Deployment profiles
One protocol, deployed three ways
Vallum is a single protocol. The three profiles differ in scale, operator model, and the controls layered on top; they do not differ in what a decision means. No profile is generally available.
Common to every profile
Protocol guarantees that do not vary
- Decisions are deterministic ALLOW or BLOCK over verified inputs.
- Missing, stale, ambiguous, inconsistent, unavailable, or unverifiable state fails closed.
- Authority originates with humans; no principal can self-authorize.
- A named policy-enforcement point stops the effect on BLOCK.
- Every decision leaves a record with cryptographic provenance.
- No AI, probabilistic scoring, or conversational approval in the trusted path.
"Guarantee" here describes what the protocol specification requires of every profile. It is not a claim that any profile has achieved production qualification.
Vallum Home Computer
An individual operating their own machines and the agents that run on them.
The smallest deployment: one human trust root, local policy, and enforcement points around the actions an agent or program may take on a personal computer.
Profile-specific targets- Single human authority with a local trust root.
- Policy authored and approved by the same person.
- Enforcement points scoped to local consequential actions.
- Evidence record kept locally, exportable for review.
Vallum Business
A team or company with several operators and shared systems.
Adds multiple human principals, roles, shared policy, and delegated approval while keeping a single, legible chain of authority.
Profile-specific targets- Multiple human principals with role-scoped authority.
- Shared, versioned policy with governed change approval.
- Delegation that is explicit, bounded, and revocable.
- Evidence record available to designated reviewers.
Vallum Enterprise
Organizations that need separation of duties, federation across units, and assurance for regulators.
Everything in Business, plus scale, separation of duties, federation, assurance, and regulatory controls layered on the same protocol.
Profile-specific targets- Separation of duties enforced by policy, not convention.
- Federation across organizational units and trust domains.
- Assurance artifacts designed for external review.
- Controls that support regulatory obligations; Vallum does not assert compliance on your behalf.
Comparison
Profile-specific targets
Every row below is a design target. Availability is the same for all three: not generally available.
| Target | Home Computer | Business | Enterprise |
|---|---|---|---|
| Intended operator | One person | A team | An organization |
| Trust root | Local, single human | Organizational, governed | Federated, governed |
| Policy authoring | Self | Designated roles | Designated roles with separation of duties |
| Approval model | Single human | Delegated, bounded | Governed, multi-party where policy requires |
| Separation of duties | Not applicable | Optional | Required by policy |
| Federation | No | No | Yes |
| Assurance and regulatory controls | No | Limited | Yes |
| Availability | Not generally available | Not generally available | Not generally available |
Discuss which profile fits
A technical briefing covers the target architecture, the status of each component, and how a profile would map to your environment.