Sovereign-by-Design A Reference Architecture for AI and Blockchain Enabled Systems
Matteo Esposito, Lodovica Marchesi, Roberto Tonelli, Valentina Lenarduzzi
TL;DR
The paper argues that digital sovereignty must be treated as an architectural property rather than a purely regulatory goal. It proposes the Sovereign Reference Architecture (SRA), integrating Self-Sovereign Identity, blockchain-based trust and auditability, sovereign data governance, and controlled Generative AI to achieve auditable, evolvable, and jurisdiction-aware AI-enabled systems. The architecture uses layer-specific constraints and cross-cutting blockchain anchors to provide provenance, accountability, and continuous assurance for identity, data, AI, and application layers, while addressing GenAI-related governance risks. By aligning with the EU Cloud Sovereignty Framework and related standards, the SRA offers a principled foundation for practical, interoperable sovereignty across federated cloud and edge environments and guides future research in software architecture, GenAI, and digital sovereignty.
Abstract
Digital sovereignty has emerged as a central concern for modern software-intensive systems, driven by the dominance of non-sovereign cloud infrastructures, the rapid adoption of Generative AI, and increasingly stringent regulatory requirements. While existing initiatives address governance, compliance, and security in isolation, they provide limited guidance on how sovereignty can be operationalized at the architectural level. In this paper, we argue that sovereignty must be treated as a first-class architectural property rather than a purely regulatory objective. We introduce a Sovereign Reference Architecture that integrates self-sovereign identity, blockchain-based trust and auditability, sovereign data governance, and Generative AI deployed under explicit architectural control. The architecture explicitly captures the dual role of Generative AI as both a source of governance risk and an enabler of compliance, accountability, and continuous assurance when properly constrained. By framing sovereignty as an architectural quality attribute, our work bridges regulatory intent and concrete system design, offering a coherent foundation for building auditable, evolvable, and jurisdiction-aware AI-enabled systems. The proposed reference architecture provides a principled starting point for future research and practice at the intersection of software architecture, Generative AI, and digital sovereignty.
