Enterprise Mode (Runtime)

Enterprise mode MUST support:

• RBAC

• Air-gapped operation

• Audit export

• Retention configuration

• Restricted egress policies

• Hardened runtime settings

Enterprise mode SHOULD support:

• HSM-backed signing

• Centralized policy packs

Enterprise deployments MUST preserve:

• Policy enforcement

• Identity binding

• Audit integrity

• Lease correctness