Everything inside the boundary.
The full system runs on infrastructure you operate, under identity and network controls you already trust.
ONE PLATFORM · THREE WAYS TO RUN
Your boundary decides the topology.
Fixed base. Elastic top.
Sensitive foundations remain on your ground while approved capacity expands where policy permits.
The fastest approved start.
Run in your tenancy, with your keys and controls, without surrendering the path back to your own infrastructure.
THE INVARIANTS
The deployment changes. The control model does not.
Six conditions stay true in every topology. They are architecture, not promises on a slide.
You hold the keys
Identity, encryption and production access stay with you.
Your systems act
Lemi never becomes an ungoverned system of record.
A person approves
Material actions retain named human authority.
Releases are signed
Only approved software crosses the boundary.
Export requires a gate
Outbound movement is explicit, controlled and evidenced.
Support is an exception
Access is temporary, scoped and recorded—not ambient.
THE NEXT STEP
Name one decision.
Bring the people who own the data, the rules and the outcome. We will build it in the room.