# Fourth Cloud — On-prem control plane assessment

> https://cloud.layer2c.com

Function-by-function scoring of on-prem control planes against the Fourth Cloud operational model. The instrument identifies gaps; it does not rank vendors.


## Governed chat

Governed chat (vCTOA): ask the research system at any property; every answer carries typed evidence, versions, and limits. Machine door + policy: https://virtual-cto-api-1006606217023.us-east4.run.app/api/v1/vctoa/registry

## Part of the Layer2C research system

Layer2C assesses authority. Fourth Cloud assesses operating-model readiness. Labs validates where authority holds through scoped builds. StackBuilder composes architectures from the assessed evidence. The 4+1 and Fourth Cloud models share the DAPM axis and a reasoning-plane keystone but are deliberately not isomorphic.

| Property | URL | Role |
|---|---|---|
| Layer2C (canon) | https://layer2c.com | 4+1 vendor authority assessments, scored with DAPM |
| Layer2C Labs | https://labs.layer2c.com | Validates where authority holds, through scoped real-hardware builds |
| StackBuilder | https://stackbuilder.layer2c.com | Composes architectures from the assessed evidence |
| System map | https://layer2c.com/system | How the four properties relate |

## Site navigation

| Path | Page |
|---|---|
| / | Landing |
| /what-is-fourth-cloud | Framework explainer |
| /methodology | How to read the scores |
| /compare | Cross-vendor comparison |
| /enterprise-buyers | For enterprise buyers |
| /technology-vendors | For technology vendors |
| /assessment/vmware-vcf-fourthcloud | VMware Cloud Foundation (VCF) assessment |
| /assessment/redhat-openshift-fourthcloud | Red Hat OpenShift assessment |
| /assessment/nutanix-fourthcloud | Nutanix Cloud Platform assessment |
| /assessment/oxide-fourthcloud | Oxide Computer assessment |
| /assessment/canonical-openstack-fourthcloud | Canonical OpenStack assessment |
| /assessment/bounded-kubernetes-fourthcloud | Bounded Kubernetes (k3s on NVIDIA DGX Spark) assessment |
| /assessment/hpe-private-cloud | HPE Private Cloud assessment |
| /assessment/suse-rancher-fourthcloud | SUSE Rancher Prime assessment |

## Plain-text mirrors

- https://cloud.layer2c.com/llms.txt — this file (navigation index)
- https://cloud.layer2c.com/llms-full.txt — complete dataset
- https://cloud.layer2c.com/feed.xml — RSS: new items on every assessment version
- https://cloud.layer2c.com/assessment/vmware-vcf-fourthcloud.md — VMware Cloud Foundation (VCF) (prose) · https://cloud.layer2c.com/assessment/vmware-vcf-fourthcloud.json (structured)
- https://cloud.layer2c.com/assessment/redhat-openshift-fourthcloud.md — Red Hat OpenShift (prose) · https://cloud.layer2c.com/assessment/redhat-openshift-fourthcloud.json (structured)
- https://cloud.layer2c.com/assessment/nutanix-fourthcloud.md — Nutanix Cloud Platform (prose) · https://cloud.layer2c.com/assessment/nutanix-fourthcloud.json (structured)
- https://cloud.layer2c.com/assessment/oxide-fourthcloud.md — Oxide Computer (prose) · https://cloud.layer2c.com/assessment/oxide-fourthcloud.json (structured)
- https://cloud.layer2c.com/assessment/canonical-openstack-fourthcloud.md — Canonical OpenStack (prose) · https://cloud.layer2c.com/assessment/canonical-openstack-fourthcloud.json (structured)
- https://cloud.layer2c.com/assessment/bounded-kubernetes-fourthcloud.md — Bounded Kubernetes (k3s on NVIDIA DGX Spark) (prose) · https://cloud.layer2c.com/assessment/bounded-kubernetes-fourthcloud.json (structured)
- https://cloud.layer2c.com/assessment/hpe-private-cloud.md — HPE Private Cloud (prose) · https://cloud.layer2c.com/assessment/hpe-private-cloud.json (structured)
- https://cloud.layer2c.com/assessment/suse-rancher-fourthcloud.md — SUSE Rancher Prime (prose) · https://cloud.layer2c.com/assessment/suse-rancher-fourthcloud.json (structured)

