47 RFCs · 77 URI schemes · 19 protocols · 6 Industry Profiles
🇬🇧 English · 🇩🇪 Deutsch · 🇫🇷 Français · 🇪🇸 Español · 🇮🇹 Italiano · 🇳🇱 Nederlands · 🇵🇱 Polski · 🇨🇿 Čeština · 🇸🇪 Svenska
🇯🇵 日本語 · 🇨🇳 中文 · 🇰🇷 한국어 · 🇮🇳 हिन्दी · 🇹🇷 Türkçe · 🇦🇪 العربية · 🇵🇹 Português · 🇷🇺 Русский · 🇺🇦 Українська
SovereignStack is an open operating system and protocol stack for autonomous digital systems. It combines identity, governance, provenance, policy, distributed execution, and programmable economic objects into a unified architecture for trustworthy, interoperable, and sovereign AI-powered infrastructure.
It treats intelligence, identity, and economic value as networked resources — the way Linux treats files, the way TCP/IP treats packets.
┌────────────────────────────────────────────────────────────────────┐
│ WHAT SOVEREIGNSTACK PROVIDES │
├────────────────────────────────────────────────────────────────────┤
│ │
│ Identity Layer Universal Agent Identity (UAI) │
│ DID resolution, trust, reputation │
│ │
│ Intelligence Layer Agents, Memory, Reasoning, Planning │
│ Search inference, meta-cognition │
│ │
│ Governance Layer Policy enforcement, jurisdiction │
│ ZK alignment, safety contracts │
│ │
│ Economic Layer Payments, markets, treasury, assets │
│ Tokenized finance, settlement │
│ │
│ Digital Twin Layer Person, company, bank, factory │
│ Vehicle, city, portfolio │
│ │
│ Fabric Layer Federation, scheduling, networking │
│ Continuity, migration, recovery │
│ │
│ Provenance Layer Every action traceable, auditable │
│ Merkle audit trail, evidence chain │
│ │
└────────────────────────────────────────────────────────────────────┘
Key insight: SovereignStack does not compete with LangChain, CrewAI, or AutoGen. Those are orchestration frameworks. SovereignStack is the infrastructure layer they run on — the way Kubernetes does not compete with Docker Compose.
To support both standards development and practical adoption, this repository is organized into three main categories:
- Standards
- RFCs (
rfcs/) - URI Standard (
URI_STANDARD.md) - Object Model (
OBJECT_MODEL.md) - Protocols & Constitution (
CONSTITUTION.md)
- RFCs (
- Reference Implementations
- Rust crates (Core runtime,
ss-*) - SDKs (
sdks/) - Reference Node (
reference-node/) - Examples (
examples/) - Nitro runtime (
os/)
- Rust crates (Core runtime,
- Profiles
- Finance (
profiles/finance/) - Healthcare (
profiles/healthcare/) - Government, Manufacturing, Defense
- Finance (
# 1. Clone the repository
git clone https://github.com/Kubenew/SovereignStack.git
cd SovereignStack
# 2. Build the Rust workspace
cargo build --release
# 3. Launch playground (Docker Compose)
docker compose -f playground/docker-compose.yml up -d
# 4. Verify nodes are running
curl http://localhost:8080/health
# 5. Run conformance tests
cargo test --workspace
python -m pytest tests/conformance/ -v
# 6. Check the audit trail
tail -f /var/log/sovereignstack/audit.logThat's it. You now have a running SovereignStack node with identity, capabilities, event bus, and provenance logging.
See playground/ for Docker Compose setup, SCALING-AGI.md for production deployment, and examples/federation/ for multi-node federation.
