HardwareOn-premises bare metal, self-funded and self-operated.
Consensus keyHeld in a YubiHSM 2, non-exportable, fronted by tmkms.
NetworkBehind a sentry node over a WireGuard tunnel. The validator accepts no inbound connections from the public internet and never dials it.
DiskFull-disk encryption; unattended boot via TPM.
OperationsDaily encrypted backups, rehearsed recovery, external monitoring of every block.
Softwaregnoland, built reproducibly from the release tag and verified byte for byte.