Skip to content

Project docs v2 - #152

Merged
kenwalger merged 2 commits into
mainfrom
project-docs-v2
Jun 30, 2026
Merged

Project docs v2#152
kenwalger merged 2 commits into
mainfrom
project-docs-v2

Conversation

@kenwalger

Copy link
Copy Markdown
Owner

No description provided.

Deploys comprehensive architectural specifications, commercial strategy
frameworks, and foundational project vision collateral to establish absolute
"VC Readiness" and technical baseline clarity across the ecosystem.

Strategy Folder Additions:
- Update 'commercial_strategy.md': Transition plaintext ASCII flywheel layout
  to an explicit, valid Mermaid.js topology mapping the open-source wedge to
  the commercial Airlock and Audit monetization vectors.
- Complete 'sdk_philosophy.md': Codify the five core systems invariants (zero-
  dependency core, physical isolation, anti-memory sync journaling, non-
  repudiation, and explicit deterministic failures).
- Complete 'roadmap.md': Map the multi-horizon timeline spanning Write-Side
  Custody (Horizon 1), Outbound Perimeter Governance (Horizon 2), and Federated
  Enterprise Scale (Horizon 3).

Architecture Folder Additions:
- Author core component technical specs ('ingestion.md', 'edge.md',
  'airlock.md', 'vault.md') explicitly matching computational boundaries
  to corresponding workspace package modules.
- Embed native, validated Mermaid.js flowcharts and sequence matrices inside
  component layers to trace local data flow from bare-metal signals to on-disk
  durable journal commits.

Vertical Examples Hardening:
- Deploy fully detailed operational use-case files ('manufacturing/README.md',
  'museum/README.md', 'iot/README.md', 'warehouse/README.md', and
  'developer-workstation/README.md').
- Isolate structural telemetry validation loops, context minimization tax reporting,
  and autonomous coding agent prompt-leak mitigation behaviors per sector.

Root Directory Hardening:
- Author root-level 'VISION.md' manifesto anchoring the philosophical shift
  from central cloud dependence to perimeter boundary governance.
- Transition root-level 'VISION.md' boundary flow map to native, responsive Mermaid.js syntax.
- Corrected the URL for `sovereign-sdk-edge` in `strategy/commercial_strategy.md`.
- Fixed `strategy/commercial_strategy.md` Mermaid.js syntax to render correctly.
- Removed citation text from `strategy/product_thesis_vault.md`.
- Removed duplicated "display" from `architecture/examples/museum/README.md`.
@greptile-apps

greptile-apps Bot commented Jun 30, 2026

Copy link
Copy Markdown

Greptile Summary

This PR adds a comprehensive second-generation documentation suite covering the Sovereign SDK's architecture, strategy, and real-world deployment blueprints — 21 new files totalling 666 lines across architecture/, strategy/, and a new VISION.md manifesto.

  • Architecture docs introduce four boundary specifications (Ingestion, Edge, Airlock, Vault) each with embedded Mermaid diagrams, alongside five industry blueprint READMEs (IoT, manufacturing, museum, warehouse, developer workstation).
  • Strategy docs cover the product thesis, SDK engineering philosophy, commercial model, market validation, and a three-horizon roadmap.
  • Key issues: Component naming is inconsistent across documents — sovereign-sensor / sovereign-sdk-sensor / sovereign-vault are used interchangeably — and the four standalone .mmd diagram files duplicate their corresponding embedded Mermaid blocks verbatim, creating a two-source-of-truth maintenance risk.

Confidence Score: 4/5

Safe to merge as documentation, but the component naming inconsistency should be resolved before the docs are published or shared externally.

The naming inconsistency between sovereign-sdk-* and sovereign-* (e.g., sovereign-vault vs sovereign-sdk-vault) is the most consequential issue — a developer following the roadmap or product thesis to install packages could target the wrong package name. The remaining findings (duplicate .mmd files, stray placeholder symbol, missing fastapi from warehouse diagram) are editorial and do not affect runtime behavior.

strategy/product_thesis.md and strategy/roadmap.md carry the naming inconsistency; the four architecture/diagrams/*.mmd files are exact duplicates of their parent .md counterparts and need a decision on whether to keep or remove them.

