Security Posture

Security Posture: Wolf You Feed

Wolf You Feed is a governed decision-support platform. It holds a person's most sensitive context, so security is a first-order design constraint. This is a public posture statement: principles and architecture, not operational detail.

Data IsolationEvery record is scoped to the user who owns it. No query returns another user's data; an automated regression suite enforces it on every change.
Provider SovereigntyUS-origin providers for defense-adjacent lanes, and deployment modes from hosted cloud to customer cloud to fully air-gapped, local operation.
Auditable ReasoningA governed pipeline against a fixed constitutional standard surfaces trade-offs explicitly — recommendations are inspectable, not opaque.

Single-tenant-per-user by design

WYF is deployed as a multi-user web service but architected as a collection of single-tenant silos. There is no team workspace, no shared mailbox, and no administrative path to read another person's content. Every persistent record — decisions, commitments, conversation history, financial connections, session tokens — is scoped to its owner, and read paths are constrained to the authenticated principal. This is not a policy engineers must remember; it is a property of the data model, locked in by a regression suite that must stay green on every change.

Provider sovereignty and data residency

The model layer is a commodity; the value and the risk live in the application layer. WYF restricts inference to US-origin providers for tactical and defense-adjacent lanes, supports customer-cloud and air-gapped deployment with no outbound model calls by default, and treats a US-region managed boundary as the target for deployments that require it — adopted through control inheritance rather than bespoke re-accreditation.

Auditable, doctrine-bound reasoning

Recommendations are produced by a governed pipeline against a fixed standard, not a single opaque model call. That yields three properties reviewers ask for: decisions are intentional (typed and routed), explainable (cross-domain tensions are surfaced, not hidden), and reconfigurable (the governing standard is an artifact that can be reviewed and adapted).

Account lifecycle and key hygiene

  • Instant credential invalidation. A single version bump voids every outstanding session for a user in constant time.
  • Single-path deletion. Account deletion runs through one audited path that revokes third-party connections and purges all user-scoped data in one transaction.
  • Secrets are supplied through the environment and never committed to source control.

Compliance trajectory

WYF is an alpha-stage product with a deliberate, staged compliance path: a software bill of materials, alignment to NIST SP 800-171, a SOC 2 program, and federal registration first. Higher-assurance authorizations (FedRAMP, DoD Impact Levels) are pursued through infrastructure inheritance and only in the context of a sponsoring program — not speculatively.

Request a security briefing See the benchmark preprint
We publish posture, not specifics. Qualified partners and reviewers can request a detailed security briefing under NDA.