ARIA voice-native 3D SOC platform launches under source-available license

ARIA addresses a structural problem in AI security tooling: most platforms make autonomous decisions and then ask operators to trust them retroactively. By inverting this dynamic—requiring autonomy to be earned and immediately revocable—the platform applies human oversight to the most consequential decisions. The four-rung trust ladder is the mechanism: a capability only gains autonomy if an operator explicitly promotes it after observing good outcomes, and a single bad decision triggers immediate demotion. This design is particularly relevant for regulated industries where audit trails and demonstrable control are not optional requirements but legal mandates.

The sovereignty guarantee is enforced in code rather than promised in documentation, which matters. The LOCAL mode explicitly refuses to send prompts outside loopback or private IP ranges; there is no silent fallback to cloud providers even when API keys are configured. For environments where data residency is legally non-negotiable, this removes a class of risk that typical SaaS security tools cannot address.

The developer has been unusually transparent about the product's maturity. Rather than publishing a polished feature grid, the ROADMAP_AND_LIMITATIONS.md document names exact file paths and line numbers for each subsystem's status—production-grade or simulated. Local speech-to-text via Whisper is shipped, but text-to-speech is still a cloud call, so LOCAL mode is reasoning-sovereign but not yet speech-sovereign. Multi-tenancy isolation is not enforced, and the approval queue does not survive across multiple server instances. The platform is unsuitable for hardened production deployment today, but the engineering honesty and the source-available license reduce the risk of adopting it in lower-stakes environments.