Applications Finance · Healthcare · Manufacturing · Government · Defense
─────────────────────────────────────────────────────────────────────────────
Economic Layer Markets · Payments · Insurance · Treasury · Assets
─────────────────────────────────────────────────────────────────────────────
Intelligence Layer Agents · Memory · Reasoning · Planning · Search
─────────────────────────────────────────────────────────────────────────────
Governance Layer Policy · Identity · Capabilities · Jurisdiction · Trust
─────────────────────────────────────────────────────────────────────────────
Fabric Federation · Scheduling · Networking · Continuity
─────────────────────────────────────────────────────────────────────────────
Kernel Runtime · Storage · Security · Events · Provenance
Linux (1991 — server operating system)
Kubernetes (2014 — container orchestration)
SPIFFE (2017 — workload identity)
OpenTelemetry (2019 — observability)
TCP/IP (1974 — network protocol)
SovereignStack (2026 — operating system for autonomous digital economies)
Every SovereignStack object is:
- Identifiable — has a unique URI
- Addressable — resolvable across the network
- Discoverable — findable via capability/semantic search
- Verifiable — cryptographically signed, with provenance
- Portable — movable across nodes and jurisdictions
- Federatable — shareable across sovereign boundaries
- Auditable — full history and reasoning trail
agent://researcher-1 # Agent identity
session://abc123 # Session
artifact://def456 # Produced artifact
memory://xyz789 # Memory object
reason://decision-42 # Reasoning chain
knowledge://physics/newton # Knowledge object
capability://legal-review # Skill/capability
workflow://contract-analysis # Workflow definition
contract://task-88 # Agent contract
org://acme # Organization
robot://drone-12 # Physical device
policy://gdpr-eu # Governance policy
tel://zcube-a/evt-001 # Telemetry event (RFC-0033)
kv://zcube-a/gpu-003/session-a # KV cache object (RFC-0034)
gateway://eu-frankfurt # Federation gateway (RFC-0035)
mem://zcube-a/gpu-003/hbm # Memory pool (RFC-0036)
profile://zcube-standard-v1 # Cluster profile (RFC-0037)
model://huggingface/Qwen/Qwen2.5-72B # AI model (RFC-0040)
dataset://huggingface/c4 # Dataset (RFC-0040)
training://zcube-a/run-0042 # Training run (RFC-0040)
evaluation://zcube-a/eval-007 # Model evaluation (RFC-0040)
audit-pkg://node-001/2026-06-03 # Audit evidence package
continuity://zcube-a/legal-agent # AI continuity manifest (RFC-0052)
recovery://zcube-a/incident-42 # Recovery procedure (RFC-0050)
failover://zcube-a/evt-001 # Failover event log (RFC-0051)
playbook://zcube-a/gpu-failure # Recovery playbook (RFC-0050)
checkpoint://cluster-a/agent-42 # Agent state checkpoint (RFC-0052)
snapshot://zcube-a/gpu-003/snap # Memory snapshot (RFC-0036)
migration://zcube-a/gpu-003/ag # Agent migration (RFC-0051)
# Digital Twin Objects (RFC-0060)
person://alice-j-doe # Natural person digital twin
company://acme-corp # Corporate entity
bank://eu-central-bank # Financial institution
factory://munich-plant-7 # Manufacturing facility
hospital://charite-berlin # Healthcare institution
vehicle://fleet-42/truck-009 # Autonomous vehicle
portfolio://pension-fund/balanced # Investment portfolio
fund://sovereign-wealth-no # Investment fund
bond://de-bund-2035 # Debt instrument
asset://tokenized/berlin-01 # Tokenized real-world asset
# Financial Economy Objects
payment://swift/pacs008-001 # Payment instruction
settlement://dvp/trade-88421 # Settlement record
treasury://acme/main-usd # Treasury account
derivative://swap/irs-42 # Derivative contract
insurance://policy/auto-fleet # Insurance policy
account://acme/gl/1000-assets # Ledger account
tax://de/vat/evt-20260723 # Taxable event
SovereignStack Protocol Stack — RFCs organized by layer
Deployment Models: Air-gapped · Federated Mesh · Hybrid
OASA Data Flow — API Gateway → Inference → Audit Trail
ss-kernel
├── Identity (UAI, SIG, trust, reputation)
├── Capabilities (registry, discovery, routing)
├── Messaging (event bus, streams)
├── Memory (tiered: session → civilizational)
├── Scheduling (compute placement, model selection)
├── Federation (sovereign routing, replication)
├── Governance (policies, jurisdiction, compliance)
└── Provenance (lineage, evidence, audit)
Alongside the core Rust primitives, SovereignStack implements a suite of Python-based microservices providing production-ready infrastructure:
- OASA API Gateway: Secure, OpenAI-compatible entry point enforcing Data Loss Prevention (DLP), Strict Compliance Locking, and SPIFFE workload identity validation.
