Lumium for defense
Runs in the enclave, with the record to prove it.
Defense programs need automation on networks that cannot reach a commercial endpoint. Lumium is built to run there, including with models that never talk to the internet.
Restricted networks need software that assumes nothing
Tools built for the open internet assume a provider endpoint is always reachable. In an enclave that assumption is a design flaw, and every workaround becomes a manual process someone has to own.
Lumium sends no telemetry of its own and treats provider access as a decision you configure. Register local models and there is no external call to justify.
The evidence trail is local too: run outcomes and ledger entries in your database, ordered by a sequence the organization owns.
What your reviewers will ask
Controlled information
Data stays in the database and object store you manage, on the network you approved.
Disconnected operation
Register models on your own network and no provider traffic exists to block or explain.
Chain of custody
Every run has an identifier, a terminal outcome, and ledger entries tied to the operation that produced them.
Least privilege
Agents act with a project assignment. Nothing escalates to the permissions of the person who created the agent.
What you actually deploy
- One Node process inside your network
- SQLite or libSQL database you already back up
- Local object storage, or S3-compatible when you need it
- Model registry with a per-project allowlist and your own keys
- Project membership as the authorization boundary
- Encrypted secrets that never enter prompts or logs
- Ledger records with an organization-wide sequence
- Approval-gated, audited tool calls
- No telemetry of its own
Lumium is in early access. There is no certification to point at yet, and nothing on this page should be read as one.
Who this is for
Authorizing official
Software whose behavior on the network is inspectable.
Security engineer
Egress decisions recorded per tool call, not per vendor promise.
Mission lead
Agent help for analysis and documentation work that stays in place.
Program engineer
One deployment, no external dependency to waive.
Automate the analysis, keep the boundary.
Tell us about the network and the models you are cleared to run. We will walk the deployment with your security team.
Talk to us