Souverix Platform

Build Status

Component	Build	Tests	Coverage	Lint
IMS Core
IBCF/SIG-GW			-	-
STIR/SHAKEN			-	-
LI/Emergency			-	-

Latest Build: View Details

---

Sovereign Signaling Architecture

Platform: Souverix
Version: 0.1 (Foundational)
Origin: Canada
Philosophy: Sovereign, Resilient, Intelligent, Carrier-Grade
Architecture: Carrier-grade, sovereign identity, modern Golang

Souverix is a sovereign signaling platform designed for carrier-grade and military deployments. Built with modern Golang, it provides a complete IMS (IP Multimedia Subsystem) core with advanced security, AI-native intelligence, and regulatory compliance.

Platform Components

• 🧠 Souverix Coeur - IMS Core (X-CSCF stack)
• 🛡 Souverix Rempart - SIG-GW / IBCF (Border Control)
• 🎛 Souverix Relais - Media Plane (RTP anchoring)
• 🔐 Souverix Autorite - PKI / HSM / Vault (Sovereign Trust)
• 👁 Souverix Vigie - AI Intelligence Engine
• 🎯 Souverix Mandat - Lawful Intercept
• 🚨 Souverix Priorite - Emergency & Priority Services
• 📊 Souverix Vigile - Observability & Audit
• 🌐 Souverix Federation - Inter-domain Control
• ⚙ Souverix Gouverne - Policy & Control Plane

See Platform Documentation for complete architecture.

Documentation

• Platform Doctrine - Complete platform architecture
• Manifesto - Platform vision and philosophy (EN/FR)
• Doctrine - Five doctrinal pillars (EN/FR)
• Architecture Hierarchy - Component layers (EN/FR)
• Repository Structure - Code organization (EN/FR)
• Go-to-Market - Market overview (EN/FR)

Architecture Overview

🧠 Souverix Coeur (IMS Core)

The sovereign signaling brain containing:

• P-CSCF (Proxy CSCF) - First contact point for User Equipment (UE)
• I-CSCF (Interrogating CSCF) - Inter-domain routing and HSS query
• S-CSCF (Serving CSCF) - Core session control and service logic
• HSS/UDM (Home Subscriber Server / Unified Data Management) - Subscriber database
• Application Servers (AS) - Service enablers
• BGCF - Breakout Gateway Control Function
• MGCF - Media Gateway Control Function

🛡 Souverix Rempart (SIG-GW / IBCF)

The fortified border control - PRIORITY COMPONENT:

• IBCF: 3GPP TS 23.228 compliant border control
• SBC: Carrier-grade SIP security and normalization
• SIP normalization
• Topology hiding (3GPP standardized)
• Security enforcement (TLS, DoS, policy control)
• Inter-operator SIP peering
• Enterprise SIP trunking
• PBX to IMS interworking
• Fixed Broadband voice to IMS
• STIR/SHAKEN enforcement
• Lawful Intercept integration
• Emergency priority handling

🎛 Souverix Relais (Media Plane)

Media relay and RTP anchoring:

• RTP proxy
• SRTP enforcement
• NAT traversal
• QoS tagging
• Media analytics

🔐 Souverix Autorite (PKI / HSM / Vault)

Sovereign cryptographic authority:

• PKI lifecycle management
• CA chain management
• HSM integration
• STIR certificate management
• mTLS enforcement
• Key rotation automation

👁 Souverix Vigie (AI Intelligence)

AI-driven intelligence engine:

• Fraud detection
• Anomaly detection
• Traffic shaping
• Dynamic policy adjustments
• STIR analytics
• Attack classification
• Self-healing triggers

🎯 Souverix Mandat (Lawful Intercept)

Lawful intercept orchestration:

• Signaling duplication
• Media duplication
• Audit logging
• Mediation device integration
• Regulatory compliance

🚨 Souverix Priorite (Emergency Services)