- Federation Relay & Sync Engine: Decentralized node synchronization utilizing advanced Conflict-Free Replicated Data Types (CRDTs) to ensure eventual consistency across sovereign boundaries.
- Merkle Audit Log: Cryptographically verifiable, append-only event stream providing a tamper-proof provenance trail for all system operations.
- Predictive Scheduler: Autonomous operational controller employing exponential smoothing models to predict compute load and proactively scale resources.
- Weight Federation: Secure registration and sharding of model weights across distributed nodes for collaborative inference.
SovereignStack/
├── ss-kernel/ # Core kernel (identity, resolver, eventbus, registry, capability, policy)
├── ss-core/ # Shared types, URI parsing, errors
├── ss-crypto/ # Ed25519 signing, hashing
├── ss-identity/ # Universal Agent Identity
├── ss-capability/ # Capability declaration & matching
├── ss-eventbus/ # Event sourcing infrastructure
├── ss-cas/ # Content-addressed storage
├── ss-federation/ # Sovereign routing & discovery
├── ss-runtime/ # Multi-model execution runtime
├── ss-memory/ # Tiered memory subsystem (Stub)
├── ss-sessiond/ # Session lifecycle daemon
├── ss-scheduler/ # Compute placement (Stub)
├── ss-swarm/ # Multi-agent coordination (Stub)
├── ss-reason/ # Reasoning object store (Stub)
├── ss-kas/ # Knowledge addressing system (Stub)
├── ss-sig/ # Sovereign identity graph (Stub)
├── ss-trust/ # Trust framework (Stub)
├── ss-reputation/ # Reputation scoring (Stub)
├── ss-policy/ # Governance & jurisdiction (Stub)
├── ss-provenance/ # Computational lineage (Stub)
├── ss-jurisdiction/ # Jurisdiction compliance engine
├── ss-twin/ # Digital twin framework (IoT/robotics)
├── ss-device/ # Reality interface layer (Stub)
├── ss-economy/ # Financial economy primitives
│ ├── payments # Payment processing
│ ├── settlement # Trade & payment settlement
│ ├── treasury # Treasury & liquidity management
│ ├── assets # Tokenized asset registry
│ ├── markets # Order books, trading, market data
│ ├── insurance # Policies, claims, underwriting
│ ├── risk # Risk models, VaR, stress testing
│ ├── derivatives # Options, futures, swaps
│ ├── accounting # Double-entry ledger
│ ├── tax # Tax computation & jurisdiction
│ ├── fin_identity # KYC/AML/sanctions
│ └── fin_compliance # Regulatory compliance engine
├── ss-sip/ # Sovereign Intelligence Protocol (Stub)
├── ss-contracts/ # Safety contracts & human override (Stub)
├── reference-node/ # Minimal reference node binary
├── profiles/ # Industry profiles
│ ├── finance/ # Sovereign Finance Profile (SFIN)
│ ├── government/ # Government & public sector
│ ├── healthcare/ # Healthcare & life sciences
│ ├── manufacturing/# Manufacturing & supply chain
│ ├── robotics/ # Robotics & autonomous systems
│ └── defense/ # Defense & national security
├── conformance/ # Conformance test suites & profiles
├── rfcs/ # Protocol specifications (RFC-0001–0060)
├── docs/
│ ├── architecture/ # 10-page architecture breakdown
│ ├── architecture/diagrams/ # SVG architecture diagrams
│ ├── protocol-mappings/ # ISO 20022, OIDC, SPIFFE, OTel
│ └── reference-architectures/ # Banking, insurance, gov, healthcare, mfg
├── tests/ # Conformance test suite
├── examples/
│ ├── adapters/
│ │ ├── ollama/ # Ollama inference adapter
