Public SurfaceEvidence-first read planeNo hidden production claim

User RouteScoped capsule workspaceGlobal authority blocked

Admin ControlEditorial + runtime governanceRoot powers excluded

Root-ControlLocal/hardware gatedOffline release authority

P6.7-SOVEREIGN-HOMEPAGE-MASTER-REDESIGN

XPScerpto Sovereign Execution Portal

A sovereign cryptographic platform front page for architecture, authority boundaries, user/admin/root planes and evidence-first trust signals — with no external dependency and no unsupported production claim.

platformplatform.apiHWDomains

Architecture Evidence Live Demo Open live demo

Evidence-bound claimsNo native claim unless attachedAdmin-editable homepageNo CDN / no external script

NO_CDNlocal-only assets

FULL_NAVcomplete public routes

TRUTH_GATEproduction claim locked

Runtime Truth Contract

backend_realTrue

backend_modedetached

native_runtime_attachedFalse

production_readyFalse

Platformplatform.apiHWDomains

production_ready is computed by backend policy, not by editorial toggle.

Sovereign Authority Chain

Platform → platform.api → HW → Domains

The front page now makes the sovereign authority path visible before any marketing claim.

01Platform

external world boundary, provider gating, public facts

02platform.api

filtered authorized facts and sealed runtime claims

03HW authority

capability truth, routing envelopes and native attachment status

04Domains

SIMD / Base64X / Integrity / PQC / FHE consume capability capsules

Module Constellation

Sovereign module constellation

The homepage shows the platform as a governed system, not as disconnected feature cards.

surface-readyPlatform

public boundary and provider closure

authority-gatedHW

runtime intelligence authority

HW-authorized onlySIMD

sealed execution route

truth-gatedBase64X

demo-capable unit surface

evidence-firstIntegrity Fabric

seal, transcript and evidence story

not final productionPQC

post-quantum fabric status

status-onlyFHE

foundation/status posture only until real engine closure

gatedRuntime

native adapter gate

Evidence Wall

The page foregrounds what is proven, gated, or explicitly not production-ready.

backend_realtrue

native_runtime_attachedfalse

production_readyfalse

backend_modedetached

NO_CDNlocal CSS/JS only

NO_EXTERNAL_FONTsystem font stack only

NO_EXTERNAL_SCRIPTno external script authority

SEALED_ASSET_MANIFESTstatic asset hashes sealed

FAKE_TELEMETRY_BLOCKEDbackend truth contract wins

FINAL_PUBLIC_PRODUCTION_RELEASENO

Studio-grade control plane

Sovereign portal command center

A production-style interface for public review, editorial control and evidence inspection.

Truth-gated runtime

backend_real is separated from native_runtime_attached and production_ready.

Advanced Website Studio

Pages, blocks, SEO, language content, navigation, footer, theme and evidence are managed from /admin.

Live runtime demo

A backend-backed demonstration emits JSON evidence without claiming native C++ attachment.

EU presentation posture

Strong public narrative with clear limits: presentation-ready, not technical-audit-final.

Public interfaceresponsive, multilingual, evidence-aware

Admin studiopages, blocks, SEO, theme, preview, history

Runtime truthbackend_real and native status stay separate

Separated Control Planes

User / Admin / Root Plane Map

The landing page now explains which plane can do what and which powers are intentionally absent.

PUBLIC_READ_ONLYPublic

read-only pages, evidence, docs and truthful runtime banners

SCOPED_SANDBOX_AUTHORITYUser Workspace

scoped capsules and bounded live-demo requests

OPERATIONS_GOVERNANCE_AUTHORITYAdmin Control

editorial workflow, evidence manager and runtime governance view

LOCAL_ROOT_RELEASE_AUTHORITYRoot-Control

local/VPN/hardware-gated release authority, not normal admin power

Authority lineage

Four separated control planes

Public, app, admin and root-control are intentionally split to prevent governance collapse.

Publicevidence-facing read surfacesealed

Appscoped sandbox execution workspacesealed

Admincontent/runtime/threat governancesealed

Root-Controllocal offline release authoritysealed

Homepage Readiness Dossier

Homepage readiness dossier

A sovereign front page must sell confidence without lying about runtime proof.

Navigation complete

Home, sovereignty, architecture, modules, security, performance, evidence, EU readiness, docs and contact.

Executive hierarchy

Hero, authority chain, module constellation, evidence wall and plane map are visible without scrolling through admin-only context.

Sovereign dependency posture

No CDN, no external font, no remote script and no third-party visual dependency.

Truth preserved

REAL_NATIVE_RUNTIME_EXECUTION remains gated until the native adapter exists.

Evidence-first UI

Evidence-first experience

The portal renders truth, lineage, capsules and rejection state before marketing claims.

NO_FAKE_TELEMETRYenforced

ROLE_BOUNDARIESenforced

ROOT_AUTHORITYisolated

READY_FOR_P7native runtime next

Authority visual

Home

This portal distinguishes the real Python backend from the native C++ runtime. Claims remain gated by evidence and runtime truth checks.

Platform → API

External facts enter through the public/backend boundary only.

HW authority

Native runtime is not asserted unless the configured probe and evidence allow it.

Domains

SIMD/Base64X/Integrity/PQC pages consume evidence-bound status, not local claims.

Evidence

Public proof panels read from the evidence manager and runtime truth contract.

Truth contract

No unproven production claim

production_ready is computed from native runtime attachment plus qualifying evidence; it is not an editorial toggle.

Evidence-first UI

Runtime Adapter Dossier

Real native execution or explicit fail-closed state

Adapter protocol--portal-health, --portal-units, --portal-run-unit, --portal-attack-storm and --portal-evidence must return JSON with native_runtime_attached=true.

No fake runtimePython fallback execution is disabled by policy for live unit claims.

Evidence bindingNative runs register sealed evidence only when the adapter proves native attachment.

SaaS Control Plane

Scoped projects, API keys, capsules and audit traces

Projects

Per-user project records for execution grouping.

Capsules

Every accepted or rejected request creates a verifiable capsule.

API governance

Scoped keys carry explicit capabilities and quotas.

Evidence Center

Public proof without production overclaim

Runtime truth, asset seals, language parity, security chain status and deployment readiness are exposed as verifiable reports.