SW Sovereignware™ Book a demo

The sovereign AI operating system

Sovereignware™ runs inside the firm, not on someone else's cloud.

The on-premises AI operating system for regulated firms. Marlowe, Kar3n, and Tec agents orchestrate across the patent-pending Trinary Bound™ three-node topology. Your client data, your privileged work product, your patient records — processed locally, on hardware physically resident in your office.

U.S. Patent App. 19/458,785 · Patent Pending · Engineered for Apple Silicon, NVIDIA & Dell

Book a demo → One Page Overview
Ark Citadel — the flagship Sovereignware™ briefcase, containing the complete Trinary Bound™ three-node topology
Ark Citadel · Flagship HecTec Ark™

The HecTec Ark™ family

Two products. One sovereign stack.

ArkNode travels with the principal. Ark Citadel stays at the firm — running Sovereignware™ Citadel. Both are sealed sovereign AI hardware, owned outright by the client, engineered for the Trinary Bound™ topology.

ArkNode — the portable single-SSD sovereign vault
Portable · Single node

ArkNode

The principal's vault, traveling.

A single-SSD enclosure carrying the −1 Iron Vault layer. Travels with the principal, partner, or steward. Reaches home through the patent-pending Trinary Tunnel™ — by client approval only.

  • Thunderbolt 4 / USB-C native
  • Encrypted at rest · HMAC-handshake retrieval
  • Pairs to a home Ark Citadel
  • Field-replaceable, client-owned
Ark Citadel — the flagship sovereign AI briefcase
Flagship · Full topology

Ark Citadel

The stronghold inside the firm.

A briefcase chassis containing the complete Trinary Bound™ topology — compute host plus the +1, 0, and −1 nodes — pre-installed with Sovereignware™ Citadel. The full sovereign AI stack in one heirloom-grade carrier.

  • Compute + 3 vault nodes · Thunderbolt fabric
  • Sovereignware™ Citadel pre-installed
  • Hardware-isolated +1 / 0 / −1 boundary
  • Patent pending · US 19/458,785

Sovereignware™ — the operating system

Three agents and an operator interface. All running on iron you own.

The Sovereignware™ OS hosts the agents that do the work — research, retrieval, threat isolation — and exposes the Citadel as the operator surface. Every action that touches a client or a regulator pauses for human approval. Full leverage, zero unsupervised exposure.

M

Marlowe

Sovereign Intelligence · 0 Layer

Math-indexed semantic search across your knowledge base via vector embeddings. Knows your archive without ever reading the originals.

K

Kar3n

Cryptographic Archive · −1 Layer

Stores originals with SHA-256 IDs and HMAC-SHA256 access signatures. Releases documents only through verified handshake. Immutable ledger on every read.

T

Tec

Security Perimeter · +1 Layer

Bidirectional immune system. Inbound: six-vector threat scan on +1 hardware. Outbound: PII + privileged content stripped before any request leaves your network.

C

Citadel

Operator Interface

The dashboard your stewards live in. Case Shelf, evidence basket, Marlowe chat, Karen librarian — every workflow under one operator surface.

Architecture

From ingestion to sovereign holding, in four moves.

Mixed data enters. The triage layer routes it across +1 / 0 / −1 in parallel. Each tier processes inside its own hardware boundary. The unified stream settles into the Secure Holding Zone. Real four-phase choreography — not a marketing diagram.

Open full-screen →

Hardware substrate

Apple Silicon today. NVIDIA and Dell native.

Trinary Bound™ is hardware-agnostic at the compute layer. Three Thunderbolt-attached SSD nodes plus a compute host. The reference design today uses Apple Silicon. The same fabric works on NVIDIA DGX Spark and Dell Pro Max / PowerEdge.

Reference today

Apple Silicon

Mac M4 / M5 as compute host. Three OWC 1M2 SSD enclosures as the +1 / 0 / −1 nodes. CalDigit Thunderbolt fabric. Sovereignware™ pre-installed. The configuration shipping into client firms today.

Native target

NVIDIA

DGX Spark / Project DIGITS as compute host. Same Thunderbolt fabric, same three vault nodes. Complementary to NVIDIA Confidential Computing and BlueField — Trinary Bound adds cross-node physical isolation on top of in-box cryptographic isolation.

Native target

Dell

Pro Max workstation or PowerEdge XE server as compute host. Same topology. Turns a generic Dell AI workstation into a HIPAA-aligned, attorney-privilege-preserving sovereign AI deployment a regulated firm can buy off a Dell quote.

Patent · Licensing

Patent pending. Available to license.

The Trinary Bound™ three-node topology is covered by U.S. Utility Patent Application 19/458,785, filed with the United States Patent and Trademark Office. The Trinary Tunnel™ sovereign cryptographic tunnel is also patent-pending. Inventor: Hector Cabrera.

U.S. Utility Patent Application 19/458,785

Application No.
19/458,785
Filing Date
24 January 2026
Priority Date
27 November 2025

We are actively engaging with hardware partners — AI workstation OEMs, on-premises AI server makers, and channel partners selling into regulated verticals — for reference-design licensing and bundled-OS configurations. The right partnership delivers a vertical-ready sovereign AI workstation that ships pre-installed with Sovereignware™, in the Trinary Bound™ topology, on Dell or NVIDIA hardware. One SKU. Sellable Monday morning.

Book a Steward call →

Deployment + hardware partners

Sovereignware™ is deployed by licensed Stewards.

Active · Central Florida

DMH Florida — primary deployment partner

DMH Florida installs the Ark Citadel inside client firms — family offices, law firms, medical practices — under the named-Steward model. Every Steward is a licensed Hectec Sovereign AI Engineer. No offshoring. No subcontracting. The same person who installs your system is the person who maintains it.

Visit dmhfl.com →
Open

Hardware partner inquiries

For AI workstation OEMs, on-premises AI server makers, and channel partners interested in licensing the Trinary Bound™ topology or bundling Sovereignware™ with your hardware — reach a Steward directly.

Book a Steward call →

The archive of record

Beacon ratings & Sovereign intelligence.

Every Sovereign Beacon™ privacy rating lives here as a citable artifact — named sources, published methodology, open right of reply. The same standard of custody we sell is the standard of record we keep.

Sovereign Beacons

Ratings of hardware, applications, sites, and AI tools — each one a citable claim with named sources and methodology.

Browse the archive →

Articles & Field Notes

Insights into local inference, cryptographic vaults, and deploying Sovereign AI inside regulated firms.

Read articles →

Official

White Papers

Sovereignware™ executive summary and the Trinary Bound™ technical whitepaper.

Executive Summary (PDF) Trinary Bound™ Whitepaper (PDF)
Full technical whitepaper locked. Book a demo to retrieve an access key.