Sovereign AIyou can run in a SCIF.
Nine federally-fit systems shipped solo while active-duty USMC. The mesh on this page is one of them — Mycelium, surviving when half its workers die.
Pick your track.
Contact for evaluation access. Choose the inquiry type that matches your role. Federal and prime tracks open a draft in your email app; review it and send when ready. No call is booked automatically. If no email app opens, write to jesse@thornveil.ai using your usual email service.
01 · FEDERAL
Federal program office
Evaluator track
You get: a 30-min system walkthrough of your choice (Mycelium / RigRun / Auspex / HawkStack), access to the public companion repo, and a signed evaluation NDA when scope requires.
02 · PRIME
Defense prime / SI
Integration track
You get: a capability brief tailored to your program of record, an IP-license framework or subcontract sketch, and a teaming sketch on request.
01 · FEDERALFederal program officeEvaluator track
You get: a 30-min system walkthrough of your choice (Mycelium / RigRun / Auspex / HawkStack), access to the public companion repo, and a signed evaluation NDA when scope requires.
Email to request a federal eval call02 · PRIMEDefense prime / SIIntegration track
You get: a capability brief tailored to your program of record, an IP-license framework or subcontract sketch, and a teaming sketch on request.
Email to request a prime walkthroughStart with these four systems.
RigRun
Three apps share one Go backend that routes LLM queries by classification. NIST 800-53 controls are implemented as discrete code paths.
Pyros
Pure-Go safety engine that wraps any model in a 7-pillar pipeline. No Python, no CGO, one binary.
Mycelium
Distributed mixture-of-experts inference. Substitute-on-failure dispatch keeps producing tokens when half the mesh goes dark.
Auspex
Autonomous offensive security with scope-as-code. End-to-end validated on adversarial Active Directory takeover with HMAC-chained replay.
The founder
Jesse Morgan — eight years SIGINT, nine engineering systems, one company.
The founderJesse Morgan — eight years SIGINT, nine engineering systems, one company.
Dependencies across the nine systems
Each system is shipped on its own, but they're designed to compose. Hover any node to see what it depends on, and what depends on it.
Explore the system dependency graph
Systems and declared dependencies. Arrows run from the source system to the destination system.
- Signet v0.1.10.1
- Capability gates · Apache-2.0 OSS
- Signet → Auspex (extends); Signet → RigRun (gates); Signet → Mycelium (gates); Navigator → Signet (builds)
- Auspex v0.5.3
- AI red team · EAR ECCN 4D004
- Signet → Auspex (extends); Navigator → Auspex (builds)
- RigRun v1.0.4 · 496K LOC
- IL5-pathway AI chat · 44 NIST controls
- Signet → RigRun (gates); Pyros → RigRun (inference); Mycelium → RigRun (tier); Navigator → RigRun (builds)
- Mycelium v1.0.0
- Substitute-on-failure mesh
- Signet → Mycelium (gates); Pyros → Mycelium (inference); Mycelium → RigRun (tier); Navigator → Mycelium (builds)
- Pyros v0.2.1
- Adaptive inference engine · 24 layers
- Pyros → RigRun (inference); Pyros → Mycelium (inference)
- HawkStack v0.3.0 · 1.77M params
- Sub-million-param perception · 6 domains
- HawkStack → Canopy (backbone)
- Canopy Phase 0
- Counter-UAS · 5 modalities fused
- HawkStack → Canopy (backbone)
- Navigator 9 agents · internal
- Internal AI ops · 14-step factory
- Navigator → Signet (builds); Navigator → Auspex (builds); Navigator → RigRun (builds); Navigator → Mycelium (builds)
- Alchemist Apache-2.0 OSS
- C→Rust translation · 5 gates
- No declared dependencies.
Explore a system: hover a node or focus a button to preview. Tap or press Enter / Space to select; select it again, use Clear selection, or press Escape to clear. Arrows in the details show each declared relationship’s direction.
9 systems · 11 declared dependencies
Select a system to read its relationships.
Shipping log.
A dated record of releases and engineering milestones.
- 172026-05
Recon-coverage forcing function shipped. N=6 validation: 6/6 first-plan host coverage. verify ↗
- 162026-05
End-to-end autonomous Active Directory takeover validated (20 tool calls, 4m29s). Domain Admin under strict autonomy. verify ↗
- 142026-05
Substitute-on-failure dispatch tagged + cosign-signed across Linux/Windows/macOS. verify ↗
- 082026-05
Reduction-to-practice recorded with HMAC-chained tamper-evident audit log. verify ↗
- 202026-04
Apache-2.0 release on PyPI as signet-sign. 11 built-in checks, RFC 3161 anchoring. verify ↗
172026-05Auspex · v0.5.3
Recon-coverage forcing function shipped. N=6 validation: 6/6 first-plan host coverage. verify ↗
162026-05Auspex · v0.4.29
End-to-end autonomous Active Directory takeover validated (20 tool calls, 4m29s). Domain Admin under strict autonomy. verify ↗
142026-05Mycelium · v1.0.0
Substitute-on-failure dispatch tagged + cosign-signed across Linux/Windows/macOS. verify ↗
082026-05Mycelium · Day-27 RTP
Reduction-to-practice recorded with HMAC-chained tamper-evident audit log. verify ↗
202026-04Signet · v0.1.10.1
Apache-2.0 release on PyPI as signet-sign. 11 built-in checks, RFC 3161 anchoring. verify ↗
A patient build, in the open.
Thornveil is 9 engineering systems for sovereign federal AI infrastructure — safety gate, AI red team, IL5-pathway chat, sub-million-parameter perception, distributed mesh, C-to-Rust translation, and the internal agent factory that ships them. Designed with FedRAMP, IL5 and export-control requirements in mind; no authorizations held.
The founder is active-duty USMC. Contact for evaluation access.