Architecture

Three things that don't belong to the model.

Sovereignty isn't a feature you add on top. It's a property designed in from the start. Here's exactly how identity, memory, and governance work under the hood.

🔑
Portable DID identity
Every agent is born with a did:pkh decentralized identifier, a cryptographic keypair using the same secp256k1 curve as Ethereum. The agent's identity is not issued by any platform. It's generated locally, owned by the user, and portable to any environment.
did:pkh:eip155:1:0x8955b8cB…
🧠
Persistent memory you own
Conversations, documents, and relationships are stored in a local SQLite knowledge graph with full-text search and RAG. The memory is yours: encrypted at rest, portable, and deletable on demand.

The agent's memory doesn't live in our cloud.
SQLite · FTS5 · Encrypted at rest
📜
Constitutional governance
Every agent runs under an audited constitution enforced above the LLM: not inside the model, not in a prompt. Genesis audit on creation. Amendment requires cryptographic signature. The model can't override it. Neither can a bad prompt.
Genesis hash · Amendment log · Audit trail

See it in action

Every screenshot is the real Sovereign Console running on a machine you control: identity, governance, memory, privacy, and permissions, with nothing hidden in a cloud you don't own.

Identity panel showing the agent's did:pkh decentralized identifier
Portable DID identity. Born with a did:pkh keypair the agent owns, not issued by any platform.
Constitution panel with the Kestrel Constitution and its verified hash
Constitutional governance. A hashed, tamper-evident constitution checked on every interaction.
Knowledge graph panel showing typed memory nodes
Persistent memory you own. A local knowledge graph: encrypted, portable, deletable on demand.
Chat header in EPHEMERAL privacy mode using a local Ollama model
Privacy as a spectrum. EPHEMERAL routes to a local model only; NORMAL can use the cloud. You choose, per agent.
Sovereignty export result, a portable snapshot of the agent
Export everything, anytime. DID, constitution, memory, and history in one portable snapshot. Restore it anywhere.
Security panel showing a blocked action after a permission is denied
Permission enforcement. Deny a capability and the agent is blocked, with an audit trail of every attempt.

Want to run it yourself?

Get started → View GitHub →