# Sovereign AI Engineering **How to Own the Agent Stack, from the Model to the Browser** — by Miguel Amigot · Memorare Press · First Edition · 2026 Read the full book free at https://ibl.ai/book/sovereign-ai-engineering **Every AI quote has two problems, the price and where the data goes, and both are one decision made by someone else about who owns the stack. Sovereign AI engineering is the discipline of making that decision yourself: the code, the data in place, the model as a setting, one identity across every client, and agents in a harness you can inspect.** Written for the CIO: twenty chapters and seven appendices on models and the hardware to run them, connectors built on MCP with a broker that holds the credentials, clients that share one sign-in without holding a secret, harnesses and headless applications, and the operating model from the first pilot to the exit you never use. The organizations that get the most out of AI are not the ones with the largest budgets or the earliest pilots. They are the ones whose leaders understood, early, that the model is a commodity, that the data must stay where it lives, and that the applications their people use should be built on an identity and agent layer the institution controls. - Start reading: https://ibl.ai/book/sovereign-ai-engineering/preface - Download the PDF: https://ibl.ai/books/sovereign-ai-engineering.pdf - Every section is also available as markdown at https://ibl.ai/book/sovereign-ai-engineering/{slug}.md 20 chapters · 7 appendices · 30k words · ~2 hrs read ## Table of Contents The full text of Sovereign AI Engineering is published here, chapter by chapter. Every section is a page of its own — readable, linkable, and shareable. ### Preface - [Preface](https://ibl.ai/book/sovereign-ai-engineering/preface) (3 min read) ### Part I — The Bill Comes Due - [Chapter 1 — Two Problems with Every AI Quote](https://ibl.ai/book/sovereign-ai-engineering/chapter-1-two-problems-with-every-ai-quote) (5 min read) · The per-seat arithmetic · Where the data goes · Why the two problems are one · What usage pricing changes · The question to ask every vendor - [Chapter 2 — The SaaSpocalypse](https://ibl.ai/book/sovereign-ai-engineering/chapter-2-the-saaspocalypse) (5 min read) · What the debate is actually about · What a subscription was paying for · The three things that remain scarce · The headless conclusion · What it means for a CIO's portfolio - [Chapter 3 — What Sovereign Means in Engineering Terms](https://ibl.ai/book/sovereign-ai-engineering/chapter-3-what-sovereign-means-in-engineering-terms) (5 min read) · Four questions you can verify · The deployment tiers · One codebase, four tiers · What sovereignty is not · A worked example - [Chapter 4 — The Lock-In You Did Not Sign](https://ibl.ai/book/sovereign-ai-engineering/chapter-4-the-lock-in-you-did-not-sign) (5 min read) · Model lock-in · Identity lock-in · Connector lock-in · Format and memory lock-in · Writing the exit into the architecture ### Part II — The Model Layer - [Chapter 5 — Models Below the Frontier Are Commodities](https://ibl.ai/book/sovereign-ai-engineering/chapter-5-models-below-the-frontier-are-commodities) (5 min read) · What the frontier is for · The six-month rule · Pricing power and where it goes · The design consequence · How to test the claim in your own house - [Chapter 6 — Routing, Not Choosing](https://ibl.ai/book/sovereign-ai-engineering/chapter-6-routing-not-choosing) (5 min read) · Four dimensions of a routing decision · Routing by data classification · Fallbacks and outages · Open-weight models in the mix · What the administrator sees - [Chapter 7 — Hardware You Can Put Your Hand On](https://ibl.ai/book/sovereign-ai-engineering/chapter-7-hardware-you-can-put-your-hand-on) (6 min read) · Why memory, not FLOPS, is the number · The department tier: Apple silicon · The team tier: DGX Spark and DGX Station · The institution tier: DGX in the data centre · Routers across machines · What to budget and what not to believe - [Chapter 8 — The Air-Gapped Deployment](https://ibl.ai/book/sovereign-ai-engineering/chapter-8-the-air-gapped-deployment) (5 min read) · Who needs it · What has to be inside the perimeter · Updates by signed bundle · What you give up · Why the same codebase must run both ways ### Part III — The Data Layer - [Chapter 9 — The Migration That Never Ends](https://ibl.ai/book/sovereign-ai-engineering/chapter-9-the-migration-that-never-ends) (5 min read) · How the migration starts · What it actually costs · Why the copy is always wrong · The case for reading in place · What changes when the data stays put - [Chapter 10 — Connectors Built on MCP](https://ibl.ai/book/sovereign-ai-engineering/chapter-10-connectors-built-on-mcp) (5 min read) · What a connector is · Why a protocol and not an integration · The catalogue a CIO should expect · Scoping to the person · Plain-English skills on top of connectors · What to ask a vendor about their connectors - [Chapter 11 — The MCP Broker](https://ibl.ai/book/sovereign-ai-engineering/chapter-11-the-mcp-broker) (5 min read) · The piece most