## Assessed vendors


### VMware Cloud Foundation (VCF)
- Status: **complete** · Version: v2.5 · Date: May 29, 2026
- Fourth Cloud Control Plane Assessment — Substrate-Agnostic
- Identity plane continuity: siloed (score 1)
- VMware Cloud Foundation is an operationally mature Fourth Cloud control plane for on-prem environments. The core finding: VCF is strongest at FC-2A and FC-2B, weakest at FC-1 and FC-4, and absent at FC-2C.

**Layer status:**
- FC-0 · Substrate (Physical & Virtual Substrate): Strong (avg 3.00)
- FC-1 · Context (Distributed Data & Context Fabric): Gap (avg 1.75)
- FC-2A · Orchestration (Infrastructure Orchestration): Moderate (avg 2.80)
- FC-2B · Runtime (Execution & Runtime): Moderate (avg 2.75)
- FC-2C · Reasoning (The Reasoning Plane): Absent (avg 0.00)
- FC-3 · Catalog (Application Distribution and Governance): Moderate (avg 2.75)
- FC-4 · Integration (Integration Fabric): Absent (avg 0.40)

**DAPM profile:** Retained 8 · Delegated 1 · Ceded 17


### Red Hat OpenShift
- Status: **complete** · Version: v2.6 · Date: May 29, 2026
- Fourth Cloud Control Plane Assessment — Red Hat Vendor Boundary
- Identity plane continuity: federated (score 3)
- Red Hat OpenShift's strongest Fourth Cloud characteristics are at FC-3 and FC-4, anchored by an included federated identity plane that spans orchestration through integration. OperatorHub's operator model — encoding Day 2 operational intelligence in the operator rather than requiring the enterprise to build operational knowledge — is a genuine platform capability included in the base subscription. The Keycloak identity federation plane spanning FC-2A through FC-4 is an included architectural advantage that eliminates the enterprise's need to build cross-layer identity bridges for primary orchestration, execution, application distribution, and integration functions. Scope: OpenShift is assessed at the Red Hat vendor boundary: the base OpenShift Container Platform subscription plus Red Hat-licensed add-on subscriptions (Application Foundations, Red Hat AI Enterprise), each named inline where it carries a score; capabilities requiring a different vendor (e.g. IBM watsonx, IBM Process Automation Manager) remain Closeable gaps.

**Layer status:**
- FC-0 · Substrate (Physical & Virtual Substrate): Moderate (avg 2.33)
- FC-1 · Context (Distributed Data & Context Fabric): Moderate (avg 2.25)
- FC-2A · Orchestration (Infrastructure Orchestration): Moderate (avg 2.80)
- FC-2B · Runtime (Execution & Runtime): Strong (avg 3.00)
- FC-2C · Reasoning (The Reasoning Plane): Absent (avg 0.00)
- FC-3 · Catalog (Application Distribution and Governance): Strong (avg 3.00)
- FC-4 · Integration (Integration Fabric): Moderate (avg 2.60)

**DAPM profile:** Retained 14 · Delegated 6 · Ceded 6


### Nutanix Cloud Platform
- Status: **complete** · Version: v1.4 · Date: May 29, 2026
- Fourth Cloud Control Plane Assessment — Nutanix Vendor Boundary
- Identity plane continuity: partial (score 2)
- Nutanix Cloud Platform is an architecturally complete on-premises control plane spanning VMs, Kubernetes, databases, and AI inference, rather than a pure IaaS substrate or a developer-platform-first stack. Its defining strength is the unified management plane across VMs, Kubernetes, databases, AI inference, and cloud burst through a single Prism Central surface — broad workload management coverage across the full portfolio. NC2 on AWS, Azure, and GCP with the same Prism Central management plane is Nutanix's strongest FC-0 differentiator: the only on-premises vendor providing genuine same-control-plane cloud portability through its base product.

