Sovereign AI you can run in a SCIF.
Ten federally-fit systems shipped solo while active-duty USMC. The mesh on this page is one of them — Mycelium, surviving when half its workers die.
Pick your track.
Direct contracts open December 10, 2026. Conversations now compound. Choose the track that fits and we'll route you cleanly from there.
01 · FEDERAL
Federal program office
Evaluator track
You get: a 30-min system walkthrough of your choice (Mycelium / RigRun / Auspex / HawkStack), access to the public companion repo, and a signed evaluation NDA when scope requires.
02 · PRIME
Defense prime / SI
Integration track
You get: a capability brief tailored to your program of record, an IP-license framework or subcontract sketch, and a teaming sketch on request.
03 · COFOUNDER
Senior cyber operator
Co-founder track · single seat
You get: the co-founder profile and qualifications, the substrate verification path, and an unfiltered conversation about the federal-sales gap.
Four flagship systems. Six more on the org.
RigRun
Classification-gated multi-domain LLM router. Three apps on one Go backend. NIST 800-53 controls implemented as discrete code paths.
Pyros
Pure-Go safety engine that wraps any model in a 7-pillar pipeline. No Python, no CGO, one binary.
Mycelium
Distributed mixture-of-experts inference. Substitute-on-failure dispatch keeps producing tokens when half the mesh goes dark.
Auspex
Autonomous offensive security with scope-as-code. End-to-end validated on adversarial Active Directory takeover with HMAC-chained replay.
The founder
Jesse Morgan — eight years SIGINT, ten engineering systems, one company.
Ten systems. One integrated graph.
Each system is shipped on its own, but they're designed to compose. Hover any node to see what it depends on, and what depends on it.
Shipping log.
What's actually shipped, dated. The federal AI substrate is built in commits, not in decks.
- 17 2026-05
Recon-coverage forcing function shipped. N=6 validation: 6/6 first-plan host coverage. verify ↗
- 16 2026-05
First autonomous Active Directory takeover (20 tool calls, 4m29s). Domain Admin under strict autonomy. verify ↗
- 14 2026-05
Substitute-on-failure dispatch tagged + cosign-signed across Linux/Windows/macOS. verify ↗
- 08 2026-05
Reduction-to-practice recorded with HMAC-chained tamper-evident audit log. verify ↗
- 20 2026-04
Apache-2.0 release on PyPI as signet-sign. 11 production checks, RFC 3161 anchoring. verify ↗
A patient build, in the open.
Thornveil is 10 engineering systems for sovereign federal AI infrastructure — safety gate, AI red team, IL5-pathway chat, sub-million-parameter perception, distributed mesh, autopilot firmware, and the internal agent factory that ships them. Built ground-up to clear FedRAMP, IL5, and ECCN review on day one — not retrofitted.
The founder is active-duty USMC. Direct federal contracts open December 10, 2026. Co-founder applications open now: senior offensive cyber operator with post-uniform defense-AI startup rotation.
Want to review, or co-found?
Inquiries welcome. Co-founder applications welcome. Direct contracts open post-separation (December 10, 2026).