Architecture
The Local-First
The Local-First
Protection Architecture
Six-Stage Protection Pipeline · Layered Evidence Model · C2PA and AIP-7 Alignment · Alterna Axiom Labs 2026
Cryptographic identity, file lineage, and verifiable authorship proof — entirely on your machine. No cloud. No accounts. No expiry.
You should not need a law degree to prove you made something. Drop your files in a folder. Sovereign handles the rest.
Protect demos, stems, lyrics, and masters before they leave your hard drive. Every version timestamped. Prove the song was yours before the split sheet existed.
Your work gets scraped and fed into AI models. Sovereign embeds a watermark that survives resizing, recompression, and metadata stripping, and keeps a provenance trail from first sketch to final piece.
Metadata gets stripped the moment your image hits social media. The frequency watermark lives inside the pixels — it survives resizing, recompression, and format conversion.
Manuscripts, blog drafts, scripts, research. Every save is fingerprinted. If someone publishes your work before you do, the provenance log proves you had it first.
The proof bundle is built for you. SHA3-256 fingerprint, hash-chained timeline, self-verifying script. Hand it to opposing counsel. They run one command and see the evidence.
Protect pre-release cuts, raw footage, storyboards, and scripts. Full archive mode preserves every version so you can prove the creative timeline from concept to delivery.
Every file passes through a deterministic six-stage pipeline. Entirely on your machine.
Digital file enters through the vault watcher or manual import.
File validation, format detection, integrity baseline established.
Quantum-resilient cryptographic hash. Deterministic and independently verifiable.
Frequency-domain watermark for images; embedded metadata for audio and documents — surviving stripping and recompression.
Append-only event log with hash chain. Every action recorded. Nothing overwritten.
Portable verification package anyone can independently confirm.
Versioned backup of every file state. Recoverable history for files that change over time.
Mark any file as off-limits for AI training. Logged permanently in the provenance chain.
Six-Stage Protection Pipeline · Layered Evidence Model · C2PA and AIP-7 Alignment · Alterna Axiom Labs 2026
Redundant authorship evidence. Each layer independently supports a claim.
Authorship metadata written directly inside the file — ID3 tags for audio, document properties for PDFs and Office files.
Authorship evidence in DCT coefficients — survives metadata stripping, resizing, recompression.
Quantum-resilient SHA3-256 identity. Tamper-proof. Independently verifiable by anyone.
Immutable timeline of every event from creation through all modifications. Nothing overwritten.
Self-contained verification package for independent third-party confirmation. No app required.
Everything needed to independently verify authorship. No access to the original system required.
Your original file, included for verification.
SHA3-256 cryptographic identity hash.
Full provenance chain with timestamps and hash links.
Human-readable report for legal or dispute use.
Tamper-evidence hash of the entire provenance log.
Self-verification script. Python 3, zero dependencies. Run it and know.
Most IP protection tools require cloud accounts, subscriptions, or blockchain wallets.
| Feature | Sovereign | ScoreDetect | Digimarc | Email / Cloud |
|---|---|---|---|---|
| Works offline | ✓ Yes | ✗ Cloud required | ✗ No | ✗ No |
| No account required | ✓ Yes | ✗ Account required | ✗ No | ✗ No |
| Price | Free | Subscription | Subscription | — |
| Proof survives if company shuts down | ✓ Self-contained | ✗ Certificates die | ✗ No | ✗ No |
| Self-verifying proof | verify.py — zero deps | Requires platform | ✗ No | ✗ No |
| Frequency watermark | ✓ Survives stripping | ✗ No | ✓ Yes | ✗ No |
| Quantum-resilient hash | SHA3-256 | Standard hash | ✗ No | ✗ No |
| Hash-chained timeline | ✓ Yes | Blockchain only | ✗ No | ✗ No |
| Runs from USB | ✓ Air-gapped | ✗ No | ✗ No | ✗ No |
| Data stays on your machine | ✓ Always | Cloud + blockchain | Cloud | Third-party servers |
Sovereign is free software. Protect one lyric sheet or your entire catalog — there are no file limits, no subscription, and nothing ever leaves your machine.
Windows 10/11 (64-bit). Sovereign is independent software, so Windows may show a “protected your PC” notice on first launch — click More info, then Run anyway.
Sovereign fingerprints every file with SHA3-256, embeds a frequency-domain watermark that survives resizing, recompression, and metadata stripping, logs every event in a hash-chained timeline, and exports a proof bundle anyone can verify by running one Python script.
No. Everything runs on your machine. Sovereign works air-gapped from a USB stick on any Windows machine. No cloud, no account, no login.
A ZIP file containing your original file, its SHA3-256 fingerprint, the full provenance chain, a human-readable PDF report, a tamper-evidence hash, and a self-verification script. Hand it to a lawyer or opposing counsel — they run one command and see the evidence.
Images (JPG, PNG, TIFF, WebP), audio (WAV, MP3, FLAC, M4A), video (MP4, MOV), documents (PDF, DOCX, TXT, MD), and more. Each format gets appropriate watermarking — frequency-domain for images, ID3 for audio, container metadata for video, sidecar files for everything else.
Nothing. Sovereign is free software with no file limits, no subscription, and no account. Your proof never expires, and nothing you make ever leaves your machine.
SHA3-256 uses the Keccak sponge construction, which is structurally different from SHA-256 and provides stronger resistance against future quantum computing attacks. Your proof needs to hold up years from now — SHA3-256 ensures it will.
The Sovereign architecture is fully documented through defensive publications on public record.
Full defensive publication establishing prior art for the complete Sovereign architecture. SHA3-256 fingerprinting, hash-chained provenance, frequency-domain watermarking, C2PA and AIP-7 alignment.
DOI 10.5281/zenodo.19056811 → Defensive Concept Note · Addendum · ZenodoPrior art documentation for a provenance-aware digital audio workstation where music creation actions automatically generate cryptographic authorship events. Song projects as protected creative containers.
Zenodo DOI →