01
When the cloud is the adversary
Every request routed through foreign infrastructure reveals what an institution is monitoring, planning, or concerned by. Running inference inside your own perimeter removes that exposure.
Your datacan't leave.What runs?.
Regnant builds intelligence institutions own outright: the weights, the hardware spec, the audit trail. On-premise, air-gap capable, and fluent in the language you actually govern in.
0
Instruments
Four districts, handed over whole
0
Containment layers
Hardware, firmware, OS, application
0.0B
Swahili tokens
KW5-Lite, trained from scratch
0
Bytes of egress
Zero telemetry, architecturally
FIG 00 / 08Everything inside one perimeter, and the school outside it
SHEET 01 / 06THE THREE CONSTRAINTSIntake
Three constraints
we solve for.
Institutions don't shop for AI. They arrive with constraints that rule out the public cloud: a regulatory mandate, a liability the board carries, or a working language the prevailing stack was never built to handle.
01
Data that can't cross the border. Models that can't touch foreign servers.
CordonInfrastructure
Complete sovereign stack. Hardware root of trust to encrypted weights to air-gapped deployment. Your institution's perimeter is the hard boundary. What runs inside never phones home.
02
Decisions that carry liability can't be made on vibes and probabilities.
WallgardenUAMUZI
Deterministic decision systems that rehearse outcomes before committing capital or policy. What it models, you interrogate; what you approve, it executes; what it executes, you own.
03
The working language of government isn't English. Translation breaks institutional precision.
LUGHALanguage Models
A research programme aimed at models that hold Swahili, Amharic, and the other languages institutions govern in at the weights, rather than reaching them through a translation layer. Current release: KW5-Lite, a 109.5M parameter foundation model trained from scratch on 2.1B Swahili tokens, with instruction-tuned variant.
Research
Research papers will appear here when published.
SHEET 02 / 06FAILURE MODESWhy it matters
Three failures
the cloud
cannot fix.
Not shortcomings of a vendor. Properties of the arrangement.
02
When the model cannot read the language
A decision-maker briefed by a system that can't reliably work in their working language is constrained by the tool. Language proficiency is not optional in governance.
03
When the decision cannot be undone
Infrastructure, procurement, and public-health decisions unfold over decades. Model the alternatives before committing.
SHEET 03 / 06THE PORTFOLIO8 instruments
Eight systems.
Handed over
whole.
Four districts. Cordon is the ground; four systems stand on it, two hold their own footing inside the perimeter, and the classroom runs outside it entirely.
Cordon: private inference. The ground everything else stands on.
01/08Sovereign Infrastructure
Cordon
Private Inference Engine
Exfiltration is architecturally impossible.
Our AI cannot touch the public cloud. What do we run?
02/08Sovereign Infrastructure
Knott
Workflow Orchestration
Automation you can actually be accountable for.
Every automated step has to survive an audit. Who approved this one?
03/08Sovereign Infrastructure
Matta
Enterprise Semantic Platform
A semantic platform, not a file.
Our systems can't agree on what the data means.
04/08Sovereign Infrastructure
SeeP
Auditable Operations Agent
The agent cannot execute a change.
Who is on call at 3am, and what stops it breaking production?
05/08Decision Intelligence
Wallgarden
Autonomous Business Operating System
The decision arrives before the problem does.
Information is everywhere. Why are decisions still late?
06/08Decision Intelligence
IIN
Industrial Intelligence Platform
Hear the failure before the floor does.
Every machine is talking. Who hears the failure coming?
07/08Engineering
Bubbly
Self-Hosted Coding Agent
Agentic engineering, under containment.
Our engineers want AI coding agents. The code can't leave.
08/08Education
Milkshake
Sovereign Education Ecosystem
The whole classroom, in your language, offline.
What does sovereign AI mean for a school with no internet?
SHEET 04 / 06COMMON GROUNDEvery instrument
What every
system shares.
01
Handed over whole
Weights, hardware spec, and architecture included with every system. Nothing is rented back, nothing phones home.
02
Developer-ready platform
SPARQL, GraphQL, REST, and native SDKs across the stack.
03
Audit-first design
Every decision, approval, and transition lands in a tamper-evident, offline-verifiable log.
Included, per instrument
- Weights included
- Hardware spec included
- Air-gap ready
- Tamper-evident audit
- Zero telemetry
- Runs in your perimeter
Developer surface · SPARQL · GraphQL · REST · native SDKs
import cordon
from regnant import attest
session = cordon.open(
perimeter="local",
audit=attest.chain()
)
Containment enforced in hardware, not policy.
Built by engineers from
DIT
Dar es Salaam Institute of Technology
UDSM
University of Dar es Salaam
CoET
College of Engineering and Technology
SHEET 05 / 06DEPLOYMENTPostures
Choose your
perimeter.
Posture 01
Air-Gapped
Fully offline. No internet required. Models updated via secure media.
Best for: Governments, central banks, defence, critical infrastructure.
Posture 02
Private Network
Runs on your LAN. Data stays on-premise; updates sync over a controlled tunnel.
Best for: Standard enterprise and institutional deployments.
Posture 03
Hybrid
Core inference on-premise. Heavy training offloaded to a private cloud you control.
Best for: Large organisations with dedicated IT teams.