Cursor (and Cursor Self-Hosted)
Sovereign deployment of the Cursor IDE with model routing through the governed gateway. Prompts and repository context stay inside the customer envelope.
FORGE · GOVERNED TOOLING LAYER
AI-Native Governed SDLC.
The AI coding assistants your developers already use, deployed sovereign and captured into the Audit Ledger (CAVR) inside the iTmethods governed envelope.
Design Partner Phase · 2026 GA
21 years operating regulated workloads · 100-plus Fortune 500 reference base · AWS Advanced Tier, MSP Certified.
WHY AI-NATIVE SDLC
The governance gap on AI coding assistants.
AI coding assistants moved from individual experiments to default tooling inside eighteen months. The productivity case is settled. The governance case is not. In SaaS form, prompts and code context leave the customer envelope, generated suggestions arrive without provenance, tool calls execute without policy checks, and there is no evidence file when an auditor asks how an AI-assisted commit reached production. iTmethods is building the Forge AI-Native Governed SDLC offering to close that gap: the same tools your developers want, deployed inside your sovereign perimeter, with prompt and tool-call evidence captured into the Reign Audit Ledger (CAVR), policy guardrails enforced at the gateway, and integration with the Modern DevOps pipeline so AI-assisted commits inherit the same controls as every other commit.
WHAT WE GOVERN
AI-Native SDLC scope.
Each tool is deployed and operated inside the customer governed envelope, not as SaaS. How it works: the IDE is bound to enterprise SSO, every prompt and tool call is routed through the governed gateway, captured hash-chained into the Audit Ledger (CAVR), policy-checked at the boundary, and any AI-assisted commit enters the same Modern DevOps pipeline as every other commit. No AI-generated bypass path.
The same tools appear in Forge AI Substrate Agent Runtime Operations when an autonomous agent is at the keyboard rather than a human. The pillar boundary is human-in-the-loop versus autonomous action; governance posture is calibrated accordingly.
Claude Code
Anthropic CLI and IDE integration operated with governed routing, prompt and tool guardrails, and evidence capture into the Audit Ledger (CAVR).
GitHub Copilot
Operated with enterprise governance, identity binding, telemetry capture, and integration into the customer evidence trail.
Cortex (IDP)
Internal developer portal with governance hooks, identity binding, and Audit Ledger (CAVR) integration. Service catalogs and golden paths are themselves audit objects.
Docker (including Compose for agents)
The substrate for ephemeral, governed developer sandboxes used to iterate with AI assistants on real code without exposing production systems.
MCP-enabled IDEs
IDE integrations exposing Model Context Protocol tools are governed at the MCP gateway with registration, allow-listing, and per-call policy.
Evidence captured supports: EU AI Act Article 9 · NIST AI RMF · ISO 42001 · OWASP LLM Top 10 · Internal data sovereignty controls.
Reign Instrumentation
Prompts, tool calls, model routing decisions, MCP invocations, and AI-assisted commits are captured into Reign's Audit Ledger (CAVR) as hash-chained immutable evidence objects. Same evidence supports OWASP LLM Top 10, NIST AI RMF, and EU AI Act Article 9 mappings. How Reign integrates.
Deployment
SaaS
Dedicated Cloud
Customer Cloud
Air-Gapped
Customer Cloud and Air-Gapped are the regulated defaults. See deployment options.
Built on iTmethods' codified 21-year practice of running foundational infrastructure under customer ownership. Sovereign Substrate Engineering.
Status and Engagement
Design Partner Phase · 2026 GACo-build the AI-Native Governed SDLC pattern.
Cursor Self-Hosted and Claude Code are deployable today as managed offerings under Forge AI Substrate Agent Runtime Operations. The full productized AI-Native Governed SDLC package (Cursor, Claude Code, Cortex, Docker sandboxes, Copilot Enterprise, MCP-enabled IDEs under one envelope with prompt and tool-call evidence) is in Design Partner Phase.
Design partners get co-development with iTmethods principals and an embedded expert-led pod, influence over governed gateway policy and Audit Ledger (CAVR) evidence schema, GA-pricing protection, reference customer status, and co-development sessions with Cursor, Anthropic, Cortex, and Docker partner engineering teams. Walk-away outcomes: AI-augmented developer velocity with DORA Elite as the target, audit-ready AI-assisted commits, no prompts or code leaving the customer envelope, uniform governance across AI-assisted and conventional workflows.