Program deployments¶
The Program plan is for regulated, air gapped, or large scale environments: dedicated tenancy in your cloud, including IL5+, with policy authored to your control set. Annual agreement, named support, SBIR Phase III sole source eligible.
What is deployed¶
Attest is a single Python service with no external dependencies by design, serving a built console from one origin. The dependency surface is small on purpose; it is one of the first things an assessor asks about.
| Component | Role |
|---|---|
| Attest service | Reads GitLab, evaluates gates, serves the console and the API. |
| Your GitLab | System of record. Application repositories, the security repository, the review merge requests. |
| Your identity provider | Single sign on and roles. Any OpenID Connect provider; CAC in an enclave is inherited from it, never implemented in Attest. |
| Explainable AI endpoint | Narration. Self hosted inference or a cloud model, selectable by an administrator. Never in the decision path. |
Sessions are server side. The console never holds a token. Every action in GitLab runs on the acting person's own short lived token.
Air gapped¶
Nothing in Attest calls out to Ulap. The service reaches your GitLab, your identity provider, and your inference endpoint, all inside the boundary. This documentation ships with the deployment for the same reason.
Policy authored to your control set¶
The gate policy is deterministic code with its thresholds at the top and nowhere else. A Program deployment can carry a gate set and thresholds written to your control baseline, and the policy version on every decision records which set was in force.
Evidence retention¶
The security repository is the evidence store, and GitLab retains it. Program deployments can add a snapshot at decision time of the scan output, the digests, the gate evaluation, the per finding decisions, and the authorization to object locked storage, so the bundle an assessor audits cannot be altered by anyone, including an administrator.
Managed review¶
Under a Managed review agreement, Ulap reviewers work your queue under agreed policy and report time to authorize against a target. Your people can take any decision back at any time; the reviewer role is yours to assign and revoke in your identity provider.
Talk to us¶
Program and Managed review are scoped to your environment. Write to contact@ulap.co or book a live walkthrough from ulapcybo.app: a real container, a real queue, a real decision.