# The Operating System for Sovereign Apps

URL: https://docs.hanzo.ai/blog/sovereign-apps

> Base owns state. Lux owns trust. Seven years of commits, every piece traceable to a first hash.

_Zach Kelling · Mar 3, 2026_

Every app you use today rents you access to your own data. We built the replacement. It took seven years.

**Base is the personal computer of Web5. Lux is the trust kernel.**

## Provenance

Every piece traces to a first commit:

- **2015** — [`hanzoai/ingress@3680c8d`](https://github.com/hanzoai/ingress/commit/3680c8d) — HTTP routing layer
- **2019** — [`luxfi/lattice@4421f32`](https://github.com/luxfi/lattice/commit/4421f32) — original FHE from scratch
- **2020** — [`luxfi/node`](https://github.com/luxfi/node) — Lux blockchain
- **2020** — [`hanzoai/iam@84d8b2d`](https://github.com/hanzoai/iam/commit/84d8b2d) — identity and access management
- **2021** — [`luxfi/threshold@c44efac`](https://github.com/luxfi/threshold/commit/c44efac) — FROST + CGGMP21 threshold signatures
- **2021** — [`luxfi/evm@a59f55e`](https://github.com/luxfi/evm/commit/a59f55e) — EVM with PQ crypto precompiles
- **2022** — [`hanzoai/base@3d07f02`](https://github.com/hanzoai/base/commit/3d07f02) — single-binary runtime, encrypted SQLite, CRDT
- **2022** — [`hanzoai/kms@8d00c5c`](https://github.com/hanzoai/kms/commit/8d00c5c) — key management service
- **2023** — [`luxfi/mpc@63f3517`](https://github.com/luxfi/mpc/commit/63f3517) — MPC daemon
- **2025** — [`luxfi/consensus@0a2f8b4`](https://github.com/luxfi/consensus/commit/0a2f8b4) — Quasar hybrid consensus
- **2025** — [`luxfi/zap@22a2a4c`](https://github.com/luxfi/zap/commit/22a2a4c) — zero-copy binary protocol
- **2025** — [`hanzoai/sqlite@b1cc929`](https://github.com/hanzoai/sqlite/commit/b1cc929) — distributed encrypted SQLite

## Architecture

Base (2022) — encrypted vault, CRDT sync, realtime APIs, Base Functions. The data plane.

Lux (2020) — 15 chains on every validator. Identity, keys, threshold FHE, MPC signing, EVM, DEX, bridge, ZK, quantum consensus, AI inference. The trust kernel.

Three tiers: AES-256-GCM + ML-KEM (default), TFHE threshold reveal (high-value), CKKS confidential compute (new products).

86 Lean 4 proofs. Zero sorry. 80+ papers. Red-teamed. Shipped.

**The operating system for sovereign apps.** Base owns state. Lux owns trust. Users own everything that matters.