Sovereign-routed governance for a multi-model world.
Most institutions will not depend on a single national AI ecosystem. SAG-OS is the neutral operating layer that governs approved models across jurisdictions, controls what may cross a border, and produces an evidence trail regulators can defend.
You choose the AI. Cabier orchestrates the trust.
Module 1 · AI Model Registry
Every approved model. Every version. Every deployment.
A single registry of AI systems approved for a business function — vendor, family, version, fine-tune, evaluation state, jurisdictional approval, accountable owner, effective and end dates. Nothing runs in production without a registry entry.
Module 2 · Sovereign AI Policy Engine
Per-jurisdiction rules, one control plane.
Country-specific policy packs mapped to the same kernel — no forked codebase, no shadow rulebooks. China is treated as an observed jurisdiction for cross-border cases; SAG-OS does not deploy in-country in the PRC.
United States
SR 11-7 · NIST AI RMF · State AI laws · Executive orders
Canada
AIDA (proposed) · OSFI E-23 · PIPEDA · AI-for-All strategy
United Kingdom
FCA · PRA · ICO · AI regulation white paper
European Union
EU AI Act (Art. 5/6/50/53/55) · GDPR · DORA
UAE
UAE AI strategy · CBUAE guidance · DIFC / ADGM
Saudi Arabia
SDAIA AI Ethics · PDPL · SAMA guidance
Singapore
MAS FEAT · Model AI Governance Framework · PDPA
Japan
JFSA · METI AI governance guidelines · APPI
Hong Kong
HKMA · SFC · PCPD
Australia
APRA · OAIC · voluntary AI safety standard
India
DPDP Act · MeitY AI advisories · RBI
South Korea
AI Basic Act · PIPA · FSC
Africa (selected)
SARB · CBN · KDPC · continental AI strategy
Latin America (selected)
Brazil ANPD · Mexico INAI · sectoral rules
Observed: China
PIPL · CAC generative-AI measures · sovereign export controls
Module 3 · Cross-Border AI Gateway
Four questions, resolved before the packet moves.
Gate 1
Can this prompt legally leave the country of origin?
Gate 2
Can inference be performed offshore for this data class?
Gate 3
Can these model weights be imported into this jurisdiction?
Gate 4
Can embeddings cross this border, and under which legal basis?
Each gate produces a signed decision reference before inference is allowed to proceed — including the applicable legal basis (export control, data residency, privacy regime and sectoral rule).
Module 4 · AI Evidence Vault
Prompt, output, decision — one signed record.
The AI Evidence Vault is the public-facing view of the Assurance Kernel's evidence spine, applied specifically to AI systems. Six item classes, one signed audit ID per event.
Every record is tied to an accountable executive, a jurisdictional envelope, a model registry entry and a Trust Gate outcome — reproducible on demand.
Sovereign AI Assurance
Six commitments a sovereign deployment has to meet.
SAG-OS is the policy engine. Sovereign AI Assurance is what the engine is held to — the commitments a group, a regulator or a sovereign operator can test us against.
Dual-regulator satisfaction
One control, evidenced once, accepted by home and host supervisors — with the delta each regime adds recorded explicitly rather than negotiated case by case.
Sovereign deployment options
Multi-tenant, dedicated VPC or on-premise sovereign enclave. No mandatory US data storage; residency is a deployment parameter, not a caveat.
Cross-border evidence without data transfer
Assurance artefacts and attestations cross the border; the underlying records do not. Each crossing carries a signed legal basis.
Jurisdiction-specific AI control libraries
Per-jurisdiction control sets with test procedures, evidence artefacts and deltas — published as a sample, held in full within engagement.
AI supply-chain and model provenance
Provenance, licensing and third-party posture recorded for every model, dataset and inference provider in the estate, including those inside vendor stacks.
Continuous multi-model assurance
Drift, quality, incident and policy-violation telemetry across every model in the estate, continuously — not an annual attestation.
Guardrails