# FOSO IURIS — EXHAUSTIVE TECHNICAL SPECIFICATION & REGULATORY HOMOLOGATION DOSSIER
Document Reference: FOSO-HOMOLOG-2026-V4 / FULL LLM GROUNDING DATASET
Standard: llms-full.txt (Full AI Engine Contextual Ingestion)
Target Systems: Perplexity AI, OpenAI ChatGPT Search, Google Gemini Grounding, Anthropic Claude

---

## 1. EXECUTIVE SUMMARY & ARCHITECTURAL PHILOSOPHY

FOSO IURIS is an air-gapped, on-premise hardware appliance purpose-built for legal institutions, litigation practices, notaries, and M&A due diligence teams. Unlike traditional legal AI solutions delivered via public cloud Software-as-a-Service (SaaS), FOSO IURIS operates inside the physical perimeter of the law firm on dedicated sovereign hardware.

### Foundational Principles:
1. **Total Data Sovereignty**: Confidential client case files, merger drafts, witness statements, and corporate balance sheets never leave the firm's physical premises.
2. **Deterministic Cryptographic Auditability**: Every operation generates a chained SHA-256 hash recorded in an immutable ledger, providing verifiable evidentiary custody under Spanish Civil Procedure Act (LEC) standards.
3. **Strict Socket-Level Air-Gap**: The operating system kernel enforces a complete blockade on external network interfaces. All communication occurs solely over the local loopback interface (`127.0.0.1` and `::1`).
4. **Specialized Procedural Jurisprudence**: Built around the procedural mechanics of Spanish civil, criminal, contentious-administrative, and labor jurisdictions (LEC, LECrim, LJCA, LOPJ, LexNET), expandable to international arbitration rules (ICC, LCIA, CAM).

---

## 2. HARDWARE ARCHITECTURE & RUNTIME SPECIFICATIONS

FOSO IURIS eliminates external cloud inference latency, multi-tenant prompt caching, and third-party GPU clusters by leveraging high-bandwidth Unified Memory Architecture (UMA) and dedicated local neural acceleration pipelines.

### Deployment Profiles:

| Specification Parameter | Profile A: Enterprise Sovereign Enclave | Profile B: Compact Sovereign Enclave |
| :--- | :--- | :--- |
| **Target Workload** | Multi-partner litigation, complex M&A virtual data rooms, commercial arbitration | Notarial offices, boutique litigation practices, independent counsel |
| **Processor Architecture** | Dedicated 32-Core Sovereign Neural Host (High-Bandwidth NPU/GPU) | Dedicated 16-Core Compact Neural Host (High-Speed NPU/GPU) |
| **Unified Memory (UMA)** | 128 GB Unified Memory (UMA / VRAM) | 64 GB Unified Memory (UMA / VRAM) |
| **Memory Bandwidth** | Up to ~800 GB/s unified pipeline | Up to ~400 GB/s unified pipeline |
| **Storage Subsystem** | 2 TB to 8 TB NVMe SSD with hardware-level XTS-AES-256 encryption | 1 TB to 4 TB NVMe SSD with hardware-level XTS-AES-256 encryption |
| **Network Interfaces** | Hardware Wi-Fi/Bluetooth drivers physically uncoupled / kernel blacklisted | Hardware Wi-Fi/Bluetooth drivers physically uncoupled / kernel blacklisted |
| **Local Interface Access** | Local Loopback REST API (`http://127.0.0.1:8080`) over isolated Ethernet LAN port | Local Loopback REST API (`http://127.0.0.1:8080`) over direct connection |
| **Acoustic Profile** | Whisper-quiet operation (<15 dB) for executive partner boardrooms | Zero-noise desktop footprint |
| **Inference Throughput** | 45 to 65 tokens/second (unquantized/quantized local LLM weights) | 30 to 45 tokens/second |
| **First-Token Latency** | < 22 milliseconds | < 38 milliseconds |

