Demo mode — every action is simulated in-browser against a self-contained mock. Set NEXT_PUBLIC_API_BASE to point the same client at the live SS-01 / SS-10 APIs.
TLS certificates
TLS is terminated at the SS-07 gateway and the SS-27 edge. Managed certificates auto-renew from the sovereign CA; you can also upload your own.