The enclosure holds.
Midgard is the defended trust boundary everything else stands on: identity, the object fabric, storage, compute, governance and post-quantum cryptography, deployed on your hardware, from a single node to a cluster, fully air-gapped if you choose.
Six services, one boundary
People, services and devices carry verifiable identities inside the enclosure. Every action is attributable; nothing acts anonymously.
Data lives as typed objects with lineage, not loose files. Every object knows where it came from, what produced it, and who may touch it.
Objects are sealed at rest with AES-256-GCM under ML-KEM-wrapped keys. Storage scales from one disk to a distributed cluster.
Pipelines, agents and applications run as governed workloads on your nodes. No core function requires an outbound call.
Policy is declared once and enforced everywhere: access, retention, purpose. Every decision the platform makes is logged and inspectable.
ML-KEM-768 (NIST FIPS 203) key encapsulation by default. The cryptography assumes the computers of the 2040s, not the 1990s.
Sealing is a verb here
The Seal action is Midgard's oldest lineage: the post-quantum sealing work built at Kryotech, protecting 400,000+ Vox Messenger users worldwide, survives inside the enclosure as a first-class operation.
Seal an object and it is encrypted under keys only you hold, its lineage is signed, and its provenance travels with it. Unsealing is an audited event, never a silent read.
$ midgard keygen --kem ml-kem-768
public key written: 1184 bytes · ml-kem-768.pub
$ midgard seal vessel-1188 --key ml-kem-768.pub
sealed · aes-256-gcm · lineage signed
provenance: § feed-atlantic-raw → forge/tx-2214Runs where you say it runs
| Property | Specification |
|---|---|
| Footprint | Single node to multi-node cluster, on your hardware or your private cloud. |
| Connectivity | Fully air-gapped operation supported. Zero outbound calls required for any core function. |
| Encryption at rest | AES-256-GCM under ML-KEM-768-wrapped keys (NIST FIPS 203) · ML-KEM-1024 optional |
| Audit | Signed, append-only lineage for every object and every action. |
| Delivery | Reproducible builds, signed SBOM per release, shipped through Bifrost, including as offline bundles. |
| Licence | Open-source core under an OSI licence. Inspect it, fork it, continue it. |
What stands on it
Your data. Your models. Your keys. Our problem to make that easy.