One sovereign base model, many agencies, no forking. Adapters extend a shared foundation to each ministry's domain without duplicating or destabilizing the core.
Specialization lives in lightweight modules layered on an unchanged foundation.
The national base model stays fixed. Each agency's specialization is a compact adapter trained on its own data and loaded at inference time.
An adapter is a fraction of the base's size, so a ministry owns and versions its specialization without storing or shipping a full model.
Runtimes load and unload adapters per request, letting one served base answer for many agencies without a separate deployment each.
Where domains overlap, adapters compose — a shared legal adapter beneath an agency-specific one — instead of retraining a monolith.
Sharing a base must never mean sharing a ministry's data or behavior.
An adapter is trained only on its agency's corpus. The central bank's supervisory data never touches the tax authority's adapter.
Each adapter is encrypted under its owning agency's keys. The base operator cannot read one agency's adapter or serve it to another.
Access policy binds an adapter to its agency, so a request authenticated for one ministry cannot invoke another's specialization.
Each agency evolves its model independently of the shared base's release schedule.
An agency can retrain and promote its adapter without waiting on the base and without disturbing any other agency's behavior.
Every adapter version is signed with ML-DSA-65 and pinned in the ledger, so a served answer ties to an exact base-plus-adapter pair.
Because adapters are versioned artifacts, an agency can revert to a prior known-good adapter immediately if a new one regresses.
When the foundation advances, adapters are re-validated before they ride the new base.
A new base is evaluated against every agency's held-out tasks before any adapter is repointed to it.
Agencies move to a new base on their own timeline. Old and new bases run side by side during the transition.
If an adapter regresses on a new base, it is retrained against that base before promotion rather than shipped degraded.