Documentation

Read the runbook before you sign the contract.

Vertirite documentation is the operator’s manual for an enterprise control plane. It is written for the CISO who has to defend the deployment to their auditors, the Solutions Engineer who installs it, and the on-call operator who reviews the approval queue at 2:00 AM. Pre-launch: most of these pages are seeded from the internal install runbook and will be expanded as customers ramp.

Pre-launch · Day 1 documentation onlyCustomer-facing portal coming Q3 2026

Concepts

What is Vertirite

Control plane, not gateway. Why the mode authority is out-of-band.

Modes (Autonomous, Controlled, Escalation, Lockdown)

The four operator-set states that determine what every automated caller can do right now.

Capability registry

The per-fleet YAML that declares who-can-call-what. Version-controlled. Code-reviewed. No runtime drift.

Approval queue

Human-in-the-loop review for any action policy flags. Web, CLI, Slack, Teams, ServiceNow, PagerDuty.

Audit ledger

Append-only chain-signed record. SOC 2 / HIPAA / FedRAMP-grade evidence by design.

Architecture

Broker (FastAPI on :8220)

The single trust boundary. Every automated caller goes through it.

surge-agentd

Per-node daemon. Forwards local calls to the broker, enforces local fail-closed.

surgexi-ca

Certificate authority. Issues short-lived client and server certs for mTLS.

Desktop shell + web dashboard + CLI

Operator surfaces. Same underlying broker; different ergonomics.

Install

Pilot install runbook

What the Solutions Engineer brings to the first install call.

Pre-flight checklist

Customer-side prerequisites — IdP, DNS, TLS, sudo, KMS for Enterprise.

Verifying mTLS handshake

Confirm the broker rejects an unsigned client cert before letting anything in.

First protected system

Register a capability, route a real action through the queue.

Operator workflows

Reviewing an approval

Reading the action payload, the chain of attribution, the policy decision rationale.

Issuing Lockdown

What it does, how to communicate it to stakeholders, how to lift it.

Investigating an audit trail

Reconstructing a sequence of actions from the chain-signed ledger.

Adding a capability

PR pattern, code review checklist, deployment via the broker auto-pull.

Compliance

Vertirite security disclosure

Full posture matrix and sub-processor list — public, no NDA required.

SOC 2 in-flight letter

Available for procurement immediately. Final attestation Q4 2026.

HIPAA + BAA

Posture, BAA template, the install conversation that must precede PHI.

License (BSL 1.1)

What you can do with the source, what the four-year sunset means.

Repository

Source on GitHub.

The broker, agent daemon, certificate authority, capability schemas, and the Theatre demo all live in the Vertirite repository. The README is the canonical entry point; docs/PILOT-DEPLOYMENT.md is the install manual; docs/SECURITY.md is the disclosure for your security review.

github.com/SurgeXi/VertiriteEmail [email protected]