Code sovereignty risk assessment.

Sovereignty is not a slogan. It is whether your team can understand, operate, export, and leave the place where your code lives.

Risk checks

One vendor controls hosting, identity, CI, packages, and AI features. Per-seat pricing shapes who gets access. AI-training or model-improvement terms are unclear. Full export or restore is not practiced. Data location and backup location are unclear. Leaving requires proprietary workflows or formats. No one owns forge incident response. No migration runbook exists for the current host.