You hold the keys
Identity, encryption and production access stay with you.
Your boundary decides the topology.
ONE PLATFORM · THREE WAYS TO RUN
01 · ON-PREM
Everything inside the boundary.
The full system runs on infrastructure you operate, under identity and network controls you already trust.
YOUR ENVIRONMENTYOUR KEYS · IDENTITY · DATA
KNOWCONTROLTHINKWORK
YOUR SYSTEMS STAY IN CHARGE
RUN · INFRASTRUCTURE YOU OWNCONTROL DECIDES WHAT MAY LEAVE
APPROVED CAPACITY
THE INVARIANTS
The deployment changes. The control model does not.
Six conditions stay true in every topology. They are architecture, not promises on a slide.
Your systems act
Lemi never becomes an ungoverned system of record.
A person approves
Material actions retain named human authority.
Releases are signed
Only approved software crosses the boundary.
Export requires a gate
Outbound movement is explicit, controlled and evidenced.
Support is an exception
Access is temporary, scoped and recorded. Never ambient.
THE NEXT STEP
Name one decision.
Bring the people who own the data, the rules and the outcome. We will build it in the room.