Air-gapped and classified

Foundry mints offline. Model A validates locally. Self-hosted Control keeps lifecycle inside the boundary.

Classified and sovereign estates cannot depend on a SaaS control plane. ENI6MA’s Sovereign packaging licenses Foundry for air-gapped minting, ships Control for self-hosted registry and durable ledger, and supports Model A local validate-proof at the gate so enforcement does not require a path to ENI6MA cloud.

Artifacts move via your approved media process; revocation remains a handle state change inside your Control instance. The envelope contract is identical to connected deployments (only ops topology changes).

What this solution claims

Foundry minting and Model A local verification can run without a network path to ENI6MA cloud services.ValidatedAir-gappable Foundry license path and local validate-proof acquisition.

Model A (local validate-proof) and Model B (registry validate-proof) are security-equivalent at the envelope layer.ValidatedThe client assembles the same envelope either way; only verifier acquisition differs.