01
Verifiability
You can inspect the methodology before you spend a dollar. The Standard Module Interface, the 4-Layer Permission Model, the anti-patterns we caught and fixed — all of it is public, all of it is real working code.
Free · Apache 2.0
The Sovereign Portal
The open-source reference implementation of the sovereign methodology. Four conforming modules, a working tenant switcher, an audit log, and a Standard Module Interface contract you can build the rest of your platform against.
What's in the box
Four sovereign modules, a framework, and a full docker stack.
| Module | What it does |
|---|---|
| Users | Identity, auth (Twilio OTP reference + pluggable adapters), magic links, password reset, MFA, user profile |
| Companies | Multi-tenant company model, company-scoped role catalog (Owner / Admin / Manager / Member / Viewer), audit log |
| Workspaces | Workspaces inside companies, workspace-scoped role catalog (Owner / Manager / Member / Viewer), invitations, audit log |
| Comms | Outbound email + SMS, deliverability hooks, the comms service for the rest of the portal |
Portal shell — Next.js 14 App Router, the dashboard the modules render into
Framework — module loader, tenant switcher, operator mode, settings UI
Docker stack —
docker-compose up and the whole portal runs locallyDocumentation — README, Quickstart, SMI v0.1 spec, 4-Layer Permission Model, Module Registry + Settings Retrofit, Anti-Patterns Catalog (17 documented mistakes)
Why open source
Three reasons.
02
AI-friendliness
Every modern coding assistant (Claude, Copilot, Cursor, Cody) can be primed on the architecture because the docs and code are public. This lowers the bar for your dev team to start building sovereign modules.
03
No lock-in
You own the code. Apache 2.0 license. No call-home telemetry. No license keys. No hosted dependency.
License
Apache 2.0.
Use it commercially. Modify it. Distribute it. Build proprietary modules on top of it. The only requirement is attribution.
Quickstart
Running in five minutes.
git clone https://github.com/freshifyv2/sovereign-portal.git
cd sovereign-portal
docker-compose up
open http://localhost:3000Within five minutes you have a running multi-tenant portal with Users, Companies, Workspaces, and Comms, and an operator account ready to switch tenants and inspect the audit log.
What you can build
Anything that needs multi-tenant identity and a clean SMI contract.
The Editions roadmap is exactly this — pre-assembled portals for specific verticals, built on the Sovereign Portal.
Documentation
Everything you need to build on it.
Roadmap
The Portal evolves in public.
- SMI v0.2 — locks the role-catalog model and operator-access composition
- Comms module expansion — push notifications, webhooks
- Editions — pre-assembled vertical portals (see /products/editions)
Build faster
The Sovereign Dev Pass works with the Portal.
You can build modules entirely by hand. You can also subscribe to the Sovereign Dev Pass — an AI engine trained on this methodology that reviews your schemas, your PRs, and your SMI contracts as you write them. It catches sovereign-specific mistakes that generic LLMs miss.