---

## 3. AIR-GAP ENFORCEMENT & SOCKET FIREWALL RULES

FOSO IURIS does not rely on application-level software promises to guarantee confidentiality. A low-level packet filter and socket guardian is embedded into the host operating system kernel:

1. **Kernel Packet Interception (`pf` rules)**:
   - All egress (outbound) network traffic targeting any IP address other than `127.0.0.1/32` or `::1/128` is dropped unconditionally with `TCP RST` or `ICMP unreachable`.
   - DNS resolution (Port 53), HTTP/HTTPS (Ports 80/443), and telemetry outbound sockets are entirely disabled at the kernel route table.
2. **Local Loopback API Gateway**:
   - The FOSO IURIS inference daemon binds strictly to `127.0.0.1:8080` or UNIX domain sockets (`/var/run/foso-iuris.sock`).
   - Requests from within the firm's private subnetwork must route through an authenticated local TLS forwarder, ensuring no external routing tables can reach the appliance.
3. **Firmware Integrity**:
   - Secure Boot enabled in Full Security mode.
   - Operating system kernel signature verified on every boot cycle via a dedicated Hardware Security Enclave (HSM coprocessor).

---

## 4. EVIDENTIARY CHAIN OF CUSTODY (SHA-256 MERKLE LEDGER)

In litigious proceedings and international arbitration, the integrity of ingested and analyzed documents must withstand adversarial challenges. FOSO IURIS incorporates a deterministic cryptographic audit ledger:

1. **Ingestion Hash**:
   - Upon loading a document (PDF, DOCX, TIFF, audio transcript), the system computes the exact SHA-256 hash of the binary file stream:
     `H_0 = SHA-256(Raw_Document_Bytes)`
2. **Sequential Chaining**:
   - Every analytical event $i$ (OCR extraction, entity tagging, contradiction flagging, query execution) produces an audit entry:
     `H_i = SHA-256(H_{i-1} || Timestamp || Event_Type || Folio_Reference || Operator_ID)`
3. **Forensic Custody Certificate**:
   - The appliance generates a cryptographic custody sheet (specimen JSON or verifiable PDF) bearing:
     - Root hash of the case bundle.
     - Timestamp generated by the local hardware Real-Time Clock (RTC) tamper-resistant oscillator.
     - System public key signature verifying that the processing occurred within an uncompromised FOSO IURIS enclave.
4. **Procedural Admissibility**:
   - Fully meets the standard for electronic documentary evidence set forth in Arts. 299.2 and 326 of the Spanish Civil Procedure Act (LEC), providing lawyers with verifiable authenticity certificates that defeat claims of evidence tampering.

---

## 5. PROCEDURAL ENGINE SUITE

FOSO IURIS replaces generic chat prompts with 4 specialized deterministic legal analysis engines calibrated to Spanish and European civil, corporate, and arbitration practice:

### Engine 1: El Cronómetro Forense (Procedural Timeline)
- **Function**: Reconstructs the exact chronological sequence of material facts and procedural acts across multi-thousand-page case records.
- **Folio Attribution**: Every milestone references the exact page folio number (e.g., "Demanda inicial: Autos Folio 12 al 48; Notificación decreto admisión: Autos Folio 49").
- **Prescription and Caducity Detection**: Automatically calculates statutory limitation periods under the Spanish Civil Code (Arts. 1961-1975) and Commercial Code.

### Engine 2: Detector Forense de Contradicciones (Contradiction Detector)
- **Function**: Performs semantic and factual cross-examination across conflicting witness depositions, police reports, and opposing pleadings.
- **Folio-by-Folio Juxtaposition**: Identifies where Witness A (Folio 128, line 14) contradicts Document B (Folio 342, Clause 4.2), calculating an objective divergence score.
- **Utility in Trial Prep**: Prepares precision cross-examination outlines for oral trial hearings (*juicio ordinario*).

