 surface canon is closed — adding a 4th surface requires a §AA amendment.

Surfaces

sovern-catalog — Sovern Catalog

Sovern-curated catalog browsed by all orgs in the Sovern ecosystem; federated from the registry/control plane.

grantor: substrate-operator · grantee: org · audience scope: sovern-ecosystem

internal-market — Internal Market

Org-to-org marketplace visible only to authenticated participants within the Sovern ecosystem.

grantor: org · grantee: org · audience scope: sovern-internal

external-store — External Store

Org-to-external-customer storefront visible to unauthenticated visitors at /store/<orgSlug>.

grantor: org · grantee: external-visitor · audience scope: external-public

Per-environment marketplace scope policy

The MARKETPLACE_SCOPE environment variable gates which marketplace surfaces are exposed in any given deployment. The default is full for Sovern Cloud; sovereign-tier deployments default to internal-only or disabled per the resolver ladder in lib/deployment.ts.

Scopes

full

All three Sovern-mediated surfaces enabled (Sovern Cloud default).

Sovern Catalog: enabled · Internal Market: enabled · External Store: per-org-flag

internal-only

Sovern Catalog disabled; Internal Market + External Store enabled (enterprise-dedicated default).

Sovern Catalog: disabled · Internal Market: enabled · External Store: per-org-flag

disabled

All Sovern-mediated surfaces disabled; External Store independently controlled per-org (air-gapped default).

Sovern Catalog: disabled · Internal Market: disabled · External Store: per-org-flag

Cross-environment federated catalog (§ZAH horizon)

The Sovern Catalog surface federates from control.sovern.cloud in v1. Cross-environment Internal Market visibility (per-org product visibility across deployments) is deferred to the §ZAH horizon stub. See docs/architecture/DECISIONS.md §ZAH when published.