Your sovereignty policy
A policy is the set of conditions you state once. The same filter that routes your requests applies it to every line of your manifest; the rings only report.
Jurisdictions and parents
Where an endpoint may execute, and which parent jurisdictions are excluded — the decisive question for compelled access.
Minimum assurance and tier
The lowest evidence level you accept for a fact, and the lowest sovereignty tier you accept for a line.
Retention, custody, transfer, training
How long logs may be kept, who holds the keys, which transfer mechanism is acceptable, and whether training use is excluded. An unknown fact fails a named dimension — it never passes by default.
Two organisations, two postures
The same provider can pass one policy and fail another, and both readings are correct. NeuralRing never decides what your policy should be.
Three rings, one posture
- Provider — the operating entity and its ultimate parent, checked against company registries.
- Infrastructure — where inference executes, where data resides and who holds the keys.
- Model — provenance, licence, where the weights are held and under whose custody.
Your policy decides what passes; the rings only report.
Every fact carries the assurance the evidence supports — self-attested, verified, certified — never rounded up.
A passing line does not mean your organisation is compliant with anything. It means the line satisfies the conditions you stated.