The eyes and ears are at the edge. So is the governance.
A device does not ship raw feeds home and hope the core sorts it out. It carries the sensing stack, extracts against a subset of your own object model, signs frames at capture, and enforces the inference policy where the sensor lives.
That is the difference between an ingest pipeline and a governed observation system.
| State | What it means |
|---|---|
| Observed | A raw signal with source attribution, timestamp and the collecting sensor recorded. A fact about a sensor reading, never, at this stage, a fact about a person. |
| Evidence weighting | Observations carry weight rather than being counted, with clustering and scoring deciding when a candidate has enough behind it. |
| Candidate | A hypothesis under evaluation, with merge and split as evidence changes, and contradictions surfaced rather than averaged away. |
| Human gate | An approval gate over the quarantine decision. Crossing a threshold produces a proposal, not a promotion. |
| Canonical | A promoted entity that has crossed its thresholds and passed its compliance profile, carrying its evidence chain with it. |
What the area contains
Content intelligence and estate discovery
A signed leaf-to-trunk content graph over files and objects. Connectors that discover and profile relational, object, blob, catalog, BI, SaaS, Office, file-share and streaming sources, driven by a scan kernel with scheduling, checkpoints and live progress, persisted as a signed per-leaf inventory so a restart rebuilds without re-walking.
Around it: diagram generation with deterministic layout, SQL dialect and stored-procedure conversion, a canonical semantic-model representation that parses and serialises the major BI model formats, governance scorecards grading control gaps into a remediation roadmap, cloud posture enumeration across commercial and government partitions, and infrastructure-as-code export with no cloud credentials involved.
Read more →Surveillance and identity resolution
Observation to candidate to canonical entity, with evidence weighting, contradiction detection, a provenance chain with continuity verification, compliance profiles, and a human-gated quarantine decision standing between a score and a promotion.
Promotion is a governed act with a record, not a join.
Read more →Sensor intake
Sensor enrollment and lifecycle, clock synchronisation across sensors (without which multi-sensor fusion is guesswork) and, distinctively, a cognition policy governing what may be inferred from a given sensor, which is a different and stronger control than governing who may read it.
On the device: on-board and hardware drivers, on-edge speech-to-text, and a tamper-evident capture hash chain with frame-level provenance signing, so provenance attaches at capture rather than being asserted afterwards.
Predictive maintenance
Asset prognostics on the open condition-monitoring model: condition-indicator featurization across spectral, motor-current-signature and bearing-defect families, state detection, remaining-useful-life bounds with backtesting, fleet health boards, and governed advisories that show their rationale rather than emitting a score.
The same feature computation runs on the device, so an asset can be scored where it lives.
Tactical communications
Governed tactical networking and spectrum management with a software fallback physical layer. The reachable slice, named precisely: the tactical control plane, mesh formation with neighbour discovery and self-healing multi-band routing, disruption-tolerant networking with custody transfer and contact-graph routing, and one complete protected link measured to recover a burst error that destroys the payload without interleaving. The wider spectrum and waveform families, spectrum monitoring, modulation and protocol identification, direction finding, geolocation, jamming detection and the regulatory database, are built and not yet reached from production, and we say so rather than implying a full radio-frequency suite.
Communications security carries quantum-resistant hop and spreading patterns, anti-jamming, low-probability-of-intercept operation, over-the-air rekey and destruction of key material, each with an audit trail.
Battlefield operations
The reachable mission set, named precisely: fires and targeting with call-for-fire formatting, ballistic and engagement-zone solutions, weapon-target pairing, rules-of-engagement checks and human authorisation; force tracking with position reporting, composite tracks and filtering with fratricide prevention; counter-battery; radar ingest; ammunition status; orbital tracking.
The defense stack is not a separate product. It is the same platform with additional capability tiers unlocked by cell profile and licence, running the same nine services and the same enterprise foundation.
The crossover is the differentiator
Radar, sonar, thermal, laser, seismic-acoustic, LiDAR, RF and satellite sensing exist in this platform because of the defense work. An industrial buyer gets them on the same governed substrate as their historian data. Very few vendors can hold both ends of that.
Multi-sensor work is underpinned by two things usually missing: clock synchronisation across sensors, and time-difference-of-arrival aperture synthesis across distributed receivers.
24
tactical and mission protocol parsers, situational awareness, data links, drone telemetry, maritime and aviation tracking, motion imagery metadata, geospatial imagery, network capture, space packets, sonar, chemical and radiological sensing, and radio and spectrum formats
4
media modalities analysed (image, video, audio and LiDAR) with object detection, segmentation, speech recognition, speaker diarisation, scene and activity detection and point-cloud processing, and provenance recorded for every derived artifact
Plant and field protocol reach: OPC-UA · MTConnect · Modbus · DNP3 · IEC 61850 · BACnet · PROFINET · EtherCAT · CAN bus · historian and controller integrations · seismic and drilling formats · smart-meter feeds · RFID · marine and aviation tracking · low-power telemetry.
| Step | Where, and what happens |
|---|---|
| Capture | On the device. A frame-level signature is applied at the moment of capture, feeding a tamper-evident capture hash chain. |
| Extract | On the device, against a synchronised subset of your ontology, so data is structured against your object model at the point of capture. |
| Cognition gate | On the device. A policy governs what may be inferred from a given sensor, a different and stronger control than governing who may read it. |
| Verify | In the cell. Every arriving capture is authenticated against its signing certificate before it is trusted; unverified content is quarantined rather than ingested. |
| Promote | In the cell. Evidence weighting, contradiction detection, a compliance profile and a human gate stand between a score and a canonical entity. |
| Throughout | The classification label travels with the observation, and the hash chain accumulates link by link, including while the device has no link at all. |