Read-only assessment
Approved scope constrains assessment. Remediation remains an explicit action your team reviews and applies.
ARCHITECTUREThe boundary is
The boundary is
part of the architecture.
Go services, PostgreSQL, and a React console, deployed on your infrastructure. Signed offline bundles bring content in; assessment evidence stays under your control.
CUSTOMER-CONTROLLED NETWORK
Signed offline bundles↓
OUTBOUND: 0Select a component to explore its role.
Conceptual architecture illustration. Deployment sizing and topology depend on your environment.
OPERATING PRINCIPLES
Isolation you can reason about.
No model sits between a probe and its evidentiary verdict. The chain is deterministic, explainable, and verifiable offline.
Signed content ingress
Intelligence and updates arrive as offline bundles. Signature verification precedes use.
Independent evidence checks
Export and verify sealed evidence without relying on the operator console to tell you it passed.