Important Files Changed

Filename Overview
strategy/product_thesis.md Uses short sovereign-* package names (no -sdk- infix) inconsistent with other docs that use sovereign-sdk-*; will mislead developers trying to locate packages.
strategy/roadmap.md Mixes naming conventions within the same document — Horizon 1 uses sovereign-sdk-* while Horizon 3 uses sovereign-vault (no -sdk-), compounding the naming inconsistency found across the PR.
architecture/diagrams/airlock_outbound.mmd Exact duplicate of the Mermaid block in architecture/airlock.md; all four .mmd files in this directory have the same duplication issue, creating a two-source-of-truth maintenance problem.
architecture/examples/warehouse/README.md Mentions sovereign-sdk-fastapi as a Failure Moat component in prose but omits it from the topology diagram and from all other example blueprints, creating an inconsistency.
architecture/examples/museum/README.md Well-structured blueprint with a stray (§) placeholder symbol in the execution description of the Local Gatekeeper component.
VISION.md New top-level manifesto introducing the Sovereign Systems philosophy, three pillars, and a high-level Mermaid architecture diagram. Clean and consistent.
architecture/airlock.md New Airlock boundary architecture doc with inline Mermaid diagram; content is clear and consistent with its section.
architecture/edge.md New Edge boundary doc with pipeline topology diagram and three high-assurance invariants.
strategy/commercial_strategy.md Clearly lays out the open-source wedge and commercial monetization model with PyPI links; uses sovereign-sdk-* naming consistently within this file.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    subgraph Ingestion ["Ingestion Boundary"]
        HW[Hardware Pin / Sensor] --> Sensor[sovereign-sdk-sensor\nPoint-of-Genesis Micro-Signer]
    end

    subgraph Edge ["Edge Boundary"]
        Sensor -->|Signed Payload\nLoRaWAN / Serial| EdgeNode[sovereign-sdk-edge\nHMAC Verifier + Sieve]
        EdgeNode -->|Valid| Ledger[sovereign-sdk-ledger\nAppend-Only Local Log]
        EdgeNode -->|Invalid| Quarantine[.quarantine\nForensic Alert]
        EdgeNode -->|Ledger Down| Buffer[Durable JSONL\nOff-Grid Buffer]
        Buffer --> Staging[.staging\nRoll Recovery]
    end

    subgraph Outbound ["Outbound Boundary"]
        App[Local App / Coding Agent] --> Airlock[sovereign-sdk-airlock\nInline Proxy]
        Airlock --> Policy{Policy Gate}
        Policy -->|Block| Fault[Escalation Exception]
        Policy -->|Pass| Sieve[sovereign-sdk-sieve\nContext Minimization]
        Sieve --> API((Frontier Model API))
        Airlock --> Ledger
    end

    subgraph Vault ["Vault Boundary"]
        Memory[Ephemeral Memory] --> HSM[HSM / TPM\nHardware Seal]
        HSM --> Custody[Immutable\nOn-Disk Ciphertext]
        Custody --> Decay[Zero-Knowledge\nCryptographic Decay]
    end

    style Ingestion fill:#f5f5f5,stroke:#999
    style Edge fill:#e8f5e9,stroke:#388e3c
    style Outbound fill:#e3f2fd,stroke:#1976d2
    style Vault fill:#fff3e0,stroke:#f57c00
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    subgraph Ingestion ["Ingestion Boundary"]
        HW[Hardware Pin / Sensor] --> Sensor[sovereign-sdk-sensor\nPoint-of-Genesis Micro-Signer]
    end

    subgraph Edge ["Edge Boundary"]
        Sensor -->|Signed Payload\nLoRaWAN / Serial| EdgeNode[sovereign-sdk-edge\nHMAC Verifier + Sieve]
        EdgeNode -->|Valid| Ledger[sovereign-sdk-ledger\nAppend-Only Local Log]
        EdgeNode -->|Invalid| Quarantine[.quarantine\nForensic Alert]
        EdgeNode -->|Ledger Down| Buffer[Durable JSONL\nOff-Grid Buffer]
        Buffer --> Staging[.staging\nRoll Recovery]
    end

