Sovereign institutional and HR software

FORGE

Beta · roadmap complete, audits cleared

Your employees’ Social Security numbers shouldn’t live in a database you don’t own. Full stop.

What It Is

FORGE — the Federated Organizational Record & Governance Engine — is sovereign HR infrastructure. Employee PII, equity, salary, and vesting live only on machines the organization controls, encrypted field by field; identity, authorization, approvals, and federated sync are all mediated by zero-knowledge proofs.

Every sensitive change becomes an encrypted diff in an approval queue that has no owner bypass — the four-eyes control applies to the founder too.

Why It Exists

It eliminates the trust requirement in SaaS HR: constitutional invariants — content-blind relays, append-only audit, instant-quarantine offboarding — enforced by architecture, not policy.

What Exists Today

  • 11-phase roadmap complete — every phase checked
  • All CRITICAL and HIGH security-audit findings resolved
  • Real Groth16 proofs end-to-end with no placeholder bypass
  • Field-level encryption including financial fields; a content-blind, TLS-mandatory sync router
  • Desktop application with cross-platform release packaging; federated sync proven in CI with live router smoke tests

Current Operational Boundary

Beta · roadmap complete, audits cleared

Beta: functionally complete and audit-cleared, hardening toward 1.0.

Position in the Ecosystem

  • Part of the sovereign infrastructure lineage that began with Annex: zero-knowledge identity, field-level encryption, content-blind relays
  • Dual USD/MCR denomination
  • KI Portal is the internal proving ground for the domain FORGE commercializes

Engage