NewKW5-230M: the third generation, Kiswahili firstRead
Regnant
Search/Request access

Systems

Our systems. One perimeter.

Self-hosted software for institutions that cannot hand their data, or their decisions, to someone else's servers. Each system runs on machines you control, can answer from a local model, and keeps a record you can check.
Request access Start from the problem

Cordon

Runs your language model on your own hardware, and signs every answer.

Cordon

The catalogue

Each one does one kind of work, and keeps the record of it.

  1. CRDNCordonPrivate inference server“We need AI, but our data cannot go to a public cloud.”Runs your language model on your own hardware, and signs every answer.
    • Answers signed, checkable offline
    • Logged before the model reads it
    • Five modes, laptop to air gap
  2. KNTTKnottWorkflow automation“Approvals run on email and spreadsheets, and nobody can say who approved what.”Automates business workflows on your own servers, and sends the exceptions to a person.
    • One binary, console built in
    • 178 integrations as JSON
    • Four checks before an order is auto-approved
  3. MTTAMattaSemantic data platform“Our systems disagree about what a customer or a supplier is.”Puts your business records into one checked data model, and answers questions with sources.
    • SHACL at the door, quarantine behind it
    • Asserted and inferred, kept apart
    • Read-only MCP server, 11 tools
  4. WLGRNWallgardenBusiness monitoring“We have the data, and decisions still arrive late.”Watches your business systems against your goals, and proposes actions a person approves.
    • Every action waits for a person
    • 158 metrics, each with a direction of good
    • Claims tested against later readings
  5. BBBLYBubblyAI coding agent“Our engineers want an AI coding agent, and the code has to stay in-house.”AI-assisted engineering with the rigor left in: every change planned, tested and reported.
    • Plans, tests, then reports
    • IDE and terminal, one backend
    • Opens pull requests, never merges

How they connect

How they work together. One door to the model.

Knott asks Matta before it decides, Wallgarden reads Matta and starts Knott's workflows, and every system sends its model calls through Cordon as its own client, keeping the signed receipt with its work.
How the systems work together inside one perimeterYOUR PERIMETER · YOUR MACHINES, YOUR KEYS, YOUR RECORDa vendor's cited facts, firstdata-trust measures, as metricsapproved decision starts a workflow, once · queue read backBBBLYBubblyAI coding agentopens a PR; a person mergesKNTTKnottWorkflow automationexceptions go to a reviewerMTTAMattaSemantic data platforma steward approves mappingsWLGRNWallgardenBusiness monitoringa named person approvesits model, over mTLSreceipt on the decisionreceipt beside citationsreceipt as evidenceCRDNCordonTHE ONE DOOR TO THE MODEL · EVERY ANSWER SIGNED01 · mTLSClient identity02 · logged firstPolicy & admission03 · loopbackLocal inference04 · Ed25519Filter & signAUDIT CHAIN · SIGNED, HASH-CHAINEDWritten before the model reads a wordLOCAL MODEL · BOUND TO LOOPBACKKW5-230M, or any model you pullHow the systems work together inside one perimeterYOUR PERIMETERa vendor's cited factsdata-trust measuresKNTTKnottWorkflow automationexceptions go to a reviewerMTTAMattaSemantic data platforma steward approves mappingsWLGRNWallgardenBusiness monitoringa named person approvesBBBLYBubblyAI coding agentopens a PR; a person mergesmodel calls over mTLS · receipts keptCRDNCordon01 · mTLSClient identity02 · logged firstPolicy & admission03 · loopbackLocal inference04 · Ed25519Filter & signAUDIT CHAINWritten beforethe model reads itLOCAL MODELOn loopback:KW5-230M, or yours
Grey: a request on its way to the model. Green: the signed receipt coming back, kept by the system that asked. Each system is enrolled with Cordon as its own client.

Where they run

Laptop to air gap. Five boundaries.

Cordon's deployment modes set where the model runs and what may reach it. A configuration that cannot meet its mode's rules is refused at startup.
The modes in full
  1. 01Outbound allowedLightA laptop or a development server
  2. 02Outbound allowedSovereign CloudYour own cloud account
  3. 03No outboundVaultA regulated data centre
  4. 04No outboundIslandA private network, no management channel
  5. 05No outboundDarkAn air-gapped rack

Tell us the problem. We'll bring the system.

Say what the software should do, which data it can touch and where it has to run. A person replies by email.

Request access By problem