{"core-extras.96d330537a":"Base IR","core-extras.bee831a169":"Substrate","core-extras.61a0822826":"Apps on Core","core-extras.15438cc098":"not supported","core-extras.ad565d9d01":"Feature","core-extras.0155bf03e5":"Segment legend","core-extras.8b7110078e":"Algorithm groups by data type","core-extras.25ab4276a6":"Scrollable capability matrix","page-breadcrumb.c766e66518":"Breadcrumb","section_st_a1_display-split.7c9a7c0610":"Detail","section_st_f1_cta-dark.90e40d5043":"Get started","uc-infra-business-glyph.b677484982":"The storm shift","uc-infra-business-glyph.ca65b64a92":"Operating through the outage","uc-infra-business-glyph.ab931b1387":"EU infrastructure","uc-infra-business-glyph.3749c8439c":"Storm","uc-infra-business-glyph.d0517071aa":"Link","uc-infra-business-glyph.7f59a1f1d5":"Decision","uc-infra-business-glyph.a0cf424734":"Morning","uc-infra-business-glyph.039ef862a1":"That night","uc-infra-business-glyph.28b427c8e1":"By morning","uc-infra-business-glyph.4d8578f62c":"Comms to the feeder drops","uc-infra-business-glyph.3ff06591ca":"The shift keeps deciding","uc-infra-business-glyph.8399c00e76":"Red score, no reason given","uc-infra-business-glyph.ccd30eaefc":"Measurement, threshold, asset","uc-infra-business-glyph.b0cf3f46aa":"Thirty seconds, no evidence","uc-infra-business-glyph.0c0f937a3e":"The record is a retrieval","uc-infra-business-glyph.2c03a44a98":"A cloud the plant depends on","uc-infra-business-glyph.cac4d3734b":"Runs behind your OT-DMZ","uc-infra-business-glyph.caaa606a07":"Telemetry stays inside the plant","uc-infra-business-glyph.f61714b314":"OT-DMZ or fully isolated","uc-infra-citizen-rights.78323ba8a7":"Power, water, transport, telecom, and renewables. A reason for every action that reaches you.","uc-infra-citizen-rights.9d191bc9ff":"You ask, and a person can show you the reason in plain words, and play it back if you want.","uc-infra-citizen-rights.b99fa5dd06":"With this in place","uc-infra-citizen-rights.795efabcd8":"The power flickers and you are told the algorithm decided. Nothing behind it you can read.","uc-infra-citizen-rights.24345a1437":"Today","uc-infra-citizen-rights.7855007c48":"the truth keeps","uc-infra-citizen-rights.52996cf07d":"Years later the same sequence can be played back exactly. A board of inquiry sees what the operator saw, step by step.","uc-infra-citizen-rights.b7b048280d":"The record survives","uc-infra-citizen-rights.8a0bb254e9":"in writing","uc-infra-citizen-rights.d867873044":"The answer names the feeder, the limit it crossed, and the measurement that crossed it. In plain words, not a score and not a model card.","uc-infra-citizen-rights.c1366cb4d1":"You get the reason","uc-infra-citizen-rights.8431029b66":"your right to a clear answer","uc-infra-citizen-rights.7c068ed50b":"European rules give operators the duty to explain automatic decisions that affect the services you depend on. You are allowed to ask.","uc-infra-citizen-rights.861a6b60b5":"You ask what happened","uc-infra-citizen-rights.00456ea6ab":"a flicker, not a reason","uc-infra-citizen-rights.ab3be21846":"A feeder near your street trips at half past two. Your power flickers. Today the operator can rarely tell you which part of the grid caused it.","uc-infra-citizen-rights.a10087c8d2":"The grid alarms","uc-infra-consumer-glyph.3b17e6bcd2":"The lights stay on","uc-infra-consumer-glyph.354d33c291":"AI that keeps working in a storm","uc-infra-consumer-glyph.cb3cbad697":"When the link to a substation drops, the decision carries