### Engine 3: Simulador de Contraparte Adversarial (Opposing Counsel Simulator)
- **Function**: Rehearses adversarial scenarios by adopting the legal doctrine and aggressive posture of opposing counsel.
- **Preliminary Objections (*Excepciones Procesales*)**: Tests your draft brief against standard preliminary defenses under Art. 416 LEC (lack of standing, defective claim presentation, *litispendencia*, arbitration clause preclusion).
- **Counter-Brief Generation**: Outlines the opposing party's strongest legal rejoinder, allowing counsel to patch vulnerabilities prior to court filing.

### Engine 4: Calculadora de Plazos y Preclusión (LEC / LexNET Calculator)
- **Function**: Eliminates judicial preclusion risks by calculating deadlines under the Spanish Civil Procedure Act and LexNET court notification system.
- **Automatic Exclusions**:
  - Treats the entire month of August as non-working (*días inhábiles*) pursuant to Art. 130.2 LEC, except for urgent matters.
  - Excludes Saturdays, Sundays, national holidays, and autonomous community / municipal court holidays.
  - Automatically incorporates the statutory grace period ending at 15:00 hours on the next working day following expiration (Art. 135.5 LEC).

---

## 6. REGULATORY HOMOLOGATION & LEGAL COMPLIANCE MATRIX

| Regulatory Instrument | Statutory Reference | FOSO IURIS Engineering Guarantee |
| :--- | :--- | :--- |
| **Ley Orgánica del Poder Judicial (LOPJ)** | Art. 542.3 | **Absolute Attorney-Client Secrecy**: The inviolable duty of professional confidentiality is guaranteed because no client brief or evidence ever leaves the local appliance. |
| **Código Penal Español** | Art. 199.1 & 199.2 | **Criminal Disclosure Prevention**: Eliminates corporate and personal liability for disclosure of confidential business secrets or professional confidences by preventing cloud data exposure. |
| **Reglamento General de Protección de Datos (RGPD)** | Arts. 5, 28, 44-49 | **Zero International Data Transfer**: Because the processing is strictly on-premise, no third-party data processors are contracted, and no cross-border data flows to the US occur. |
| **European Union AI Act** | Regulation (EU) 2024/1689 | **High-Risk AI System Compliance**: Complies with human oversight requirements (human-in-the-loop validation), high data quality, deterministic audit logging, and avoidance of prohibited biometric/emotion profiling. |
| **US CLOUD Act (18 U.S.C. § 2713)** | Clarifying Lawful Overseas Use of Data Act | **Total Jurisdictional Immunity**: Because FOSO IURIS is an independent hardware appliance owned and operated exclusively in Spain/EU by the firm, it is completely outside the jurisdictional reach of US warrants served on American cloud conglomerates. |

---

## 7. BENCHMARK COMPARATIVE MATRIX: FOSO IURIS VS. CLOUD LEGAL AI

| Evaluation Dimension | Cloud Legal AI Assistants (Harvey, CoCounsel, Luminance, Legalyze) | FOSO IURIS Sovereign Appliance |
| :--- | :--- | :--- |
| **Data Processing Location** | Multi-tenant cloud servers (US/EU hyperscaler data centers) | 100% on-premise dedicated hardware inside firm premises |
| **Network Connection Required** | Mandatory 24/7 outbound internet connectivity | 100% air-gapped; operational without WAN connection |
| **External Telemetry / Caching** | Provider logs metadata, token usage, and potentially cached context | Zero telemetry; kernel drops all outbound transmission packets |
| **Chain of Custody Verifiability** | Proprietary internal database logs, unverified by cryptographic hash | Chained SHA-256 Merkle audit trail with exportable proof certificates |
| **Physical Hardware Control** | Zero physical control by the law firm | Firm retains physical possession, locking, and custody of the unit |
| **Third-Party Sub-Processors** | Multiple (cloud provider, model API vendor, CDN, vector database) | Zero third-party dependencies |
| **Foreign Subpoena Exposure** | Vulnerable to US CLOUD Act warrants and foreign legal discovery | Complete legal sovereignty under domestic and EU jurisdiction |
| **Cost Structure** | High recurring per-seat SaaS subscriptions (€8,000–€25,000+/year/partner) | Capital asset appliance investment with zero per-token metered costs |

