Ten production-grade systems. One sovereign AI stack.

A 4-stage check pipeline (ADMISSION / INSPECTION / COMMITMENT / RECORD) with HMAC-chained tamper-evident audit log and RFC 3161 trusted-timestamp anchoring. 11 production checks. The Signet vocabulary that Auspex extends with engagement-specific checks. Apache-2.0 OSS. Available on PyPI as `signet-sign`.

Five correctness gates: compile, anti-stub, no-unsafe, cargo test, differential (10K/10K against C reference). The pipeline refuses to claim success without a differential config. Local LLM only — no cloud paths. Built for the CISA / DoD / ONCD memory-safe regulatory tide.

24 adaptive subsystems organized into 7 conceptual pillars. PID homeostasis + Holt forecaster + UCB1 bandit + epsilon-greedy variant evolution wired into one orchestrator. PAVA isotonic regression calibrator validated against sklearn. Race-clean across Linux/macOS/Windows. Backend-agnostic — wraps Ollama, vLLM, llama.cpp, LMStudio.

Six workers pool compute for one Gemma-4-26B chat. When workers drop, substitute-on-failure dispatch keeps generation continuing — Day-27 cryptographic reduction-to-practice. R2I-aligned MOSA surface with 50-endpoint OpenAPI 3.1 published. 38 of 42 in-scope NIST 800-53 controls implemented with file-path traceability. mTLS on worker channel, HMAC-chained per-request audit log.

Three apps (desktop, mobile, web) on one Go backend. Classification gate enforced at the type-system level — CUI+ queries hard-blocked from cloud routing as architectural narrowing, not runtime policy. 44 NIST 800-53 controls implemented as discrete code paths. 8-signal confidence pipeline. IR-9 spillage detection with Unicode normalization + entropy thresholding.

Topology-driven recipe that turns (dataset, domain) into (architecture, training config) and produces sub-million-parameter models that match SOTA in their weight class. 15 verified zoo checkpoints across IRST (synthetic + real), sonar, PCB defect, histopathology, thermal drone, and ECG. 16-run power-law scaling fit on NUDT-SIRST (R²=0.9895). 26-page topology paper preparing arXiv submission.

From-scratch ArduPilot/PX4 alternative on STM32 H7 / F4 / F7. Phase 10 trade-secret primitives no other autopilot ships: ed25519-signed airworthiness attestation, RC hijack / GPS spoof / mag jam adversarial-detection failsafes, Find My Drone beacon, self-learning vehicle dynamics ID, Black Box event taxonomy. 47K lines of parity-audit notes against 154 ArduPilot libraries. Hardware bring-up active on MatekH743 and Cube Orange Plus.

RF + acoustic + thermal + Remote ID + ADS-B fusion. Real Kalman tracking + Dempster-Shafer evidence fusion + bearing-intersection geolocation (tested). Mesh networking + decision engine scaffolded but not yet wired. Honest Phase 0 framing — designed to replace DragonOS/WarDragon with mesh-aware open architecture. Hardware tiers from $270 (Pi 5 + RTL-SDR) to $1,650 (KrakenSDR + UCA DF).

The model proposes. Signet authorizes. Auspex executes only what is allowed. Scope-as-code engagement compilation. 13 standard authority checks at the Signet gate. HMAC-chained per-engagement audit log with RFC 3161 trusted-timestamp anchoring. Validated end-to-end on adversarial Active Directory takeover with auditable replay package. Federal-gated, EAR ECCN 4D004.

Internal AI ops infrastructure. A 14-step factory pipeline (decompose → multi-pass system prompt → tool selection → Opus calibration → 5-probe adversarial stress test → adversarial hardening → functional tests → quality gate) produces 9 production domain-expert agents covering federal-doctrine drafting, security review, sprint planning, technical writing, and research. 80 MCP-exposed tools across 9 domains. Not for external sale.