on.","uc-infra-consumer-glyph.cffa2af0a3":"Reading","uc-infra-consumer-glyph.c708dfbf5e":"Outage","uc-infra-consumer-glyph.7f59a1f1d5":"Decision","uc-infra-consumer-glyph.41b13789c8":"It names the asset","uc-infra-consumer-glyph.271a9dc611":"Which feeder, in plain words.","uc-infra-consumer-glyph.38b7612b86":"It shows the threshold","uc-infra-consumer-glyph.9e41544991":"The measurement that crossed it.","uc-infra-consumer-glyph.87c001ea7e":"Your operator decides","uc-infra-consumer-glyph.dd8fa00090":"One click to override.","uc-infra-consumer-glyph.4a352ca9a2":"Your telemetry stays in the plant","uc-infra-consumer-glyph.7bcc0ed718":"Never trained on you","uc-infra-deployment-postures.6d04124197":"One platform, three postures. No re-platforming between them.","uc-infra-deployment-postures.9a0559fbaa":"Evidence is in the trace, not in the slide.","uc-infra-deployment-postures.f814680c84":"Regulatory posture","uc-infra-deployment-postures.4a10da63df":"your data","uc-infra-deployment-postures.61728f6dd4":"PLANT","uc-infra-deployment-postures.bd28aaaa66":"Three deployment postures as nested security boundaries around the plant","uc-infra-deployment-postures.530d1d70d9":"ENISA guidance","uc-infra-deployment-postures.c3d7731e3d":"IEC 62443","uc-infra-deployment-postures.a5b7d57a85":"GDPR","uc-infra-deployment-postures.4908082c44":"Cyber Resilience Act","uc-infra-deployment-postures.d75a4de2ef":"EU AI Act","uc-infra-deployment-postures.a0674f43af":"CER Directive","uc-infra-deployment-postures.3f98f41f7c":"Decides from the last telemetry snapshot","uc-infra-deployment-postures.9f63f9d77f":"Updates on signed media","uc-infra-deployment-postures.d5aba3ffba":"Completely isolated. Updates arrive on signed media. No licence check, no phone-home, no foreign kill-switch. Keeps deciding when the link drops.","uc-infra-deployment-postures.59a081f5e2":"No outbound dependency","uc-infra-deployment-postures.db6c3df2c6":"96% less energy than a generative stack","uc-infra-deployment-postures.ab9f0565f0":"Standard CPUs, no GPU mandate","uc-infra-deployment-postures.c6b0f87d73":"The full platform on standard CPUs behind your own firewall. No GPU mandate. The same trace, fully under your control.","uc-infra-deployment-postures.a83accdc69":"Your servers, your data centre","uc-infra-deployment-postures.2e1947185a":"Rides the event bus you already run","uc-infra-deployment-postures.8de24d2baf":"No new boundary crossing","uc-infra-deployment-postures.fdecf72bef":"Deployed inside the OT-DMZ on operator hardware. No telemetry crosses a boundary you did not approve. No infrastructure project to start.","uc-infra-deployment-postures.202219097d":"Behind your existing wire","uc-infra-failure-grid.cabdcd1dac":"Invented thresholds are safety events","uc-infra-failure-grid.2aa766ae49":"A model that confabulates a threshold or invents a control sequence is not an accuracy problem in OT. It is a safety incident.","uc-infra-failure-grid.b6bde75736":"Plausible threshold, possibly invented","uc-infra-failure-grid.5826212441":"IEC 62443 does not forgive a creative answer","uc-infra-failure-grid.9eba7cb3cb":"No replayable trace, no NIS2 report","uc-infra-failure-grid.c0ffc384a0":"When a NIS2 incident report goes in, the regulator wants the evidence trail of how the decision was made. A red score carries no derivation.","uc-infra-failure-grid.8f5ed2c42b":"A red score with nothing behind it","uc-infra-failure-grid.163e516a80":"A NIS2 report wants the evidence