Enterprise · Gov
Sovereign by architecture.
The vendor of the agent cannot read, intercept, or revoke arbitrary work. By shape, not promise.
Five properties
What ships in Enterprise.
Tetra · FIPS 140-3
Allowlist evaluator restricts to FIPS-approved crypto.
Cube · PIV / CAC
X.509 + challenge. U.S. federal smart-card flow.
Octa · Customer issuer
Your Ed25519 keypair signs licenses. We can't revoke.
Dodeca · Air-gap
Local-only AI + offline issuer + manual updates.
Icosa · SBOM + SIEM
CycloneDX 1.5 signed · JSONL audit stream · SOC 2.
Deployment shape
Where AZMX runs.
Engineer's machine
Native binary. Sub-second cold start. No daemon.
Local model server
Ollama · LM Studio · your own. AI never leaves your perimeter.
Your IdP
SAML 2.0 + SCIM 2.0. Deprovision = removed seat in <5 min.
Your SIEM
Signed JSONL. Splunk · Datadog · OTel · Elastic.
Let's join the circle. Tell us about the work.
We read every message. Replies come from a real person on the team (usually within one business day) — never a bot.