ENGINE PATH in 90 seconds

Play walks Edge → Assess → Decide → Gate → Act. Dual-plane admission, QFC fuse, classical CEP-Rank, AEGIS HUMAN_ONLY, act back to Edge PEPs. Same path as Architecture and Ikaros. This origin is not a PEP.

ENGINE PATH HUMAN_ONLY AUTO_SAFE off LLM not in rank path no ATO

REC · FACILITY-01 · UNTRUSTED ≠ ENROLLEDT+00QFC JOIN · HUMAN_ONLY

Untrusted plane

Visitor device on untrusted admission. No default TLS intercept. Session not enrolled.

Enrolled plane

Workforce stays identity-bound. Lateral path to untrusted is denied by construction.

ENGINE PATH · Play walks Edge → Assess → Decide → Gate → Act.

Ikaros Architecture

NIST

SP 800-207 dual-plane order. CSF 2.0 Govern/Protect/Detect. AI RMF: map, measure, manage — ranker kind disclosed, autonomy off. FIPS 203/204/205 named on QUANTUM. Mapping ≠ authorization.

CISA · DHS

CPG-shaped hygiene and “know your gates.” Facility visitor vs workforce is a CPG-adjacent segmentation story, not a DHS endorsement.

NSA / published ZT

Continuous verification, least privilege, modern crypto — from public CSI/ZT guidance. Not a product endorsement. Not a TS/SCI claim.

FBI / critical infrastructure

Language a private-sector SOC already uses with law-enforcement liaison: isolate, journal, human hold. No implied tasking or partnership.

CIA / DIA / IC

We do not claim IC accreditation, SAP access, or agency use. Decision-journal discipline is how those rooms already expect AI to behave. We meet the vocabulary; we do not wear the seal.

MITRE ATT&CK

Technique IDs (T1566) are evidence for the HUMAN_ONLY reviewer. ATT&CK is not a rival product.