Contract-first generation · Core & Pro
sigMAX
From application intent to contracts, verifiable artifacts and WebAssembly. Core on one host. Pro on Kubernetes, with a dedicated executor VM.

From intent to execution
sigMAX means Secure Integrated Generator of Modular Architecture with eXecution runtime. Contracts describe the expected application; generation produces artifacts; agreements record the result so differences can be inspected.
- Define contracts for application boundaries, component responsibilities and each binary’s permitted capabilities.
- Generate & validate structured pseudo-code, compile artifacts and compare the result with contracts.
- Observe routes, runtime behavior and execution limits through the deployment’s available services.
Two editions
Single-host deployment
CoreDocker Compose
One shared host. Host, Config and WASM execution share the machine. Engine checks apply inside the container; there is no dedicated executor VM.
Cluster deployment
ProKubernetes + KubeVirt
A separate executor OS. COS2000 runs WASM inside a KubeVirt VM, separating the executor from Host and Config. This does not imply one VM per request.
Shared foundation · two proprietary editions
- Explicit contracts
- Generation & validation
- Agreements & drift detection
- WebAssembly execution
WASM memory and capability checks are distinct from deployment isolation. Core keeps execution on the shared host; Pro places the executor inside a VM. Read the execution boundaries before choosing a deployment.
Services for real applications
Connect business logic to data, files, identity and APIs. Studio brings configured services and container metrics into the same workspace.
- Database storage PostgreSQL records and schemas.
- File storage MinIO files and versioned artifacts.
- Networking & identity Traefik TLS, Authentik login and WireGuard access.
- Runtime integrations APIs, events and shared Redis cache.
Meet the COS2000 executor
COS2000 is the x86-64 operating system used for the Pro executor. It embeds WAMR to run WebAssembly and Radjae to compile validated pseudo-code. Native host functions connect modules to permitted APIs and file adapters; management services publish modules and expose execution diagnostics. In Pro, this operating system runs inside a KubeVirt VM.
Start with the architecture
The documentation covers contracts, generation, the Rust runtime and the COS2000 executor. FrontMark is the Markdown format used to publish these pages.
Discover the sigMAX constellation and the complementary roles of COS2000, Asset Manager, Knowledge, Inference for AI request routing and inference, FrontMark and sigMAX Studio, the graphical interface for managing applications. For edition access, deployment requirements or integration work, contact sigMAX.