Architecture and authority boundaries
GuardState separates intelligence, authority, execution, and evidence so institutions can keep sensitive control-plane functions inside environments they govern while retaining a consistent operating and diligence experience.
GuardState Cloud
Cloud provides the hosted coordination layer for identity, commercial administration, shared workspaces, approved evidence synchronization, Fleet visibility, procurement, and institutional commissioning. Browser state never becomes broker authority and provider secrets are not exposed to the browser.
GuardState Workstation
Workstation is the human-facing private evaluation and operator experience. It can run against a local GuardState Edge runtime for self-directed testing, but a single workstation is not presented as the institutional deployment boundary for a production trading organization.
GuardState Edge
Edge is the secure runtime and enforcement boundary designed to operate close to institution-controlled systems. Depending on the deployment profile, Edge can run in controlled local, private-cloud, VPC, or on-premises environments while preserving explicit identity, policy, health, capability, and evidence state.
GuardState Gateway
Gateway is the narrow execution-side boundary. Consequential actions require the applicable Mandate, risk, policy, approval, Acceptance, Permit, provider-capability, and boundary checks. A UI, model, or agent cannot bypass that chain.
Hybrid-Edge deployment
Institutional deployments can keep proprietary strategy context, credentials, sensitive evidence, and enforcement services inside infrastructure the institution controls, while selectively exposing only the metadata or evidence required for centralized governance and oversight. Data movement is deployment-profile specific and explicit rather than assumed.
Private / Sovereign
Private and sovereign profiles are institution-controlled deployment classes for environments with stricter residency, isolation, or ownership requirements. They are distinct from the desktop Workstation experience and are represented as commissioned only when their actual infrastructure and evidence are verified.