Product profile on hardware you control. Keys never mint a foreign tenancy for the memory layer.
import secrets
from stratam import product_fabric
key = secrets.token_bytes(32)
f, boundary = product_fabric(key, require_registered_channel=False)
token = boundary.issue("ops", "agency-scope", may_write=True)
boundary.remember(f, "Clearance procedure prefers local storage.", token)
export STRATAM_KMS_ROOT="$(openssl rand -base64 32)"
# optional: STRATAM_KMS_SIGNING / ATTEST / BOUNDARY / KID
python -c "from stratam import load_key_material_from_env, product_from_keys
keys = load_key_material_from_env()
f, b = product_from_keys(keys, require_registered_channel=False)
print('product fabric ready')"
python examples/ui/server.py --profile product
| Component | Leaves host? |
|---|---|
| Memory fabric state | No (in-process / your volume) |
| KMS material | No if you inject locally |
| Optional LLM judges for eval | Only if you call external APIs for benchmarks |
Identity proofing and HSM custody remain embedding app / VOROR responsibilities.