SAAS
Managed, fastest start
Hosted tenancy with row-level isolation, managed upgrades, and receipt-key rotation. Self-serve on the Teams tier.
SELF-HOSTED / VPC
Your cloud, your controls
Runs as native services under PM2, or from the signed offline installer. The full platform — gate, ledger, lakehouse — runs inside your boundary; nothing leaves without policy.
AIR-GAPPED
Offline installer (release candidate)
Everything ships on signed media: the Lore services, PostgreSQL 17 with pgvector, a local embedding model, and a background supervisor. Checksums and a signature verify the media, an SBOM lists every component, and upgrades checkpoint the database so you can roll back. Ubuntu 22.04 first; macOS next.
PostgreSQL + pgvector
Records, metadata, embeddings
Redis + etcd
Caching, queues, coordination
Apache Iceberg
Versioned analytical lakehouse
SeaweedFS / S3 · Neo4j
Optional object + graph stores
Go security runtime
PKI, KMS, assurance state
Health & failover
Health checks across services, heartbeat monitoring with failover for agent fleets, kill switches that hold fail-closed.
Upgrades & backups
Checkpointed upgrades with rollback, backup and restore procedures, and versioned schema migrations. The insert-only evidence chain survives all of them.
Observability hooks
Logs, metrics, and traces export to your stack; OpenTelemetry ingestion doubles as ground-truth token accounting.