CONTROL PLANE (29 MiB IDLE)
Fastify Orchestrator & Broker
Stateless TypeScript/Bun control plane managing session state machines, model broker routing, MCP tool gateways, and real-time SSE telemetry streams.
SYSTEM ARCHITECTURE & SOVEREIGN SUBSTRATE
Engineered from first principles for deterministic execution and sovereignty.
Every subsystem in the Mindaeon stack is built on open standards, cryptographic tenant isolation, and self-contained services that run identically in the cloud or on a single air-gapped Linux host.
SYSTEM SCHEMATIC // 4-Tier Control Plane, Verification Engine & 8-Service Sovereign Stack
Open Full-Resolution SVG ↗
RELATIONAL & VECTOR (158 MiB IDLE)
PostgreSQL 18 + pgvector + RLS
Unified relational, JSONB, and HNSW vector store enforcing mandatory Row-Level Security (RLS) policies keyed to the authenticated tenant JWT claim on every query.
CRYPTOGRAPHY & KMS (26 MiB IDLE)
OpenBao Transit KMS
Per-tenant AES-256-GCM envelope encryption for secrets and session transcripts, plus Ed25519 signing keys for SLSA v1.0 provenance attestations.
IDENTITY & SSO (683 MiB IDLE)
Keycloak OIDC / SAML 2.0
Enterprise identity federation supporting Okta, Microsoft Entra ID, Ping Identity, SCIM 2.0 directory sync, and FIDO2/WebAuthn hardware passkeys.
POLICY & EDGE (25 MiB IDLE)
OPA Rego + Higress Gateway
Sub-millisecond policy-as-code evaluation for every tool call, repository write, and network egress request before execution occurs.
GIT & ARTIFACTS (171 MiB IDLE)
Gitea + SeaweedFS S3
Self-contained Git hosting (93 MiB) and S3-compatible immutable artifact storage (78 MiB) for air-gapped sovereign deployments.
Ready to Ship Verified Software?
Provision Your Isolated Organization or Request an Air-Gapped Appliance Review
Self-serve cloud trial workspaces include 5 seats, $5.00 in usage credits, dedicated PostgreSQL Row-Level Security, and immediate access to all 6 client surfaces.