Sovereign Policy Marketplace
A demo marketplace for publishing policy packages — name, version, content, contentHash — so you can verify what was published when, without a public distribution claim.
The problem
/ 01When you need to record and retrieve published policy packages with their content and hash, you need a registry that accepts name/version/content, computes a SHA-256 contentHash, and returns the package with status and publishedAt — while being honest that this is a demo-grade marketplace, not a public registry.
What it does
/ 02Publishes a policy package by name, version, and content (required) — returns the full package object with id, contentHash, status (published), and publishedAt.
Lists all published packages newest-first with content hashes and timestamps.
Who it’s for
/ 03- Policy authors publishing packages
- MLops engineers sharing policy definitions
- Compliance reviewers auditing published policies
In context
/ 01Complements Policy Catalog (discovery), Policy Cartridge (runtime policies), and the Consent Receipt Registry (content-hash integrity).