**Layer status:**
- FC-0 · Substrate (Physical & Virtual Substrate): Moderate (avg 2.67)
- FC-1 · Context (Distributed Data & Context Fabric): Gap (avg 1.75)
- FC-2A · Orchestration (Infrastructure Orchestration): Moderate (avg 2.60)
- FC-2B · Runtime (Execution & Runtime): Strong (avg 3.00)
- FC-2C · Reasoning (The Reasoning Plane): Absent (avg 0.00)
- FC-3 · Catalog (Application Distribution and Governance): Moderate (avg 2.75)
- FC-4 · Integration (Integration Fabric): Absent (avg 0.60)

**DAPM profile:** Retained 8 · Delegated 1 · Ceded 17


### Oxide Computer
- Status: **complete** · Version: v1.4 · Date: May 29, 2026
- Fourth Cloud Control Plane Assessment — Rack-Scale IaaS
- Identity plane continuity: partial (score 2)
- Oxide Computer is the most important finding in this instrument for what it reveals about the Fourth Cloud stack structure: Oxide is the IaaS layer on which a Fourth Cloud control plane runs, not a Fourth Cloud control plane itself. Conventional control planes are software that runs on commodity OEM hardware. Oxide inverts this: it is purpose-built hardware with an integrated software control plane that provides VM provisioning, elastic block storage, VPC networking, and hardware lifecycle management as one product. The correct comparison for Oxide is AWS EC2, Azure Virtual Machines, or GCP Compute Engine: a cloud IaaS substrate, not an enterprise control plane.

**Layer status:**
- FC-0 · Substrate (Physical & Virtual Substrate): Gap (avg 1.33)
- FC-1 · Context (Distributed Data & Context Fabric): Absent (avg 0.25)
- FC-2A · Orchestration (Infrastructure Orchestration): Gap (avg 1.60)
- FC-2B · Runtime (Execution & Runtime): Gap (avg 1.25)
- FC-2C · Reasoning (The Reasoning Plane): Absent (avg 0.00)
- FC-3 · Catalog (Application Distribution and Governance): Gap (avg 1.00)
- FC-4 · Integration (Integration Fabric): Absent (avg 0.00)

**DAPM profile:** Retained 17 · Delegated 1 · Ceded 8


### Canonical OpenStack
- Status: **complete** · Version: v1.0 · Date: June 11, 2026
- Fourth Cloud Control Plane Assessment — Self-Managed at the Ubuntu Pro Boundary
- Identity plane continuity: partial (score 2)
- Canonical OpenStack is the open-source, commodity-hardware occupant of the VM-tenancy niche: the platform to deploy when you need to slice shared hardware into self-service tenant units smaller than a node, with a hard distrust boundary between them. That is the question that decides this assessment. Answer yes — as carriers, sovereign clouds, research federations, and GPU operators structurally do — and OpenStack remains the commercially supported open-source platform built around hard multi-tenancy as a first-class object. Answer no, and every "Why not OpenStack?" is "Why not Kubernetes?" in disguise, and the function scores below answer it.

**Layer status:**
- FC-0 · Substrate (Physical & Virtual Substrate): Gap (avg 1.67)
- FC-1 · Context (Distributed Data & Context Fabric): Gap (avg 1.50)
- FC-2A · Orchestration (Infrastructure Orchestration): Moderate (avg 2.00)
- FC-2B · Runtime (Execution & Runtime): Moderate (avg 2.25)
- FC-2C · Reasoning (The Reasoning Plane): Absent (avg 0.00)
- FC-3 · Catalog (Application Distribution and Governance): Gap (avg 1.00)
- FC-4 · Integration (Integration Fabric): Gap (avg 1.00)

**DAPM profile:** Retained 13 · Delegated 13 · Ceded 0


### Bounded Kubernetes (k3s on NVIDIA DGX Spark)
- Status: **complete** · Version: v1.1 · Date: July 7, 2026
- Fourth Cloud Control Plane Assessment - Kubernetes, bounded by a workload
- Identity plane continuity: partial (score 2)
- This assessment scores a Kubernetes control plane assembled from open-source components on a single node and bounded by one production workload, which supplies the product boundary that makes each function testable. k3s provides the orchestration kernel; the data plane (CloudNativePG with pgvector, MinIO), model serving (vLLM), local embeddings, identity (Keycloak), and ingress (Traefik) are assembled and operated by the enterprise.