Emergency routing and priority services:

• Emergency override
• STIR bypass rules
• Fraud bypass
• PSAP routing
• Priority queuing
• Disaster mode

📊 Souverix Vigile (Observability)

Monitoring and compliance telemetry:

• Metrics (Prometheus)
• Call traces (OpenTelemetry)
• Regulatory audit logs
• Compliance dashboards
• SLO tracking

🌐 Souverix Federation (Inter-domain)

Inter-domain peering orchestration:

• Cross-border policy control
• Attestation domain mapping
• Sovereign federation agreements
• Multi-tenant carrier environments

⚙ Souverix Gouverne (Policy & Control)

Configuration and policy orchestration:

• Policy management
• Peer definitions
• Rate limits
• STIR enforcement modes
• Emergency override controls
• LI warrant provisioning

Platform Features

• ✅ Sovereign Identity - Canadian roots, sovereign data control, military-capable
• ✅ 3GPP Standards Compliant - Following TS 23.228 and related specifications
• ✅ Zero Trust Architecture - Souverix Autorite integrated PKI/HSM infrastructure
• ✅ Cloud-Native - Containerized, Kubernetes/OpenShift-ready, horizontal scaling
• ✅ High Performance - Built with Go 1.23, optimized for low latency
• ✅ Security First - TLS/SRTP, STIR/SHAKEN with ACME-based certificate management, DoS protection
• ✅ AI-Native - Souverix Vigie intelligence engine with MCP integration
• ✅ Regulatory Compliant - Lawful Intercept (Souverix Mandat), Emergency Services (Souverix Priorite)
• ✅ Carrier-Grade - Souverix Rempart border control, topology hiding, peering policy

Souverix Platform Structure

souverix/
├── cmd/                    # Main entry points
│   └── ims/               # Souverix Coeur (IMS Core)
├── internal/              # Internal packages
│   ├── sip/               # SIP protocol (all components)
│   ├── sbc/               # Souverix Rempart (SIG-GW/IBCF)
│   ├── ibcf/              # IBCF functionality
│   ├── li/                # Souverix Mandat (Lawful Intercept)
│   ├── emergency/         # Souverix Priorite (Emergency Services)
│   ├── zta/               # Souverix Autorite (PKI/HSM/Vault)
│   ├── ai/                # Souverix Vigie (AI Intelligence)
│   ├── metrics/           # Souverix Vigile (Observability)
│   ├── config/            # Souverix Gouverne (Policy/Control)
│   └── store/             # Data storage (HSS, session state)
├── pkg/                   # Public packages
│   └── ims/               # IMS core types
├── frontend/              # Quasar/Vite web UI
├── k8s/                   # Kubernetes manifests
├── ansible/               # Ansible playbooks
├── docs/                  # Documentation
│   ├── SOUVERIX_PLATFORM.md
│   └── COMPONENT_MAPPING.md
├── buildme.sh            # Build script
├── pushme.sh             # Push script with SemVer
├── runme-local.sh        # Local run script
└── Dockerfile            # Multi-stage Dockerfile

Quick Start

Build

./buildme.sh

Run Locally

./runme-local.sh

Push to Registry

export GITHUB_TOKEN=your_token
./pushme.sh

Configuration

Zero Trust Mode

Set ZERO_TRUST_MODE=true to enable Zero Trust Architecture with integrated CA infrastructure.

Standards Compliance

• 3GPP TS 23.228 - IP Multimedia Subsystem (IMS)
• 3GPP TS 24.229 - IP multimedia call control protocol
• 3GPP TS 29.228 - Cx and Dx interfaces
• RFC 3261 - SIP: Session Initiation Protocol
• RFC 3588 - Diameter Base Protocol
• RFC 8224 - SIP Identity Header (STIR)
• RFC 8225 - PASSporT Token
• RFC 8588 - Certificate Management
• RFC 8555 - ACME Protocol

License

[Your License Here]