Section · Govern

Language governments and boards already speak

The future state is designed to be mappable to NIST CSF 2.0, SP 800-53 control families, Zero Trust (SP 800-207 / DoD ZT concepts), CISA CPGs, and NIST AI RMF for decision systems. Mapping is not the same as authorization. We do not claim FedRAMP, DoD ATO, or CIA / NSA / DIA / FBI / DHS endorsement or use. Vocabulary follows published NIST CSF 2.0, SP 800-53, SP 800-207, AI RMF, CISA CPGs, and public NSA Zero Trust CSI — so a board and a GRC team share one language.

Govern

Control ownership per plane. RACI. Continuous evidence packs. Configuration as code. AEGIS kernel is where those gates live inside Ikaros.

Protect & detect

Least privilege, segment isolation, secure web gateway on private paths, detection-as-code, ATT&CK-informed coverage.

AI accountability

PDE is decision support with bounded automation. Prohibited actions list. Decision journal. Human sovereignty on high impact. AUTO_SAFE is not enabled. Until a written false-positive window and rollback exist, every proposed act is HUMAN_ONLY.

For federal, SLTT, defense-adjacent enterprise, private SOC, and public think tanks, the offer is the same spine at different assurance depths: a fabric that remains auditable as it becomes ambitious—and a briefing vocabulary that does not fracture under scrutiny.

AUTO_SAFE policy (status: OFF). Not enabled. Not a live autonomy claim. Design-intention criteria (not measured — no paid-pilot data yet): graduate only reversible, low-impact acts if false-positive rate on those acts is ≤ 2% over a 30-day window. Rollback: any rolling 7-day window > 5%, or any high-impact misfire, reverts the gate to HUMAN_ONLY within one hour. Until a first paid Field Mandate pilot produces a measured window, every proposed act is HUMAN_ONLY.

PDE / CEP-Rank model-card (kind, not method). Ranking is classical / rules + scored correlation on fused signals. Full card: cep-rank.html. A language model, if used at all, narrates an already-ranked journal. It does not rank and does not gate. Journal shape: journal.html. Two-quarter plan: roadmap.html.

Future state, stated cleanly. Dual-plane admission PEP, public brochure origin, and edge enforcement exist today. Full secure web gateway, CEP-Rank production, hybrid PQC mesh, and Sensor HA are roadmap planes—built, measured, and named without costume. Field topology (no LAN addresses): on-prem PEP, dedicated admin/control station, untrusted ≠ enrolled, telemetry stays in the customer or lab enclave — not multi-tenant SaaS in v1. See reference architecture.