Deploy on your hardware, on your network, with your LLM.
Galois ships as a signed single-binary daemon. Airgapped on-prem, customer-controlled LLM endpoints, Apache-2.0 source. Built for engineering teams inside regulated buyers — medical, automotive, aerospace, energy, defense.
Three ways to run it
What's in the box
- Single Go supervisor + frozen Python engine. No Python runtime, no Docker, no host dependencies.
- Signed releases (Azure Trusted Signing). Windows MSI, Linux systemd, Raspberry Pi ARM64. Apache-2.0 source.
- gRPC + WebSocket APIs. Stable contract at proto/edge/v1/edge.proto.
- Bearer-token auth on inbound gRPC. mTLS for Enterprise. Tailscale or self-hosted Headscale for the mesh.
- 13-check galois-edge doctor diagnostic. JSON output for wiring into provisioning and monitoring.
- Any protocol, any vendor SDK — SCPI, CAN, Modbus, OPC-UA, I²C, SPI, serial, plus proxied vendor Python SDKs (NI, Keysight, Digilent, Quantum Design PPMS).
- Audit-grade substrate: one immutable row per step, feeding IEC 62304 and automotive evidence today.
PCB simulation, inside your perimeter.
Stokes — the PCB power- and signal-integrity engine — deploys the same way the rest of Galois does: on your hardware. Air-gapped operation is its primary engineering target, not an afterthought.
- Runs entirely on your hosts — a Python package or a signed, frozen binary with a CPU-detecting launcher. No containers required, no phone-home, no network calls in the solve path.
- Tier 1 ships everywhere, CPU-only: DC power integrity (IR-drop, current density, IPC-2221/2152 ampacity), SPICE, and first-order signal integrity. Runs on modest or virtualized hardware, including locked-down VMs.
- Tier 2 adds coupled electrothermal analysis and PEEC RLGC extraction with Touchstone S-parameter export. GPU acceleration is optional, datacenter-class only, and never required.
- Your ECAD file dies at ingest: KiCad, IPC-2581, or Gerber parses into a strict internal model, the upload is deleted, and solvers only ever see the model — the original design file never propagates.
- Simulation artifacts (S-parameters, field overlays) live in a job sandbox you point at your own volume, with a configurable retention TTL.
- Triage-grade by design: fast first-pass screening with an escalation path — Stokes flags what deserves full-wave attention, it does not replace sign-off suites.
Your model, your tenant, your data.
Évariste routes to the endpoint you choose — AWS Bedrock (commercial or GovCloud), Azure OpenAI (commercial or Government), on-prem vLLM, on-prem Ollama, or any OpenAI-compatible endpoint. Per-org configuration. In on-prem mode, no prompts or responses leave your network.
Compliance posture
Honest about what's shipped versus on the roadmap. We'd rather show you the timeline than misrepresent the posture.
| Apache-2.0 source (edge daemon) | Shipped |
| Airgapped on-prem deployment | Shipped |
| Customer-controlled LLM endpoint | Shipped |
| mTLS (Enterprise) | Shipped |
| RBAC + tenant isolation (RLS) + audit log | Shipped |
| IEC 62304 audit pipeline | Shipped |
| Automotive (FMVSS) audit pipeline | Shipped |
| FDA 21 CFR Part 11 pipeline | Shipped |
| ISO 26262 audit pipeline | Shipped |
| ISO 17025 audit pipeline | Shipped |
| Signed binaries (Azure Trusted Signing) | Rolling out |
| SBOM (CycloneDX) per release | Q3 2026 |
| FIPS 140-3 crypto mode | Q4 2026 |
| STIG hardening guide | Q4 2026 |
| ISO 13485 dossier | Q1 2027 |
| FedRAMP Moderate | 2027 |
| IL4 / IL5 deployment runbook | 2027 |
| Stokes simulation Tier 1–2 on-prem (CPU-only, frozen binary) | Shipped |
| Stokes full-wave tier — airgapped offline bundle | In build |
Bring us your deployment questionnaire.
Talk to deployment engineering — not a sales chatbot. We'll walk your IT, security, and procurement teams through the architecture for your environment.