P0 foundation

Knot Cloud

A Vercel-first, self-hostable control and publishing plane for local Knot agents. This build freezes security boundaries and protocol fixtures before exposing production operations.

Local authority

Cloud requests are typed intents. The local Knot policy decides what may run.

Removable publishing

Private origin storage lets unpublish stop delivery before cleanup finishes.

Portable contract

Vercel is the reference host, while the signed protocol stays provider-neutral.

Tenant isolation

Authoritative state is tenant-scoped and protected by PostgreSQL row-level security.