Identity-aware edge
Platform-provided identity establishes the actor. Authorization remains a server-side Meridian decision.
Architecture baseline
Phase 2 foundation
The sandbox is intentionally smaller than the final platform, but its trust boundaries and invariants are designed to survive growth.
Governed relational state
Organizations, categories, jurisdiction rules, audit evidence, and currency books persist in structured storage.
Deny by default
Sensitive categories and non-sandbox jurisdictions remain blocked until an explicit, versioned rule activates them.
Portable domain boundaries
The sandbox validates domain rules now while preserving the path to the production PostgreSQL modular monolith.
Jurisdiction engine
Controlled global activation
EU configuration previewEU-DEMO
EURRESEARCH
Global sandboxGLOBAL
EUR,USDSANDBOX ENABLED
US configuration previewUS-DEMO
USDRESEARCH
Release guardrails
What this build cannot do
- Process real personal or sensitive data
- Move or represent real money
- Activate a production jurisdiction
- Convert EUR and USD automatically
- Grant broad or permanent data access