We removed the door: designing a platform with no path to public AI
Most vendors bolt a gateway onto the boundary and call it sovereignty. We started from the opposite premise: if the code path to a hosted model does not exist, it cannot leak. This is how that decision shapes everything from the connector layer to the audit log.