SieF OS

What it is

SieF OS is a secure Linux-based environment that implements the universal Brain, Engine, Judge and Fleet core and runs approved framework workloads on hardware the customer controls. Domain behaviour arrives as versioned framework extensions; it is never patched into the operating system.

Deployment modes

• Air-gapped. No network interface is bound for operation. Administration happens at a local console, and transfers use controlled offline media.
• Isolated. The site runs on the customer's own network. Outbound access is unavailable by default and limited to approved Gateway adapters when authorised.
• Dedicated hosted. A dedicated, attested server in a third-party data centre under customer ownership or control. This is not a shared Lanvex cloud.

Who holds authority

The customer appoints the administrator, and the administrator approves installation, update and removal. The design excludes routine phone-home telemetry and unrestricted remote vendor access. Support happens through customer-selected bundles and approved local technical service.

Trust requirements

The design specifies signed boot and release processes, offline root key control with a two-person hardware-token ceremony, release metadata with freshness rules, publisher and Lanvex signatures on applications, and customer-owned vaults.

These are specified controls. They are called verified when they are implemented and independently tested, and not before.

Licensing and lifecycle

Licensing is per GPU per year with a server minimum, in one-, three- and five-year terms, bound to hardware and site.

At licence expiry the operating system keeps running: updates and new installations stop. An expired application licence stops that application and preserves its sealed vault. Expiry never deletes customer data.