Run open models locally with a simple, sovereign-friendly runtime.
Connect over the governed gateway with a scoped, expiring token. Classification is enforced on every call.