vendors skip · What the broker holds · Deny by default · Scoping every call to the person · The audit line · Why the broker belongs to the institution - [Chapter 12 — The Ontology over Your Systems](https://ibl.ai/book/sovereign-ai-engineering/chapter-12-the-ontology-over-your-systems) (5 min read) · The vocabulary problem · A pass-through, not a warehouse · How identity and authorization flow through it · What belongs in the ontology and what does not · Building it incrementally ### Part IV — The Client Layer - [Chapter 13 — One Backend, Every Surface](https://ibl.ai/book/sovereign-ai-engineering/chapter-13-one-backend-every-surface) (5 min read) · Where the work actually happens · Seven surfaces, one codebase · What a native shell adds · Shared components, not shared screenshots · The cost of the alternative - [Chapter 14 — Identity Without Secrets in the App](https://ibl.ai/book/sovereign-ai-engineering/chapter-14-identity-without-secrets-in-the-app) (5 min read) · Two kinds of credential · The hosted sign-in hand-off · Why the organization's key never reaches the client · Organizations, switching and visiting · Native shells and the system browser · The threat model, honestly - [Chapter 15 — The Agent in the Browser](https://ibl.ai/book/sovereign-ai-engineering/chapter-15-the-agent-in-the-browser) (5 min read) · What the side panel is · Reading the page · Acting on the page · The refusals and the approvals · The trust boundary · What the demo proves - [Chapter 16 — Shared Components as Policy](https://ibl.ai/book/sovereign-ai-engineering/chapter-16-shared-components-as-policy) (5 min read) · Where governance usually fails · The components that carry policy · Building an application in an afternoon · Skills that make a coding agent a platform developer · What the CIO gets ### Part V — The Agent Layer - [Chapter 17 — What a Harness Is](https://ibl.ai/book/sovereign-ai-engineering/chapter-17-what-a-harness-is) (5 min read) · The loop · Nine attributes of a flexible harness · Memory in three scopes · The sandbox and the network boundary · The same harness on every surface · What to demand - [Chapter 18 — The Five Layers of a Production Agent](https://ibl.ai/book/sovereign-ai-engineering/chapter-18-the-five-layers-of-a-production-agent) (5 min read) · The five layers · Why most products ship only the first · Orchestration and memory are not a longer prompt · Governance belongs in infrastructure · The questions to ask about each layer - [Chapter 19 — Headless Applications](https://ibl.ai/book/sovereign-ai-engineering/chapter-19-headless-applications) (4 min read) · The post-SaaSpocalypse application · Managing a platform from a terminal · Skills instead of screens · Where a head is still needed · What it does to the budget and the org chart ### Part VI — Running It - [Chapter 20 — The Sovereign Operating Model](https://ibl.ai/book/sovereign-ai-engineering/chapter-20-the-sovereign-operating-model) (5 min read) · Start with a hard, multi-system problem · Engineers embedded, code owned · Evaluations before users · A budget cap you set · The exit you never use · The ten-year view ### Appendices — the practical toolkit - [Framework — Framework: the five properties of a sovereign AI stack](https://ibl.ai/book/sovereign-ai-engineering/five-properties) (1 min read) - [Appendix A — Sovereignty Maturity Model](https://ibl.ai/book/sovereign-ai-engineering/appendix-a-sovereignty-maturity-model) (3 min read) - [Appendix B — The CIO's Readiness Assessment](https://ibl.ai/book/sovereign-ai-engineering/appendix-b-the-cios-readiness-assessment) (4 min read) - [Appendix C — Reference Architecture](https://ibl.ai/book/sovereign-ai-engineering/appendix-c-reference-architecture) (3 min read) - [Appendix D — Hardware Sizing Tables](https://ibl.ai/book/sovereign-ai-engineering/appendix-d-hardware-sizing-tables) (3 min read) - [Appendix E — Connector and Broker Policy Catalogue](https://ibl.ai/book/sovereign-ai-engineering/appendix-e-connector-and-broker-policy-catalogue) (3 min read) - [Appendix F — A 90-Day Sovereign Pilot Plan](https://ibl.ai/book/sovereign-ai-engineering/appendix-f-a-90-day-sovereign-pilot-plan) (4 min read) - [Appendix G — Glossary of Sovereign AI Engineering Terms](https://ibl.ai/book/sovereign-ai-engineering/appendix-g-glossary) (5 min read) ### Back matter - [Bibliography](https://ibl.ai/book/sovereign-ai-engineering/bibliography) (2 min read) - [About the Author](https://ibl.ai/book/sovereign-ai-engineering/about-the-author) (1 min read) - [About Memorare Press](https://ibl.ai/book/sovereign-ai-engineering/about-memorare-press) (1 min read) - [About ibl.ai](https://ibl.ai/book/sovereign-ai-engineering/about-ibl-ai) (1 min read) ## Run the stack this book describes ibl.ai is the agent operating system you run yourself: you own all the code and the data, in your cloud, on-premise or air-gapped, with any model, one identity across web, browser, desktop, mobile and terminal, and no per-seat pricing. - Explore Agentic OS: https://ibl.ai/product/agentic-os - Book a demo: https://cal.com/iblai/30min Last updated 2026-10-25