The Manifest Node
Edge: Active 128 ms Zero-Trust Secured
Deploy Node
§01Thesis

Sovereign Infrastructure Appliance

The Era of Rented Cloud
Infrastructure Is Over.

Turnkey bare-metal sovereign estates. Zero cloud compute markup. Sub-millisecond local database transactions. Complete asset and identity custody — the keys, the disks and the domain stay on your side of the wire.

Request Node Deployment View Architectural Manifest
Edge round-trip · rolling 90 s ms
DB heartbeat 0.20ms
Inbound ports 0open
Sentinel RAM 33.1MB
Hosting overhead $0/mo
§02Engine

Hardware & Architecture Spec Sheet

Four components. No hypervisor, no container runtime, no rented tenancy.

Every process runs natively under the host scheduler. Each figure below is measured on a production estate, not projected from a datasheet.

Executive Briefing · Architectural Memo 01 Why the lease ends 0:00 / 1:32

Database Engine

Transacting

PostgreSQL 17 · PostgREST

Local heartbeat
0.20 ms BEGIN/SELECT/COMMIT
Bind address
127.0.0.1:5432
REST surface
127.0.0.1:3000
Row-level security
Enforced

Ingress Layer

Registered

Zero-Trust Tunnel · Sovereign Router

WAN-facing ports
0
Connection
Outbound-only
Ingress rules
10 active
Origin proof
Via header, per response

Sentinel Daemon

Sweeping

"The Watcher" · Native async inspection

Resident memory
33.1 MB private
Browser dependencies
None
Driver binaries
0
Sweep interval
60 s

Multi-Tenant Routing

Isolated

Domain & schema custody

Hot-add latency
~15 ms to first byte
Restart required
None
Tenant page median
13.7 ms
Cross-tenant read
404 by construction

Origin Proof Terminal · Live Wire Inspection

Idle 
// press TRACE ORIGIN WIRE to inspect the connection to this origin.
// on the node itself the trace reads live; elsewhere it renders a reference specimen.

Awaiting instruction

§03Paradigm

Legacy Cloud vs The Manifest Node

You are not buying capacity. You are ending a lease.

Dimension The Rented Cloud The Manifest Node
Cost structure Monthly compute rent, metered egress, price rises you do not set Capital purchase, then $0/mo hosting overhead
Custody Vendor holds keys, disks and the ability to suspend you Absolute key custody — secrets generated and sealed on the node
Tenancy Shared silicon with unknown neighbours Hardware-level isolation, single occupant
Data path Regional round-trips to a managed endpoint, 135 ms typical Native socket speed on loopback, 0.20 ms committed
Verification Headless browser scraping, 300–450 MB per check Protocol-level inspection, 33 MB resident
Availability Cold-start penalties and scale-to-zero latency cliffs Always resident, no cold path to pay for
Exit Lock-in by proprietary services and egress fees The estate is already yours — nothing to migrate off
§03.5Auditor

The Cloud Tax Auditor

Deterministic 36-month capital loss audit.

Rented hypervisors versus a sovereign node. Enter your own line items; the arithmetic is visible, runs in your browser, and leaves the page nowhere.

Current rented estate

$/mo
$/mo
GB
$/mo

Monthly rented total $1,625
Sovereign node $6,800 CapEx + $15/mo raw transit

36-month position

36-month outflow $58,500 0% residual equity · 100% opex loss
Sovereign capital retained $51,160 Balance sheet equity
Amortization horizon Breakeven in 4.2 months

Sovereign 36-month cost $7,340 · figures are yours, not ours — nothing is transmitted.

§04Deploy

Deployment Retainer & Onboarding

Sovereign estate deployment for institutional and corporate operators.

Each engagement ends with a handover: the running estate, the acceptance suite that proves it, and the architectural manifest that documents it. Vendor accounts are suspended, never deleted, on a dated observation window.

Tier 01 · Managed Ingress

Managed Ingress

Your perimeter moves first. Zero-trust tunnel, edge custody and DNS control, with the origin still where it stands today.

  • Outbound-only tunnel, zero open inbound ports
  • Zone migration with mail and verification records preserved
  • Per-response origin proof and TLS attestation
  • Timestamped zone snapshots as the rollback path

EngagementFixed scope · 2–3 weeks

Flagship Appliance

Tier 02 · Turnkey Node

Turnkey Node Deployment

The complete appliance. Bare-metal database, REST surface, object custody, sentinel and router, provisioned and proven on your hardware.

  • Native database and REST engine on loopback
  • Full data and object repatriation with parity verification
  • The Watcher sentinel under supervised scheduling
  • Acceptance suite delivered as a script you re-run
  • Code vault mirror and cold-backup runbook

EngagementQuoted on estate scope

Tier 03 · Private Gateway

Private Gateway

Multi-tenant operation for firms that host their own clients. Domain and schema isolation under one router you own.

  • Hostname, directory and schema per tenant
  • Hot-added tenancy with no restart
  • Cross-tenant isolation asserted in the suite
  • White-label edge and executive telemetry

EngagementRetained · quarterly

Open a deployment inquiry

Scoping starts with an inventory of what you currently rent: data, objects, identity, scheduled work and domains. That inventory sets the tier and the timeline.

Selected tier Turnkey Node Deployment
Request Node Deployment Review the Spec Sheet