AlgoVoi Suite Store

Payment Rails: SQLite-first (x402 / MPP / AP2 / A2A)

algovoi-rails-sqlite-first

Self-hosted multi-protocol payment rails you run yourself: the four agentic payment protocols across seven chains, post-quantum signed throughout, and live in five minutes on SQLite.

• Four protocols on one engine and one port: x402, MPP, AP2, A2A
• Seven chains: Algorand, Base, Stellar, Voi, Hedera, Solana, Tempo
• Settlement and finality verification per chain: right recipient, amount, asset, and finalised
• Full keystone estate: passport-to-journey lifecycle, federation validator, zero-knowledge receipts, delegation
• Post-quantum Substrate-2 core, Falcon-1024 signed throughout
• Three-layer defence, active by default: a fail2ban perimeter firewall driven by runtime signals, Substrate Guard Pro input-bounds admission, and Edge Sentinel IP / geo / ASN / rate / replay protection, every decision Falcon-1024 signed and offline-verifiable
• Operator Security console in the control panel: view banned IPs and pause or resume each layer, every change audit-logged
• Multi-tenant control plane with an operator panel and per-tenant isolation
• Agent-to-agent Mesh settlement, included and federation-allocated: create members in the panel and allocate them post-quantum Mesh licences at no per-agent fee, each bound to its own agent DID so it settles only transactions it is a party to, every settlement recomputing offline as one content-addressed reference anyone can check
• Offline-verifiable, no-PII signed settlement and payout receipts
• SQLite-first: live in five minutes, upgrade to PostgreSQL by import
• One encrypted, offline-verifiable .algv deliverable, air-gap capable, no PyPI

A one-time buy-out on a perpetual licence: one key installs the full multi-tenant rails, the control plane with operator panel, agent-to-agent Mesh settlement you allocate to your own federation members at no extra cost, and the Keystone and Substrate-2 core. SQLite to PostgreSQL, self-hosted, air-gap capable, no PyPI.

Verifiable Compliance Suite

algovoi-verifiable-compliance-suite

The verifiable long-term data estate for regulated sectors: health, insurance, defense, and any records that must stay provably intact and confidential for decades. Documents are preserved write-once in a tamper-evident, content-addressed archive, encrypted at rest, RFC-3161 timestamped, and offline-verifiable with no vendor in the loop. Post-quantum signing (Falcon-1024 and ML-DSA-65) keeps the evidence verifiable as cryptography evolves, the durability that long-lived and defense records require. Add records and remove them the compliant way: a legal hold blocks deletion, then a signed erasure tombstone leaves proof the record existed while the content is irrecoverable. The Compliance Command Center re-verifies every signed chain offline and shows one proven posture, every figure recomputed, not asserted. Air-gap capable, no PyPI. The payment-rails estate ships separately as the Payment Rails bundle.

• Complete on-prem estate: 20 post-quantum signed components, one licence
• Long-term preservation: write-once, tamper-evident, content-addressed archive
• Post-quantum signing (Falcon-1024, ML-DSA-65): evidence stays verifiable for decades
• RFC-3161 timestamping; legal and e-discovery holds; signed erasure tombstones
• Encrypted at rest, offline-verifiable, air-gap capable, no PyPI
• Bring-your-own-key custody: HSM, KMS, HashiCorp Vault, PKCS#11
• Compliance Command Center: manage records, legal holds, retention and disposition, local accounts, and every signed evidence stream from one console, with one proven posture and every figure recomputed not asserted
• Bulk volume importer: bring an existing document estate in at scale from a folder, SFTP, or rsync, batch-signed at thousands of documents per second with constant memory, one signature per batch, or per-document for maximum granularity; drive it from the console Import page or the CLI
• Portable sealed .acv containers: ML-KEM-1024 sealed to a named recipient, revoked and recovered from the console, with optional opaque names that keep filenames out of the header
• Operator-controlled updates: push future upgrades from the console, offline by default, signed and verified before install, air-gap friendly
• Hardened web console: strict content-security-policy with anti-clickjacking and anti-sniff headers, cookies marked secure over HTTPS, sign-in brute-force backoff, and a step-up re-check before sensitive actions
• Two-factor sign-in (optional): authenticator-app TOTP with QR enrollment, opt-in then required, no SMS or email so air-gap friendly, every enrollment and sign-in written to the signed audit chain
• Live SIEM audit forwarding (optional): stream the signed audit chain to your SOC over syslog (RFC 5424 / CEF) or webhook, each record tied back by seq and sha256; off unless configured
• Signed supply-chain provenance: a CycloneDX 1.5 and SPDX 2.3 Software Bill of Materials plus a SLSA v1 build attestation signed with the AlgoVoi release key, all verifiable offline; load the SBOM straight into Dependency-Track, Grype, or Trivy
• Verifiable disaster recovery: a signed key-ceremony and backup-restore attestation chain (genesis, split custody, rotation, recovery drill) hash-linked and offline-verifiable, plus a documented RTO and RPO runbook shipped in the bundle
• Evidence supporting HIPAA, GDPR, eIDAS, and long-term retention mandates

One licence installs the whole estate: substrate2 core, Command Center and control plane, Records Vault, Recovery Vault, Archive Auditor, the doc-archive engine with HSM, KMS, Vault and S3 key custody, Compliance Gate, Retention Chain, Sanctions Monitor, Travel Rule, and the Verifiable Audit Log, plus the keystone lifecycle evidence and a clean-box validation gauntlet. Air-gap capable, no PyPI.

Records Vault

algovoi-records-vault

Regulated-records preservation for health and legal: RFC-3161 trusted timestamping, a tamper-evident read-access audit log, and legal and e-discovery holds over a post-quantum verifiable archive. Bring-your-own-key custody (HSM, KMS, Vault); installs fully air-gapped, no PyPI. Offline-verifiable evidence supporting HIPAA, GDPR and eIDAS.

One token installs the whole stack: Verifiable Archive + S3 + Archive Auditor + HSM/KMS/Vault key-custody adapters — fully air-gap (no PyPI).