Local first. Signed when it matters. Honest about the edges.

The same four constraints run through every Vertalt system. They are not values on a wall; they decide where code lives and what the product refuses to do.

Build order

Failure mode → local decision → signed control → staged rollout. If a system cannot survive the first two steps, the rest is theater.

Local first

/01Constraint

A control plane should make a product smarter, not make it stop working. Leviathan keeps protecting when the entitlement service is unreachable. Anticheat keeps its local checks when the cloud is down. Spiky makes the client verify a signed verdict before it trusts a decision.

No network call on the hot path
Last-known-good state stays usable
Cloud is an advantage, not a dependency

The host is not a playground

/02Constraint

We do not need root to defend a proxy. We do not install packages from a game process. Runtime protection belongs inside the process that already owns the traffic, with a narrow surface and a clear failure mode.

No host firewall edits
No silent package installation
HTTPS-only control traffic

Signed when it matters

/03Constraint

A remote decision is only useful if the client can prove who said it. License verdicts, configuration bundles, and AI results carry signatures and an execution-time check. The client verifies before it acts.

Ed25519 entitlement payloads
Nonce replay protection
Execution-time effect gates

Honest about the edges

/04Constraint

We name what is experimental, private, or unqualified. A benchmark needs a workload. A detector needs an evidence run. A release needs its gates. A clean boundary is more useful than a broad claim.

No invented accuracy numbers
No customer logos without permission
Staged releases stay staged until proven

Put the constraint on the table.

Tell us the failure mode you are designing around. We will tell you which layer owns it — or whether it should stay out of scope.

Start a briefTechnical first / no deck required