**Layer status:**
- FC-0 · Substrate (Physical & Virtual Substrate): Gap (avg 1.33)
- FC-1 · Context (Distributed Data & Context Fabric): Gap (avg 1.75)
- FC-2A · Orchestration (Infrastructure Orchestration): Moderate (avg 2.00)
- FC-2B · Runtime (Execution & Runtime): Moderate (avg 2.25)
- FC-2C · Reasoning (The Reasoning Plane): Absent (avg 0.00)
- FC-3 · Catalog (Application Distribution and Governance): Gap (avg 1.25)
- FC-4 · Integration (Integration Fabric): Gap (avg 1.20)

**DAPM profile:** Retained 24 · Delegated 0 · Ceded 2


### HPE Private Cloud
- Status: **complete** · Version: v1.2 · Date: July 30, 2026
- Fourth Cloud Control Plane Assessment — HPE Morpheus + VM Essentials on HPE Private Cloud
- Identity plane continuity: partial (score 2)
- HPE Private Cloud, orchestrated by HPE Morpheus with VM Essentials as HPE's own hypervisor, is a genuine Fourth Cloud control plane. This row scores the vendor-recommended path for the audience the instrument primarily serves: the architect building a Fourth Cloud to land new applications on, or to migrate applications to. Where some vendors deploy other vendors' control planes, HPE kept and rebuilt its own. Morpheus supplies the unified orchestration, governance, and self-service surface. VM Essentials supplies a native runtime. Both run under one HPE vendor relationship.

**Layer status:**
- FC-0 · Substrate (Physical & Virtual Substrate): Moderate (avg 2.00)
- FC-1 · Context (Distributed Data & Context Fabric): Moderate (avg 2.75)
- FC-2A · Orchestration (Infrastructure Orchestration): Moderate (avg 2.40)
- FC-2B · Runtime (Execution & Runtime): Strong (avg 3.00)
- FC-2C · Reasoning (The Reasoning Plane): Absent (avg 0.00)
- FC-3 · Catalog (Application Distribution and Governance): Moderate (avg 2.50)
- FC-4 · Integration (Integration Fabric): Absent (avg 0.60)

**DAPM profile:** Retained 4 · Delegated 4 · Ceded 18


### SUSE Rancher Prime
- Status: **complete** · Version: v1.1 · Date: July 28, 2026
- Fourth Cloud Control Plane Assessment — SUSE Vendor Boundary
- Identity plane continuity: federated (score 3)
- SUSE Rancher Prime is a multi-cluster Kubernetes control plane whose defining characteristic is estate-wide reach: one management plane federating identity, RBAC, policy, and GitOps across on-premises, cloud, and edge clusters — including managed cloud Kubernetes the enterprise already runs — with VMs joining through SUSE Virtualization. Scope: the SUSE vendor boundary — the SUSE Rancher Prime base subscription plus Suite-tier components, the SUSE AI Factory subscription, and SUSE Edge, each named inline where it carries a score; capabilities requiring a different vendor remain Closeable gaps.

**Layer status:**
- FC-0 · Substrate (Physical & Virtual Substrate): Moderate (avg 2.33)
- FC-1 · Context (Distributed Data & Context Fabric): Moderate (avg 2.00)
- FC-2A · Orchestration (Infrastructure Orchestration): Moderate (avg 2.60)
- FC-2B · Runtime (Execution & Runtime): Strong (avg 3.00)
- FC-2C · Reasoning (The Reasoning Plane): Absent (avg 0.00)
- FC-3 · Catalog (Application Distribution and Governance): Moderate (avg 2.75)
- FC-4 · Integration (Integration Fabric): Gap (avg 1.00)

**DAPM profile:** Retained 9 · Delegated 16 · Ceded 1