trail","uc-infra-failure-grid.56492ad4e1":"OT telemetry on foreign ground","uc-infra-failure-grid.4b27c2b278":"CER essential entities cannot rely on foreign-cloud inference. The CLOUD Act reaches OT data the same way it reaches financial data.","uc-infra-failure-grid.2681caa798":"Inference hosted outside your jurisdiction","uc-infra-failure-grid.7cc44a1f45":"The accreditor wants it where the operator lives","uc-infra-failure-grid.53c6578fce":"Stops working when the link drops","uc-infra-failure-grid.37fdae2bd8":"A cloud-dependent anomaly tool is useless at 02:32 when the comms link to the furthest substation is down. The decision still has to be made.","uc-infra-failure-grid.b8921ae4af":"Frozen on its last frame, no answer","uc-infra-failure-grid.909eba680d":"Air-gap is the baseline, not a feature","uc-infra-failure-grid.f39ad2218b":"Four structural reasons a generative model cannot survive a storm shift. Kept as the\n          problem, not the pitch.","uc-infra-failure-grid.c001343cfe":"4 GAPS","uc-infra-promise-cards.6cd8908dd5":"Not a transcript that quietly fails to reproduce","uc-infra-promise-cards.bb1bc80414":"The same record replays years later, independently checkable","uc-infra-promise-cards.b0715b8f41":"If a data-protection authority or a national resilience regulator later asks how a decision was made, the operator shows the same reasoning you would see, with the same data, against the same rule version.","uc-infra-promise-cards.aaacb3e703":"Replay if the regulator asks","uc-infra-promise-cards.0f2da3152c":"No US-hosted endpoint, no outbound dependency by default","uc-infra-promise-cards.bdfef662a5":"Hosted at the operator or in EU sovereign cloud","uc-infra-promise-cards.27e3f12a50":"Sensor readings, asset states, and operating data are processed on hardware inside the plant or inside the European Economic Area. No transatlantic transfer. No foreign court can switch it off or demand access.","uc-infra-promise-cards.4a352ca9a2":"Your telemetry stays in the plant","uc-infra-promise-cards.5286b99c1c":"No autopilot where the machine acts and you find out later","uc-infra-promise-cards.1ec7140455":"A person in the loop on every consequential action","uc-infra-promise-cards.4e6e0488ec":"Every recommendation carries a one-click path to a person. The operator sees what the system saw, in the order it saw it, and confirms or overrides it. The override is recorded the same way the alert was.","uc-infra-promise-cards.3287047263":"Operators stay in charge","uc-infra-promise-cards.bb607e57ff":"Not a probability score with nothing behind it","uc-infra-promise-cards.b1d47fe9e6":"A right to a clear answer, in writing","uc-infra-promise-cards.0a3cd506f2":"When the system trips a feeder, holds a valve, or flags something, you can ask why and get a written answer. It names the asset, the limit, and the measurement that crossed it. The actual reasoning, in language a citizen can follow.","uc-infra-promise-cards.6173d9bd26":"Every alert named in plain words","uc-infra-storm-console.61d75f3e44":"Regulator asks at 09:00","uc-infra-storm-console.375d63f6a8":"Load, fault, cyber, maintenance, renewables, water, incident, crisis. One record per decision.","uc-infra-storm-console.c27f290b6b":"LINK OK","uc-infra-storm-console.dc2f66636b":"LINK LOST","uc-infra-storm-console.0bef405971":"Substation one-line diagram during the storm cascade","uc-infra-storm-console.b7974a5647":"storm shift,","uc-infra-storm-console.d244101afa":"comms link nominal","uc-infra-storm-console.1d9c02f8f8":"comms