Security posture

Private by default. Knolo Knowledge Images are built to live on-prem, in a customer VPC, or air-gapped. We do not treat a vendor’s multi-tenant default region as an acceptable home for privileged files. Offline verification is first-class.

During Bootcamp the corpus stays in the environment named on intake: your VPC, your racks, or a HIVE isolated environment scoped to that week. Access is named, logged, and torn down. Air-gap weeks are planned as air-gap.

Production systems leave an audit path: which Knowledge Image, which sources, which tool, which approval. Agents do not get unbounded write or send. High-risk actions wait for a human gate. V4 ships read receipts. Write and run receipts are the V5 destination.

HIVE is not a compliance certification mill. We will not claim FedRAMP, IL5, or defense authorizations we do not hold. If your constraint requires them, say so on intake — we would rather refuse than improvise.

Security questions: talk to engineering.