On-Premise and VPC Strategy (Air-Gapped Ready)

Enterprise Architecture Document - Confidential

Although ABS Core v10.1.5 is optimized for the Edge (Cloudflare), the architecture based on WASM (WebAssembly) and Docker allows fully private deployments.

---

1. Deployment in Private VPC (AWS/Azure/GCP)

For clients requiring data to never leave their perimeter:

• Dockerized Shield: The worker can be executed in containers (ECS/EKS) using runtime shims (e.g., Miniflare or Node instances).
• Persistent Storage: Support for external PostgreSQL/Redis instead of D1/KV.
• Advantage: The client maintains the baseURL abs.company.internal, ensuring internal network latency and data sovereignty.

2. Air-Gapped Mode (Government/Defense)

The WASM kernel is autonomous and contains the compiled policies:

• Does not require external connection to validate AICCP rules.
• The Secret Vault can consume secrets from a local HashiCorp Vault or AWS Secrets Manager.

3. Kubernetes Helm Chart

We have on the roadmap the release of an official Helm Chart for v3.6, simplifying horizontal scalability in enterprise clusters.

---

Verdict: The buyer acquires an asset that is not held hostage by Cloudflare, but a portable security engine.