Open. Sovereign. Forever.
The core is open source under an OSI licence. Not open-core theatre, not source-available-with-teeth: the enclosure, the sealing, the fabric, published, buildable, and forkable by you.
Trust is a property you verify
Every security claim on this site resolves to code you can read. Where a competitor says trust us, the licence says check.
If Veldris ever loses its way, take the source and continue without us. That exit right is deliberate. It is what keeps us honest.
A forever company makes itself replaceable. Documentation, build tooling and governance are structured so others could carry the work on.
midgard-app, in the open
The core lives in one repository: github.com/veldris-ltd/midgard-app. It holds three things that fit together: the specification (the Solutions Architecture Documents), the design system, and the implementation, a 62-crate Rust workspace covering the enclosure's core services, Mimir, Forge, Bifrost and Heimdall, with the console UIs and gateway edge in TypeScript.
The implementation is complete and verified. The most recent full acceptance run, at commit 60091a9 in a pinned rust:1.82 container with networking disabled, passed 72 of 72 acceptance criteria and 248 of 248 tests, exit 0, fully air-gapped.
No release is tagged yet: version 0.1.0-rc.1 is prepared, with the release workflow, verify-before-run images and signed air-gap bundle in place, and waits on the signing key ceremony. The first tag ships with its signed SBOM. Until then, the branch to read is main.
Issues → · Releases → · Contributing guide → · Security policy → · Build playbook → · Getting started →
| Repository | veldris-ltd/midgard-app |
| Licence | Apache-2.0 |
| Languages | Rust 80% · TypeScript 16% · Shell 3% |
| Workspace | 62 Rust crates · console UIs · gateway edge |
| Acceptance gate | 72/72 criteria · 248 tests, 0 failed · air-gapped |
| Published | 2026-09-21 · figures as of 2026-09-22 |
If you can build it yourself, why pay?
The core is open because that is what makes the sovereignty claim checkable: anyone can inspect, build and verify it. What customers pay for is the hardened sovereign distribution, the certified, supported, maintained form of that code, with a named party accountable for it.
The trade is the one enterprise Linux has run for decades: the code is free; the assured distribution is the business.
| Signed releases | Assured builds with a named party accountable for them. |
| Security maintenance | Patches and post-quantum updates, indefinitely. |
| Offline updates | Patching and model updates into air-gapped sites. |
| Model governance | Approved models with provenance and licensing records. |
| Deployment tooling | Reusable integrations; each deployment cheaper than the last. |
| Accreditation support | Evidence packs for the buyer's accreditor. |
| Specialist support | Cleared engineers when the buyer needs them. |
Verify it yourself
Verification is not a promise about a future audit; it is a command you can run today. The acceptance gate builds and tests the whole workspace inside a pinned container with the network disabled, against 72 public criteria; the README's Verify the platform section walks through it step by step.
Releases add the second layer: reproducible builds and a signed SBOM per tag, so what runs in your enclosure is enumerable down to the last dependency and licence. "Trusted by leading organizations worldwide" is not a sentence we can write. Verified air-gapped, run it yourself, is.
$ git clone https://github.com/veldris-ltd/midgard-app.git
$ cd midgard-app
$ docker run --network none ... rust:1.82
>>> FULL SUITE PASSED, AIR-GAPPED
acceptance 72/72 · tests 248 passed, 0 failed
commit 60091a9 · toolchain pinned · no networkThe door is open
Issues, patches and audits are welcome at midgard-app/issues. Security findings go to security@veldris.io, see the disclosure policy. This website and the Veldris design system live in the open too; the brand itself is built to be read.
Reproducible from source. Verify it yourself.