THE
SOVEREIGN
STACK.
73 fleet nodes. One sovereign platform. SHA-256 anchored records, HMAC-enforced integrity, WireGuard-secured infrastructure. Built end-to-end for identity, finance, communications, intelligence, security, and creative production.
This is not an agency. This is the stack agencies run on.
NOT AN AGENCY.
Graylight Creative is a sovereign infrastructure company. We build the stack that businesses run their operations on — not campaigns we manage and hand off. We own every layer: identity, finance, comms, security, intelligence, creative.
73 NODES.
Each node is a specialized sovereign service: SHA-256 anchored, HMAC-enforced, independently deployable. From FLARE (SSO/identity) to LEDGER (double-entry accounting) to CLOAK (WireGuard VPN) to WELD (automated cartoon studio). The fleet is the product.
YOUR RULES.
Every record SHA-256 anchored. Every inter-node call HMAC-verified. Every VPN tunnel WireGuard-encrypted. No vendor lock-in, no black-box SaaS. Self-hosted on sovereign infrastructure you control. That's the GLC standard.
DEPLOY TODAY.
Production-ready nodes you can activate now. Full stack, full control.
Email & Omnichannel Relay
Multi-account IMAP/SMTP relay engine with BurstGuard anomaly detection, Gmail-style search parser, rules engine, draft auto-save, scheduled send, label management, snooze, and OAuth token refresh. Multi-tenant relay with Vault credential isolation.
- Multi-account IMAP/SMTP + OAuth (Google + Microsoft)
- BurstGuard rate limiting + kill switch
- Rules engine (conditions + actions)
- Draft auto-save, scheduled send, snooze
- Multi-tenant relay with Vault credential isolation
Financial Record Authority
Double-entry accounting with SHA-256 anchored settlement records. Automated tax computation across 20 jurisdictions. Full P&L, balance sheet, and cash flow reporting. SIPHON disbursement ingestion. CLEARING reconciliation engine.
- SHA-256 anchored settlement records
- Tax engine: 20 jurisdictions (Federal + 18 states)
- P&L, Balance Sheet, Cash Flow statements
- SIPHON disbursement auto-ingestion
- Multi-entity consolidation reporting
Sovereign VPN Node
WireGuard-native VPN infrastructure running on your sovereign DigitalOcean droplet. Peer management, AES-256 private key encryption at rest, real-time telemetry via heartbeat cron. One-click peer config download. White-label resale packaging.
- WireGuard protocol — fastest, most modern VPN
- AES-256 private key encryption at rest
- Peer CRUD with keypair generation
- Heartbeat telemetry (RX/TX, last handshake)
- White-label tenant resale packaging (CL-006)
Fleet Orchestrator
The sovereign control panel for your VPS. Bun-powered TypeScript backend, Tauri desktop app (macOS/Windows/Linux), 14-tab web UI. Manages sites, databases, SSL, cron, firewall, logs, backups, fleet health, and audit trail. Your infrastructure — your command.
- Tauri desktop app — native macOS/Windows/Linux
- 14-tab web UI (sites, SSL, DB, cron, firewall, logs)
- Fleet health monitoring for all 73 nodes
- AEGIS risk engine + audit trail
- Multi-server switching, TENANT mode
73 NODES.
Every node is sovereign. Every record is anchored. Every call is verified.
DOMAINS WE POWER.
HOW THE STACK WORKS.
SovereignIntegrity HMAC
Every inter-node HTTP call carries a SHA-256 HMAC signature, timestamp, and API key. No node accepts a request without validating the full chain. Replay attacks are impossible — every call is time-bounded.
SHA-256 Content-Addressable IDs
Financial records in LEDGER, policy verdicts in JUDGE, auth events in VIGIL — every record is identified by a SHA-256 hash of its content. Records cannot be silently altered. The hash is the ID.
WireGuard VPN Layer
CLOAK runs WireGuard on a sovereign DigitalOcean droplet. Private keys are AES-256 encrypted at rest. The fleet operator's desktop is a registered peer. No traffic leaves the fleet unencrypted.
Multi-Tenant Domain Routing
A single PHP 8.x monolith serves 10+ domains via Apache vhost bootstrapping. DomainService detects the incoming domain and routes to the correct tenant context. All tenants share the fleet, isolated by HMAC key.
PHP 8.x Sovereign Stack
No Laravel. No Symphony. Pure PHP 8.x with a custom router, controllers, and service layer. Every dependency is intentional. The stack is portable, inspectable, and owned end-to-end.
Bun + TypeScript (NEXUS)
NEXUS runs a Bun-powered TypeScript server on the VPS with a React SPA and native Tauri desktop shell. SQLite for local state. PM2 for process management. Ships as a signed macOS/Windows/Linux binary.
CHOOSE YOUR ARMAMENT.
Core
5 fleet nodes. FLARE SSO, BURST relay, standard API limits. For teams just getting sovereign.
- 5 fleet nodes of your choice
- FLARE identity & SSO
- BURST email relay (1 account)
- Standard API rate limits
- Web dashboard access
Sovereign
20 fleet nodes. VIGIL intelligence, SENTINEL threat detection, LEDGER accounting. The full security and finance stack.
- 20 fleet nodes (your selection)
- VIGIL surveillance + anomaly detection
- SENTINEL threat detection + auto-ban
- LEDGER double-entry accounting + tax
- CLOAK WireGuard VPN (5 peers)
- 24/7 priority support
Full Fleet
All 73 nodes. White-label rights. Dedicated architect. Custom DNA injection. The whole sovereign stack is yours.
- All 73 fleet nodes
- White-label node branding
- NEXUS fleet orchestrator license
- Dedicated sovereign architect
- Custom node development (4h/mo)
- Unlimited CLOAK VPN peers
ACTIVATE
SOVEREIGNTY.
73 nodes. SHA-256 anchored. HMAC enforced. WireGuard secured. The sovereign stack is ready.