│ │ └── vllm/ # vLLM inference adapter
│ ├── federation/ # Multi-node federation (3 jurisdictions)
│ └── financial_adapter/ # Financial system adapter
├── playground/ # Try-it-now deployment
SovereignStack is governed by a formal standards framework:
| Document | Description |
|---|---|
| STANDARDS.md | Root standards framework — 6 layers |
| OBJECT_MODEL.md | Universal object model with cryptographic signatures |
| URI_STANDARD.md | URI scheme registry & resolution rules |
| TRUST_MODEL.md | Capability-based zero-trust security |
| SECURITY.md | Threat model & incident response |
| CONFORMANCE.md | 3-tier certification program & badges |
| CERTIFICATION.md | Badge levels, colors, shapes, materials |
| PROTOCOL_REGISTRY.md | 18 protocols with lifecycle management |
| examples/federation/ | Multi-node federation example (3 jurisdictions) |
| examples/adapters/ | Ollama + vLLM inference adapters |
| conformance/ | Conformance test suites (L1-L4) |
| conformance/level-4-agi/ | L4 Autonomous Intelligence Ready spec |
| REFERENCE_IMPLEMENTATIONS.md | 13 core subsystems + 3 language bindings |
| ROADMAP-2035.md | 10-year vision through Sovereign Intelligence Internet |
| SIRA.md | Sovereign Intelligence Reference Architecture (4-quadrant object model) |
| SCALING-AGI.md | Production scaling guide for frontier & AGI-ready deployments |
| BUILD_WINDOWS.md | Windows build guide — exe, MSI, Python bundling |
| docs/i18n/README.md | Internationalization — 18 languages with full i18n policy |
SovereignStack is translated into 18 languages. The project follows the Debian model: English is canonical, translations are maintained copies. See the i18n index for available languages and the translation policy.
| RFC | Title | Status |
|---|---|---|
| RFC-0001 | Sovereign Object Model | Draft |
| RFC-0002 | URI Standard + ABNF Grammar | Draft |
| RFC-0003 | Trust Graph | Draft |
| RFC-0004 | Capability Registry | Draft |
| RFC-0005 | Knowledge Objects | Draft |
| RFC-0006 | Reasoning Objects | Draft |
| RFC-0007 | Event Bus | Draft |
| RFC-0008 | Federation Routing | Draft |
| RFC-0009 | Session Lifecycle | Draft |
| RFC-0010 | Conformance Framework | Draft |
| RFC-0011 | Identity & DID Resolution | Draft |
| RFC-0012 | Cryptographic Signatures & Verification | Draft |
| RFC-0013 | Provenance Graph | Draft |
| RFC-0014 | Agent Communication Protocol | Draft |
| RFC-0015 | Workflow Execution Engine | Draft |
| RFC-0016 | Resource Allocation & Accounting | Draft |
| RFC-0017 | Sovereign Memory Protocol (Detailed) | Draft |
| RFC-0018 | Content-Addressable Storage | Draft |
| RFC-0019 | Trust & Reputation Scoring | Draft |
| RFC-0020 | Policy Enforcement | Draft |
| RFC-0021 | Jurisdiction & Data Residency | Draft |
| RFC-0022 | Audit Log Streaming | Draft |
| RFC-0023 | Extension & Plugin System | Draft |
| RFC-0024 | Multi-Model Routing | Draft |
| RFC-0025 | Session Migration | Draft |
| RFC-0026 | Capability Delegation Chain | Draft |
| RFC-0027 | Swarm Coordination | Draft |
| RFC-0028 | Digital Twin Synchronization | Draft |
| RFC-0029 | Intelligence Economy Primitives | Draft |
| RFC-0030 | Network Topology Awareness | Draft |
| RFC-0031 | KV Locality Scheduling | Draft |
| RFC-0032 | AI Fabric Protocol | Draft |
| RFC-0033 | Fabric Telemetry Protocol | Draft |