    subgraph Outbound ["Outbound Boundary"]
        App[Local App / Coding Agent] --> Airlock[sovereign-sdk-airlock\nInline Proxy]
        Airlock --> Policy{Policy Gate}
        Policy -->|Block| Fault[Escalation Exception]
        Policy -->|Pass| Sieve[sovereign-sdk-sieve\nContext Minimization]
        Sieve --> API((Frontier Model API))
        Airlock --> Ledger
    end

    subgraph Vault ["Vault Boundary"]
        Memory[Ephemeral Memory] --> HSM[HSM / TPM\nHardware Seal]
        HSM --> Custody[Immutable\nOn-Disk Ciphertext]
        Custody --> Decay[Zero-Knowledge\nCryptographic Decay]
    end

    style Ingestion fill:#f5f5f5,stroke:#999
    style Edge fill:#e8f5e9,stroke:#388e3c
    style Outbound fill:#e3f2fd,stroke:#1976d2
    style Vault fill:#fff3e0,stroke:#f57c00
Loading

Comments Outside Diff (3)

  1. strategy/product_thesis.md, line 660-669 (link)

    P1 Inconsistent component naming throughout docs

    strategy/product_thesis.md uses sovereign-sensor, sovereign-edge, sovereign-sieve, etc. (without the -sdk- infix), while strategy/commercial_strategy.md and strategy/roadmap.md use sovereign-sdk-sensor, sovereign-sdk-edge, etc. strategy/roadmap.md compounds the confusion by mixing both styles within the same document — Horizon 1 lists sovereign-sdk-sensor while Horizon 3 lists sovereign-vault (no -sdk- infix). Developers following these docs to install packages will encounter 404s or install the wrong package if the PyPI names don't match one canonical form.

    Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

  2. architecture/examples/museum/README.md, line 395 (link)

    P2 Stray unresolved placeholder symbol

    The text reads "isolate raw structural metadata parameters (§) from prose descriptions" — the (§) appears to be an unresolved footnote or section-reference placeholder left over from an earlier draft. It reads as an artifact in the published documentation.

  3. architecture/examples/warehouse/README.md, line 458-460 (link)

    P2 sovereign-sdk-fastapi appears in prose but not in diagram or other examples

    The "Failure Moat" section names sovereign-sdk-fastapi as a deployment component, but it is absent from the Mermaid topology diagram above and does not appear in the equivalent section of the IoT, manufacturing, or museum blueprints. A reader consulting the diagram to understand the warehouse deployment will not see this component, creating a documentation gap that could cause misconfiguration.

    Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

Reviews (1): Last reviewed commit: "docs(fix):" | Re-trigger Greptile

Comment on lines +1 to +11
flowchart LR
App[Local App / Coding Agent] --> Airlock[Sovereign Airlock Proxy]
Airlock --> Policy{Policy Gate}
Policy -->|Deny/Block| Fault[Escalation Exception]
Policy -->|Pass/Warn| Sieve[sovereign-sdk-sieve]
Sieve --> ContextMin[Context-Minimized Payload]
ContextMin --> Wire((Frontier Model API))
Airlock --> Ledger[sovereign-sdk-ledger]
subgraph Evidence Generation
Ledger --> Receipt[Local Forensic Receipt Generated]
end No newline at end of file

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Diagram files are exact duplicates of embedded markdown diagrams

All four .mmd files (airlock_outbound.mmd, edge_pipeline.mmd, ingestion_boundary.mmd, vault_lifecycle.mmd) are character-for-character copies of the Mermaid code blocks already embedded in their corresponding .md files. Future updates must be applied in two places, and the two copies will inevitably drift. If these standalone files serve a specific build or rendering purpose (e.g., a documentation site that imports .mmd directly), that intent should be noted in a comment; otherwise, consider removing the duplicates and referencing the .md source of truth.

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!

@kenwalger
kenwalger merged commit 54870d6 into main Jun 30, 2026
1 check passed
@kenwalger
kenwalger deleted the project-docs-v2 branch June 30, 2026 18:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant