Reference Architectures
Each architecture documents where Vallum fits in a real deployment stack, with trust boundaries, authorization flows, evidence flows, and deployment limitations clearly marked.
Published (50)
Tenant Scoped Api Authorization — Saas
saas · TESTED · SUPPORTED EVIDENCE
Tenant Scoped Api Authorization — Private cloud
private-cloud · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Tenant Scoped Api Authorization — Hybrid
hybrid · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Tenant Scoped Api Authorization — On premises
on-premises · SUPPORTED · INTEGRATION REQUIRED
Tenant Scoped Api Authorization — Air gapped
air-gapped · SUPPORTED · RESEARCH
Evidence Package Certification — Saas
saas · TESTED · SUPPORTED EVIDENCE
Evidence Package Certification — Private cloud
private-cloud · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Evidence Package Certification — Hybrid
hybrid · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Evidence Package Certification — On premises
on-premises · SUPPORTED · INTEGRATION REQUIRED
Evidence Package Certification — Air gapped
air-gapped · SUPPORTED · RESEARCH
Offline Verification — Saas
saas · PILOT · SUPPORTED EVIDENCE
Offline Verification — Private cloud
private-cloud · PILOT · PARTIAL TECHNICAL SUPPORT
Offline Verification — Hybrid
hybrid · PILOT · PARTIAL TECHNICAL SUPPORT
Offline Verification — On premises
on-premises · PLANNED · INTEGRATION REQUIRED
Offline Verification — Air gapped
air-gapped · REFERENCE_ONLY · RESEARCH
Artifact Provenance — Saas
saas · PILOT · SUPPORTED EVIDENCE
Artifact Provenance — Private cloud
private-cloud · PILOT · PARTIAL TECHNICAL SUPPORT
Artifact Provenance — Hybrid
hybrid · PILOT · PARTIAL TECHNICAL SUPPORT
Artifact Provenance — On premises
on-premises · PLANNED · INTEGRATION REQUIRED
Artifact Provenance — Air gapped
air-gapped · REFERENCE_ONLY · RESEARCH
Certificate Lifecycle — Saas
saas · TESTED · SUPPORTED EVIDENCE
Certificate Lifecycle — Private cloud
private-cloud · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Certificate Lifecycle — Hybrid
hybrid · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Certificate Lifecycle — On premises
on-premises · SUPPORTED · INTEGRATION REQUIRED
Certificate Lifecycle — Air gapped
air-gapped · SUPPORTED · RESEARCH
Public Verification — Saas
saas · TESTED · SUPPORTED EVIDENCE
Public Verification — Private cloud
private-cloud · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Public Verification — Hybrid
hybrid · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Public Verification — On premises
on-premises · SUPPORTED · INTEGRATION REQUIRED
Public Verification — Air gapped
air-gapped · SUPPORTED · RESEARCH
Evidence Binder Delivery — Saas
saas · PILOT · SUPPORTED EVIDENCE
Evidence Binder Delivery — Private cloud
private-cloud · PILOT · PARTIAL TECHNICAL SUPPORT
Evidence Binder Delivery — Hybrid
hybrid · PILOT · PARTIAL TECHNICAL SUPPORT
Evidence Binder Delivery — On premises
on-premises · PLANNED · INTEGRATION REQUIRED
Evidence Binder Delivery — Air gapped
air-gapped · REFERENCE_ONLY · RESEARCH
Multi Tenant Isolation — Saas
saas · TESTED · SUPPORTED EVIDENCE
Multi Tenant Isolation — Private cloud
private-cloud · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Multi Tenant Isolation — Hybrid
hybrid · SUPPORTED · PARTIAL TECHNICAL SUPPORT
Multi Tenant Isolation — On premises
on-premises · SUPPORTED · INTEGRATION REQUIRED
Multi Tenant Isolation — Air gapped
air-gapped · SUPPORTED · RESEARCH
Agent Inventory Attestation — Saas
saas · PILOT · SUPPORTED EVIDENCE
Agent Inventory Attestation — Private cloud
private-cloud · PILOT · PARTIAL TECHNICAL SUPPORT
Agent Inventory Attestation — Hybrid
hybrid · PILOT · PARTIAL TECHNICAL SUPPORT
Agent Inventory Attestation — On premises
on-premises · PLANNED · INTEGRATION REQUIRED
Agent Inventory Attestation — Air gapped
air-gapped · REFERENCE_ONLY · RESEARCH
Ci Cd Evidence Provenance — Saas
saas · PILOT · SUPPORTED EVIDENCE
Ci Cd Evidence Provenance — Private cloud
private-cloud · PILOT · PARTIAL TECHNICAL SUPPORT
Ci Cd Evidence Provenance — Hybrid
hybrid · PILOT · PARTIAL TECHNICAL SUPPORT
Ci Cd Evidence Provenance — On premises
on-premises · PLANNED · INTEGRATION REQUIRED
Ci Cd Evidence Provenance — Air gapped
air-gapped · REFERENCE_ONLY · RESEARCH
In Progress (100)
These architectures are under editorial review and will be published after quality verification.
Incident Evidence Reconstruction — Saas
saas · Under review
Incident Evidence Reconstruction — Private cloud
private-cloud · Under review
Incident Evidence Reconstruction — Hybrid
hybrid · Under review
Incident Evidence Reconstruction — On premises
on-premises · Under review
Incident Evidence Reconstruction — Air gapped
air-gapped · Under review
Cross System Authorization — Saas
saas · Under review
Cross System Authorization — Private cloud
private-cloud · Under review
Cross System Authorization — Hybrid
hybrid · Under review
Cross System Authorization — On premises
on-premises · Under review
Cross System Authorization — Air gapped
air-gapped · Under review
Signed Software Release Evidence — Saas
saas · Under review
Signed Software Release Evidence — Private cloud
private-cloud · Under review
Signed Software Release Evidence — Hybrid
hybrid · Under review
Signed Software Release Evidence — On premises
on-premises · Under review
Signed Software Release Evidence — Air gapped
air-gapped · Under review
Audit Evidence Export — Saas
saas · Under review
Audit Evidence Export — Private cloud
private-cloud · Under review
Audit Evidence Export — Hybrid
hybrid · Under review
Audit Evidence Export — On premises
on-premises · Under review
Audit Evidence Export — Air gapped
air-gapped · Under review
Revocation And Renewal — Saas
saas · Under review
Revocation And Renewal — Private cloud
private-cloud · Under review
Revocation And Renewal — Hybrid
hybrid · Under review
Revocation And Renewal — On premises
on-premises · Under review
Revocation And Renewal — Air gapped
air-gapped · Under review
Protected Tool Invocation — Saas
saas · Under review
Protected Tool Invocation — Private cloud
private-cloud · Under review
Protected Tool Invocation — Hybrid
hybrid · Under review
Protected Tool Invocation — On premises
on-premises · Under review
Protected Tool Invocation — Air gapped
air-gapped · Under review
Private Evidence Delivery — Saas
saas · Under review
Private Evidence Delivery — Private cloud
private-cloud · Under review
Private Evidence Delivery — Hybrid
hybrid · Under review
Private Evidence Delivery — On premises
on-premises · Under review
Private Evidence Delivery — Air gapped
air-gapped · Under review
Trust Authority Separation — Saas
saas · Under review
Trust Authority Separation — Private cloud
private-cloud · Under review
Trust Authority Separation — Hybrid
hybrid · Under review
Trust Authority Separation — On premises
on-premises · Under review
Trust Authority Separation — Air gapped
air-gapped · Under review
Disaster Recovery Evidence — Saas
saas · Under review
Disaster Recovery Evidence — Private cloud
private-cloud · Under review
Disaster Recovery Evidence — Hybrid
hybrid · Under review
Disaster Recovery Evidence — On premises
on-premises · Under review
Disaster Recovery Evidence — Air gapped
air-gapped · Under review
Regulated Workload Evidence Flow — Saas
saas · Under review
Regulated Workload Evidence Flow — Private cloud
private-cloud · Under review
Regulated Workload Evidence Flow — Hybrid
hybrid · Under review
Regulated Workload Evidence Flow — On premises
on-premises · Under review
Regulated Workload Evidence Flow — Air gapped
air-gapped · Under review
Zero Trust Agent Onboarding — Saas
saas · Under review
Zero Trust Agent Onboarding — Private cloud
private-cloud · Under review
Zero Trust Agent Onboarding — Hybrid
hybrid · Under review
Zero Trust Agent Onboarding — On premises
on-premises · Under review
Zero Trust Agent Onboarding — Air gapped
air-gapped · Under review
Federated Verification — Saas
saas · Under review
Federated Verification — Private cloud
private-cloud · Under review
Federated Verification — Hybrid
hybrid · Under review
Federated Verification — On premises
on-premises · Under review
Federated Verification — Air gapped
air-gapped · Under review
Evidence Retention Compliance — Saas
saas · Under review
Evidence Retention Compliance — Private cloud
private-cloud · Under review
Evidence Retention Compliance — Hybrid
hybrid · Under review
Evidence Retention Compliance — On premises
on-premises · Under review
Evidence Retention Compliance — Air gapped
air-gapped · Under review
Certificate Chain Validation — Saas
saas · Under review
Certificate Chain Validation — Private cloud
private-cloud · Under review
Certificate Chain Validation — Hybrid
hybrid · Under review
Certificate Chain Validation — On premises
on-premises · Under review
Certificate Chain Validation — Air gapped
air-gapped · Under review
Temporal Evidence Ordering — Saas
saas · Under review
Temporal Evidence Ordering — Private cloud
private-cloud · Under review
Temporal Evidence Ordering — Hybrid
hybrid · Under review
Temporal Evidence Ordering — On premises
on-premises · Under review
Temporal Evidence Ordering — Air gapped
air-gapped · Under review
Batch Certification Pipeline — Saas
saas · Under review
Batch Certification Pipeline — Private cloud
private-cloud · Under review
Batch Certification Pipeline — Hybrid
hybrid · Under review
Batch Certification Pipeline — On premises
on-premises · Under review
Batch Certification Pipeline — Air gapped
air-gapped · Under review
Delegated Signing Authority — Saas
saas · Under review
Delegated Signing Authority — Private cloud
private-cloud · Under review
Delegated Signing Authority — Hybrid
hybrid · Under review
Delegated Signing Authority — On premises
on-premises · Under review
Delegated Signing Authority — Air gapped
air-gapped · Under review
Emergency Revocation Broadcast — Saas
saas · Under review
Emergency Revocation Broadcast — Private cloud
private-cloud · Under review
Emergency Revocation Broadcast — Hybrid
hybrid · Under review
Emergency Revocation Broadcast — On premises
on-premises · Under review
Emergency Revocation Broadcast — Air gapped
air-gapped · Under review
Compliance Evidence Aggregation — Saas
saas · Under review
Compliance Evidence Aggregation — Private cloud
private-cloud · Under review
Compliance Evidence Aggregation — Hybrid
hybrid · Under review
Compliance Evidence Aggregation — On premises
on-premises · Under review
Compliance Evidence Aggregation — Air gapped
air-gapped · Under review
Cross Tenant Verification Boundary — Saas
saas · Under review
Cross Tenant Verification Boundary — Private cloud
private-cloud · Under review
Cross Tenant Verification Boundary — Hybrid
hybrid · Under review
Cross Tenant Verification Boundary — On premises
on-premises · Under review
Cross Tenant Verification Boundary — Air gapped
air-gapped · Under review