link down","uc-infra-storm-console.1c63b043b8":"a record, not a reconstruction","uc-infra-storm-console.f4b3af917a":"The morning supervisor asks for the incident record. All she has is a screenshot from 02:32 and an email she wrote at 03:15. This is the night that has to change.","uc-infra-storm-console.ba41f9f20e":"The regulator","uc-infra-storm-console.28ff543c59":"instinct, not record","uc-infra-storm-console.b9412bed3a":"The operations manager trips feeder F-12 and queues the restore. Thirty seconds, made on instinct, because nothing on the screen can explain itself.","uc-infra-storm-console.55acf508d8":"The decision","uc-infra-storm-console.b8dda0abd3":"no reason given","uc-infra-storm-console.2f7f8c1e7a":"Comms to the furthest feeder go down. The cloud anomaly tool freezes on its last frame. A red score with no rule, no threshold, no asset behind it.","uc-infra-storm-console.1c5980b45b":"The link drops","uc-infra-storm-console.d772b04e52":"three substations","uc-infra-storm-console.f3beca0ff1":"Three substations alarm at once. Differential current climbs on feeder F-12. The wall fills with red faster than anyone can read it.","uc-infra-storm-console.136a2dc365":"The cascade","uc-infra-storm-console.161a8af78a":"cascade begins","uc-infra-storm-console.d260106952":"A line of thunderstorms crosses the region. The board is green. The overnight crew is two people and a coffee machine.","uc-infra-storm-console.6b90f16c8f":"The front arrives","uc-infra-technical-glyph.c7caacb99b":"Shift continuity","uc-infra-technical-glyph.6679665519":"The link drops, the decision does not","uc-infra-technical-glyph.5584c29455":"Air-gap ready","uc-infra-technical-glyph.3749c8439c":"Storm","uc-infra-technical-glyph.d0517071aa":"Link","uc-infra-technical-glyph.7f59a1f1d5":"Decision","uc-infra-technical-glyph.a0cf424734":"Morning","uc-infra-technical-glyph.5e1ceea67e":"Three substations alarm at once","uc-infra-technical-glyph.4d8578f62c":"Comms to the feeder drops","uc-infra-technical-glyph.3ff06591ca":"The shift keeps deciding","uc-infra-technical-glyph.835ef780d3":"The regulator reads the record","uc-infra-technical-glyph.cac702507a":"Witness","uc-infra-technical-glyph.4fcf6f2723":"Per decision","uc-infra-technical-glyph.c394371833":"Bit-identical on re-run","uc-infra-technical-glyph.e849494484":"Crypto","uc-infra-technical-glyph.2b9b0cf6e1":"Posture","uc-infra-technical-glyph.fdff52de3b":"OT-DMZ","uc-infra-technical-glyph.28fdd72ec1":"Fully isolated","uc-infra-technical-glyph.cf95b92d43":"Air-gap by default","uc-infra-technical-glyph.caaa606a07":"Telemetry stays inside the plant","uc-infra-technical-glyph.a94d86d59d":"Rule version on the day","uc-infra-witness-stack.b70fe7adc4":"SHA3-256 chained, Ed25519 signed","uc-infra-witness-stack.093500bdb1":"Four fields on every decision. Asset, rule, action, replay. Verifiable offline.","uc-infra-witness-stack.68cb47d254":"Prove","uc-infra-witness-stack.a26b9b7477":"Decide","uc-infra-witness-stack.c8f3da1033":"built incrementally","uc-infra-witness-stack.121c906f69":"4 layers, one proof surface","uc-infra-witness-stack.21674deafe":"OT-DMZ or air-gap on operator hardware, witness on the existing event bus.","uc-infra-witness-stack.bffdfc7b88":"\"confirmed @ 02:32\"","uc-infra-witness-stack.ff7426dfa0":"\"existing event stream\"","uc-infra-witness-stack.34886f7753":"\"ot-dmz | air-gap\"","uc-infra-witness-stack.4006d918d1":"operator