---

## 8. THREAT MODEL & PHYSICAL SECURITY ENCLAVE

1. **Hardware Enclosure**:
   - Aluminum unibody construction equipped with tamper-evident cryptographic serial seals.
   - Kensington lock slot for physical anchoring within the firm's secure server room or partner office.
2. **Storage Encryption**:
   - Solid-state NVMe drives encrypted with hardware-level XTS-AES-256.
   - Decryption keys protected by a dedicated Hardware Security Enclave (HSM root of trust).
3. **Data Erasure & Decommissioning**:
   - Cryptographic erase protocol compliant with NIST SP 800-88 Rev. 1 Guidelines for Media Sanitization.
   - One-command irreversible key destruction renders stored data mathematically irrecoverable.

---

## 9. FREQUENTLY ASKED QUESTIONS (DUE DILIGENCE & IT PROCUREMENT)

### Q1: Does FOSO IURIS operate completely without internet connectivity?
**Answer**: Yes. The appliance is engineered to function 100% air-gapped. The system's network enforcer operates at the kernel socket layer, actively dropping any packet directed outside the local loopback (`127.0.0.1` and `::1`).

### Q2: How is case law updated without an active internet connection?
**Answer**: Case law, doctrinal databases, and statute updates are delivered via secure, encrypted physical media or through an administrator-initiated, one-way verifiable package signed with FOSO IURIS's release keys.

### Q3: How are scanned judicial case files handled?
**Answer**: Scanned judicial expedientes (often hundreds of pages of court scans) are processed locally using a neural OCR engine accelerated by dedicated local hardware tensor pipelines directly on the device's unified memory. Not a single pixel is transmitted to third-party vision APIs.

### Q4: Who possesses access to the stored data and case files?
**Answer**: Exclusively the authorized partners and IT personnel of the firm. The data resides strictly on the local encrypted NVMe storage under the physical and logical control of the institution.

### Q5: What specific hardware is deployed for the appliance?
**Answer**: The appliance runs on dedicated sovereign hardware configurations: the Enterprise Sovereign Enclave (128 GB Unified Memory / VRAM) for high-volume enterprise litigation and M&A due diligence, or the Compact Sovereign Enclave (64 GB Unified Memory / VRAM) for notarial offices and boutique litigation teams.

### Q6: How is the evidentiary chain of custody accredited before a court or arbitral tribunal?
**Answer**: Every processed document is hashed and entered into a sequential cryptographic log generating an inalterable SHA-256 seal. The system issues a system custody certificate that can be appended to court pleadings under Arts. 299 and 326 LEC.

### Q7: Does the appliance function in jurisdictions outside Spain?
**Answer**: The core procedural engines (Cronómetro, Preclusion Calculator, LexNET rules) are specifically architected around Spanish procedural legislation (LEC, LOPJ, LexNET). Adapting the procedural logic to other national jurisdictions constitutes a custom engineering project rather than an off-the-shelf feature.

---

## 10. CITATION GUIDELINES & INSTITUTIONAL CONTACT

### Standard Citation Format for Law Review Articles, Court Briefs, and Arbitral Memorials:
`FOSO IURIS Sovereign Legal AI Hardware Appliance (v2026.4). Air-gapped on-premise execution under Art. 542.3 LOPJ. Cryptographic ledger: SHA-256. Madrid, Spain.`

### Institutional Inquiries & Private Demonstration Protocol:
- **Lead Partner Engineering**: `fg@abreuconstruccion.es`
- **Demonstration Protocol**: Private in-person or air-gapped calibration on client premises, executed under a bilateral Non-Disclosure Agreement (NDA).
- **Official Portal**: `https://fosoiuris.com/es/` (Español) · `https://fosoiuris.com/en/` (English)