The weave is the product. Ikaros is the loom.

THE FRINGE is the platform brand. Cyber Fabric is the product: the weave of Policy Enforcement Points — untrusted admission, enrolled workforce, WAN / on-the-wire. QFC is the thread (one schema). Ikaros is how the weave decides. The AEGIS kernel is the gate inside that engine. The AEGIS droid on this site is the guide — same name, different facet.

When the fabric sees, that is instrumentation across planes. When it decides, that is Ikaros under human sovereignty — not unconstrained autonomy. Edge PEP on-prem; dual-plane admission; content policy on the enrolled path only; public origin that never hosts enclave secrets. The story and the topology are the same object.

PEPs · the weave

Untrusted admission. Enrolled workforce. WAN / on-the-wire. One vocabulary, three planes.

QFC · the thread

One schema across planes. Silos do not rank. Fusion →

Ikaros · the loom

PDE closed loop. CEP-Rank scores; AEGIS kernel gates; journal records. Ikaros →

AEGIS · two facets

Guide on this site (scripted). Kernel inside Ikaros (HUMAN_ONLY). Same droid, not the same job.

Content plane · Break · inspect · allow

The content plane is the technical child of enterprise secure web gateways (Bluecoat-class, open source). It does not intercept the entire Internet for every device. On the private, enrolled plane, policy may terminate TLS under an enterprise inspection CA, inspect (category, ICAP, malware), then re-encrypt to origin—or pass through, or deny.

Untrusted-plane traffic is not default-inspected; public CAs after grant when internet is allowed. That split is deliberate: reliability on the untrusted path; depth of control where trust is earned.

Roadmap pillar · Content. Origin: SWG discipline, not mass MITM. Fit: L4 content plane under Fabric architecture; consumes Private enrollment from Zero Trust; emits verdicts into Fusion.