SW Sovereignware™ Partner inquiries

The sovereign AI operating system

Sovereignware™ runs inside the firm, not on someone else's cloud.

The on-premises AI operating system for regulated firms. Marlowe, Kar3n, and Tec agents orchestrate across the patent-pending Trinary Bound™ three-node topology. Your client data, your privileged work product, your patient records — processed locally, on hardware physically resident in your office.

U.S. Patent App. 19/458,785 · Patent Pending · Engineered for Apple Silicon, NVIDIA & Dell

See the hardware → Patent + licensing
Ark Citadel — the flagship Sovereignware™ briefcase, containing the complete Trinary Bound™ three-node topology
Ark Citadel · Flagship HecTec Ark™

The HecTec Ark™ family

Two products. One sovereign stack.

ArkNode travels with the principal. Ark Citadel stays at the firm — running Sovereignware™ Citadel. Both are sealed sovereign AI hardware, owned outright by the client, engineered for the Trinary Bound™ topology.

ArkNode — the portable single-SSD sovereign vault
Portable · Single node

ArkNode

The principal's vault, traveling.

A single-SSD enclosure carrying the −1 Iron Vault layer. Travels with the principal, partner, or steward. Reaches home through the patent-pending Trinary Tunnel™ — by client approval only.

  • Thunderbolt 4 / USB-C native
  • Encrypted at rest · HMAC-handshake retrieval
  • Pairs to a home Ark Citadel
  • Field-replaceable, client-owned
Ark Citadel — the flagship sovereign AI briefcase
Flagship · Full topology

Ark Citadel

The stronghold inside the firm.

A briefcase chassis containing the complete Trinary Bound™ topology — compute host plus the +1, 0, and −1 nodes — pre-installed with Sovereignware™ Citadel. The full sovereign AI stack in one heirloom-grade carrier.

  • Compute + 3 vault nodes · Thunderbolt fabric
  • Sovereignware™ Citadel pre-installed
  • Hardware-isolated +1 / 0 / −1 boundary
  • Patent pending · US 19/458,785

Sovereignware™ — the operating system

Three agents and an operator interface. All running on iron you own.

The Sovereignware™ OS hosts the agents that do the work — research, retrieval, threat isolation — and exposes the Citadel as the operator surface. Every action that touches a client or a regulator pauses for human approval. Full leverage, zero unsupervised exposure.

M

Marlowe

Sovereign Intelligence · 0 Layer

Math-indexed semantic search across your knowledge base via vector embeddings. Knows your archive without ever reading the originals.

K

Kar3n

Cryptographic Archive · −1 Layer

Stores originals with SHA-256 IDs and HMAC-SHA256 access signatures. Releases documents only through verified handshake. Immutable ledger on every read.

T

Tec

Security Perimeter · +1 Layer

Bidirectional immune system. Inbound: six-vector threat scan on +1 hardware. Outbound: PII + privileged content stripped before any request leaves your network.

C

Citadel

Operator Interface

The dashboard your stewards live in. Case Shelf, evidence basket, Marlowe chat, Karen librarian — every workflow under one operator surface.

Architecture

From ingestion to sovereign holding, in four moves.

Mixed data enters. The triage layer routes it across +1 / 0 / −1 in parallel. Each tier processes inside its own hardware boundary. The unified stream settles into the Secure Holding Zone. Real four-phase choreography — not a marketing diagram.

Open full-screen →

Hardware substrate

Apple Silicon today. NVIDIA and Dell native.

Trinary Bound™ is hardware-agnostic at the compute layer. Three Thunderbolt-attached SSD nodes plus a compute host. The reference design today uses Apple Silicon. The same fabric works on NVIDIA DGX Spark and Dell Pro Max / PowerEdge.

Reference today

Apple Silicon

Mac M4 / M5 as compute host. Three OWC 1M2 SSD enclosures as the +1 / 0 / −1 nodes. CalDigit Thunderbolt fabric. Sovereignware™ pre-installed. The configuration shipping into client firms today.

Native target

NVIDIA

DGX Spark / Project DIGITS as compute host. Same Thunderbolt fabric, same three vault nodes. Complementary to NVIDIA Confidential Computing and BlueField — Trinary Bound adds cross-node physical isolation on top of in-box cryptographic isolation.

Native target

Dell

Pro Max workstation or PowerEdge XE server as compute host. Same topology. Turns a generic Dell AI workstation into a HIPAA-aligned, attorney-privilege-preserving sovereign AI deployment a regulated firm can buy off a Dell quote.

Patent · Licensing

Patent pending. Available to license.

The Trinary Bound™ three-node topology is covered by U.S. Utility Patent Application 19/458,785, filed with the United States Patent and Trademark Office. The Trinary Tunnel™ sovereign cryptographic tunnel is also patent-pending. Inventor: Hector Cabrera.

U.S. Utility Patent Application 19/458,785

Application No.
19/458,785
Filing Date
24 January 2026
Priority Date
27 November 2025

We are actively engaging with hardware partners — AI workstation OEMs, on-premises AI server makers, and channel partners selling into regulated verticals — for reference-design licensing and bundled-OS configurations. The right partnership delivers a vertical-ready sovereign AI workstation that ships pre-installed with Sovereignware™, in the Trinary Bound™ topology, on Dell or NVIDIA hardware. One SKU. Sellable Monday morning.

Book a Steward call →

Deployment + hardware partners

Sovereignware™ is deployed by licensed Stewards.

Active · Central Florida

DMH Florida — primary deployment partner

DMH Florida installs the Ark Citadel inside client firms — family offices, law firms, medical practices — under the named-Steward model. Every Steward is a licensed Hectec Sovereign AI Engineer. No offshoring. No subcontracting. The same person who installs your system is the person who maintains it.

Visit dmhfl.com →
Open

Hardware partner inquiries

For AI workstation OEMs, on-premises AI server makers, and channel partners interested in licensing the Trinary Bound™ topology or bundling Sovereignware™ with your hardware — reach a Steward directly.

Book a Steward call →