| RFC-0034 | Distributed KV Placement | Draft |
| RFC-0035 | Topology-Aware Federation | Draft |
| RFC-0036 | Memory Fabric Objects | Draft |
| RFC-0037 | AI Cluster Profiles | Draft |
| RFC-0040 | Model Lineage Protocol | Draft |
| RFC-0050 | AI Continuity & Disaster Recovery | Draft |
| RFC-0051 | Model Failover Protocol | Draft |
| RFC-0052 | AI Continuity Manifest | Draft |
| RFC-0053 | Sovereign Recovery Profiles | Draft |
| RFC-0056 | Search Inference | Draft |
| RFC-0057 | Meta-Cognition | Draft |
| RFC-0060 | Digital Twin Entity Model | Draft |
| RFC-0061 | Human Override Protocol | Draft |
# Clone & enter
git clone https://github.com/Kubenew/SovereignStack.git
cd SovereignStack
# Build (Linux/macOS)
cargo build --release
# Build (Windows — see BUILD_WINDOWS.md for MSI guide)
cargo build --release --bin ss-node --bin ss-cli
# Launch playground (Docker Compose)
docker compose -f playground/docker-compose.yml up -d
# Run conformance tests
cargo test --workspace
python -m pytest tests/conformance/ -v
# Multi-node federation (3 jurisdictions)
docker compose -f examples/federation/docker-compose.federation.yml up -d
# Inference adapters
cd examples/adapters/ollama && python adapter.py # Ollama
cd examples/adapters/vllm && python adapter.py # vLLMThe reference implementation with conformance testing, multi-node federation, and inference adapters.
What's new:
- Conformance suite: Automated L1-L4 testing with CI integration (GitHub Actions)
- Multi-node federation: 3-jurisdiction example (EU/US/Asia) with CRDT sync
- Inference adapters: Ollama and vLLM bridges with audit logging
- L4 certification: "Autonomous Intelligence Ready" — meta-cognition, safety contracts, human override, search audit
- RFCs 0045-0074: Meta-cognition, safety contracts, search objects, digital economy, digital twins
- 77 URI schemes: Complete addressing for agents, twins, finance, and cognitive processes
- Digital economy primitives: Payments, markets, treasury, derivatives, insurance, settlement
Quick links:
| Resource | Description |
|---|---|
| SIRA.md | Reference Architecture |
| conformance/ | Conformance test suites (L1-L4) |
| examples/federation/ | Multi-node federation |
| examples/adapters/ | Ollama + vLLM adapters |
| level-4-agi/ | L4 certification spec |
| rfcs/ | 47 protocol specifications |
SovereignStack provides a complete audit and certification framework for enterprise AI deployments:
| Asset | Description |
|---|---|
| OASA CCM | Core Controls Matrix — 18 controls across NET/RUN/HW/AUD/CONT for L1/L2/L3 |
| SOC 2 Mapping | Full mapping to AICPA TSC 2023 — all 5 trust categories |
| Gaia-X Mapping | Mapping to Gaia-X Trust Framework + Self-Description generation |
| SOC 2 Type 1 Report Template | Pre-built evidence package template for auditor review |
| Compliance Schema | JSON Schema (Draft 2020-12) for automated node validation |
| Audit Evidence Schema | Structured evidence package for oasa-audit report |
| Validation Script | Automated compliance scanner with --audit-host |
Target frameworks: ISO 42001, EU AI Act, SOC 2, NIS2, Gaia-X, CSA CCM, FedRAMP
# Generate compliance evidence package
oasa-audit report --framework iso42001 --framework soc2
# Export for auditor review
oasa-audit export-pdf --output audit-report-2026-Q2.pdfApache-2.0 OR MIT (dual-licensed)