Open. Sovereign. Forever.
The core is open source under an OSI licence. Not open-core theatre, not source-available-with-teeth: the enclosure, the sealing, the fabric, published, buildable, and forkable by you.
Trust is a property you verify
Every security claim on this site resolves to code you can read. Where a competitor says trust us, the licence says check.
If Veldris ever loses its way, take the source and continue without us. That exit right is deliberate. It is what keeps us honest.
A forever company makes itself replaceable. Documentation, build tooling and governance are structured so others could carry the work on.
Verify it yourself
Every release is reproducible: check out the tag, run the build, compare the bytes. Each release ships a signed SBOM, so what runs in your enclosure is enumerable down to the last dependency and licence.
"Trusted by leading organizations worldwide" is not a sentence we can write. Reproducible from source, verify it yourself, is.
$ git checkout v1.4.2
$ make reproduce
building · toolchain pinned · no network
compare: dist/midgard-1.4.2 == release asset
sha256 match · sbom signature validThe door is open
Issues, patches and audits are welcome on GitHub. Security findings go to security@veldris.io, see the disclosure policy. This website and the Veldris design system live in the open too; the brand itself is built to be read.
Reproducible from source. Verify it yourself.