Security
CITADEL: zero-trust ephemeral runtime envelope.
CITADEL is the security architecture wrapping Evemeta application platforms that operate in regulated, classified, or otherwise security-sensitive environments. It is a runtime envelope, not a product sold standalone.
Architecture
Runtime envelope, not standalone product.
CITADEL provides a zero-trust execution envelope for application platforms. It is invoked when a deployment requires zero-trust authentication, ephemeral runtime, no persistent secrets at rest, and a tightly bounded privilege surface. Platforms running inside CITADEL retain their normal application interfaces; the envelope changes the runtime, identity, and secret-handling posture beneath them, not the developer-facing surface.
Under NDA
What is not on this page.
Threat model, formal security properties, deployment topology, and audit posture are available under NDA to qualified parties under appropriate program review.
Reviewing variants
Compare against the fuller variant with security-properties section.
View fuller variant