INDUSTRY 02·FOR CIO · CISO · CTO · CCIO

GOVERNMENT
AI.
SOVEREIGN.

Public-sector AI cannot depend on a retrieval vendor reachable over the commercial internet. XERJ is a ~36 MB static binary that runs inside a sealed rack, a SCIF, or a national-cloud enclave — the running node makes no telemetry, update-check, or license-activation call; browser/optional endpoints are separate.

DEPLOYMENT MODE·PICK YOUR ENCLAVE

SEALED RACK.
SCIF.
NATIONAL CLOUD.

CLASSIFIED ENCLAVE · NO INTERNET · OPERATOR-STAGED MEDIA · PHYSICAL ACCESS CONTROL DATA SOURCES ops logs · sensor feeds · mission docs · archival OTEL COLLECTOR + VECTOR on-prem build · no external dependencies XERJ NODE · STANDARD BINARY · LEXICAL BASELINE FTS · VECTOR · COLUMNAR · AGENT MEMORY loopback listener · authenticated API no runtime telemetry · update · license calls mission analysts · dashboards · AI agents · approved model weights OFFLINE UPDATE CHANNEL operator-staged release archive + adjacent .sha256 integrity verify before transfer and after receipt optional locally staged neural model one-minor-version rollback window inbound only · no runtime update probe
GOV CLOUD · CUSTOMER TENANCY · AWS GOVCLOUD · AZURE GOV · GCP ASSURED · ORACLE GOV AGENCY IDENTITY PIV / CAC via OIDC bridge · SAML · enterprise AD XERJ CLUSTER · 3-NODE HA inside customer tenancy · region-pinned · your keys (BYOK) MISSION WORKLOADS citizen-services RAG · federal / state SOC · legislative & policy research · case-worker copilots GOVERNANCE & AUDIT per-query explain-plan · tenant isolation · retention by regulation audit shipped to GovCloud-native tooling · no cross-region egress
ON-PREM · AGENCY DATA CENTER · SOVEREIGN NATIONAL CLOUD APPROVED OS / HW RHEL · Oracle · Ubuntu LTS · amd64 + aarch64 IDENTITY PIV / CAC · SAML · agency IdP KMS / HSM Thales Luna · CloudHSM · Vault (FIPS) XERJ CLUSTER · 3-NODE HA · ON APPROVED HARDWARE FTS · VECTOR · COLUMNAR · AGENT MEMORY Helm chart · Kubernetes Operator · Terraform module (roadmap Q2) OBSERVABILITY Prometheus · OTLP export · SIEM-integrated · air-gap-compatible
MISSION WORKLOADS·PICK WHAT APPLIES
CITIZEN SERVICES BENEFITS · TAX
LICENSING Sovereign RAG over agency knowledge bases · case-worker copilot · per-agency RBAC · audit trail queryable as an index.
DEFENSE · INTEL CLASSIFIED
RETRIEVAL Semantic search over reports, OSINT, sensor feeds. Air-gap mandatory. Session-scoped agent memory. Approved model weights only.
CYBER SOC FEDERAL / STATE
SOC Log fleet · sub-second SIEM top-N over millions of events · NIST AI RMF aligned · STIG-compatible config.
LEGISLATIVE BILL · PRECEDENT
POLICY Bill text · precedent case law · policy documents · hybrid BM25 + vector search for research staff and committees.
EMERGENCY RESPONSE C2 +
SITUATIONAL Real-time ingest of sensor + situational data + responder comms. Unified retrieval for command-and-control agents.
BIOMEDICAL GRANTS ·
PUBS · TRIALS NIH / NSF grant portfolios · publication corpus · clinical-trial registries · RAG for research-officer productivity.
COMPLIANCE·ATO-READY CONTROLS

BUILDING BLOCKS
FOR ATO.

NIST 800-53 REV5Controls cross-walk available · security control implementation summary templateGA
NIST AI RMFPer-query explain-plan + audit trail aligns with "measure" + "manage" functionsGA
CJISTenant isolation + audit trail + encryption at rest + access controlINHERITED
CMMC Lvl 2DFARS 252.204-7012 · self-hosted inherits organizational controlsINHERITED
FedRAMP MODERATECommercial SaaS offering trackROAD 2027
FedRAMP HIGHHigher-impact workloads · planning phaseROAD 2027+
DoD IL5BYOK + FIPS-validated crypto + air-gap · engineering scope ready · accreditation roadmapROAD 2027
FIPS 140-2AES-256-GCM · TLS 1.3 · validation roadmap 2027ROAD 2027
XERJ v1.0.0-rc.3·vs A JVM ES INSTALL / ES 8.13.4

FITS INSIDE
ATO ENVELOPES.

METRICXERJLEGACY
Binary footprint~36 MB~620 MB · JAR + JRE · ~17×
Cold start< 1 s~15 s JVM warm-up
On-disk index176 MB283 MB · ES 8.13.4 · 1.61×
Network dependencies0 externalvaries
Offline-install time< 5 minhours (JRE · deps)
Audit artifact per queryexplain-plan nativeapplication plumbing
PILOT · PUBLIC SECTOR

PROVE IT
IN YOUR LAB.

Unclassified-lab pilot. Offline-install bundle. Reproduction scripts for battle reports on open data. Architecture review with your CISO / accreditation body.

We reply within one business day · DOWNLOAD THE PUBLIC-SECTOR BRIEF (PDF) ✓ THANKS. WE WILL REACH OUT.