Helm
One chart, five workloads
`helm install shakti ./chart -f values.yaml` — ships the server, dashboard, Axon workers, Temporal worker, migration job.
Shakti Server
Self-hosted. Multi-user. BYOK. Shakti Server is the binary your platform team deploys into an air-gap-able Kubernetes cluster. One Helm chart covers the server, the dashboard SPA, and the Axon graph; external Postgres + Redis hook in via values.yaml.
OIDC
SSO on day one
Configured via environment: `SHAKTI_AUTH__PROVIDER=okta` (or Entra, WorkOS, Clerk, Google). PKCE flow + tenant upsert are built in.
SCIM (v2)
Provisioning automated
User + group provisioning through the SCIM 2.0 surface lands in v2. Okta / Entra / OneLogin connectors verified against the conformance suite.
RLS
Tenant isolation is enforced at the DB
Every tenant-scoped table has FORCE ROW LEVEL SECURITY on; the middleware binds the session so a rogue handler cannot escape the org scope.
Audit export
Signed evidence bundles
One HTTP call (`GET /v1/audit/export/{packet_id}`) returns a signed JSON bundle SOC 2 auditors can consume without a portal.
Priority support
Founding-customer incentives
First twenty design partners get Axon tuning ($25K value) + white-glove integration ($40K) bundled with Server Pro.
Kick the tires in your own cluster.
Self-hosted Desktop build + 14-day evaluation license. No seat commitment.