state","uc-infra-witness-stack.68836c550e":"Core","uc-infra-witness-stack.6d525b7156":"Execution","uc-infra-witness-stack.6a8d65788a":"A witness is emitted, SHA3-256 chained, Ed25519 signed, verifiable offline.","uc-infra-witness-stack.92ff46336a":"sealed witness","uc-infra-witness-stack.df84637182":"AION","uc-infra-witness-stack.5f174de1cc":"Proof","uc-infra-witness-stack.f557444b96":"The policy version effective on the event date is pinned, not the one current today.","uc-infra-witness-stack.5013e8c83d":"\"on event date\"","uc-infra-witness-stack.c7525921bd":"rule version","uc-infra-witness-stack.4a86080d67":"Spindle","uc-infra-witness-stack.dec1fccaba":"Knowledge","uc-infra-witness-stack.d8c546f581":"OT domain specialists route the decision, the constraints that fired are logged in line.","uc-infra-witness-stack.02b0d4426d":"[\"grid\", \"protective_relay\"]","uc-infra-witness-stack.589931d9be":"asset + domain specialists","uc-infra-witness-stack.0fed3b96cc":"Loom","uc-infra-witness-stack.e272c597fd":"Reasoning","uc-infra-witness-transit.1badca03a3":"Ed25519, SHA3-256","uc-infra-witness-transit.06ea49f5bc":"The same artefact lands in the NIS2 report and the historian without a double write.","uc-infra-witness-transit.1bdcb6cc96":"operational historian","uc-infra-witness-transit.ca3dcd698f":"NIS2 incident store","uc-infra-witness-transit.6314bd430f":"STORE forks to","uc-infra-witness-transit.56619d2033":"no double pipeline","uc-infra-witness-transit.51bec70001":"one write, two stores","uc-infra-witness-transit.6983ee5c0e":"Offline verify, supervisor readable","uc-infra-witness-transit.5f6a2733a9":"SHA3-256 chain seal","uc-infra-witness-transit.347fa32936":"Ed25519 signature on the segment","uc-infra-witness-transit.c20de20a90":"Witnesses are signed with Ed25519 and sealed with SHA3-256 at the proof chain. A supervisor verifies offline, with no vendor crypto service in the path.","uc-infra-witness-transit.58678658ad":"Signed locally, verified offline","uc-infra-witness-transit.2af7bf74fe":"EU regions only","uc-infra-witness-transit.352028c9bb":"Single write, no reconciliation","uc-infra-witness-transit.7eefac9941":"Incident store + historian","uc-infra-witness-transit.19516b618e":"The same witness artefact lands in the NIS2 incident store and the operational historian at once, in EU regions, with no double write to keep in sync.","uc-infra-witness-transit.5053faac63":"One artefact, two destinations","uc-infra-witness-transit.45ff061d48":"No double pipeline","uc-infra-witness-transit.590bfc4d4a":"Witness published alongside","uc-infra-witness-transit.9e30a83d48":"Subscribed to existing OT events","uc-infra-witness-transit.a3f674f2d2":"Decisions and witnesses are published to the event stream the operator already maintains for SCADA and audit events. No new integration project.","uc-infra-witness-transit.948f8885de":"Rides the bus you already run","uc-infra-witness-transit.1a7fc09a57":"No vendor wrapper","uc-infra-witness-transit.3bb4a0292c":"Empty on the clean path","uc-infra-witness-transit.4ac67c194c":"Built incrementally","uc-infra-witness-transit.03d18b4ac3":"On a clean case the witness is empty and the wire path is unchanged. When a decision is consequential, the slice accretes asset, rule, action, and replay.","uc-infra-witness-transit.230e87883f":"Decision emits a witness","use-case-critical-infra.hero.eyebrow":"Use Cases, Critical Infrastructure","use-case-critical-infra.hero.business.titleLead":"The night the storm","use-case-critical-infra.hero.business.titleAccent":"hits the control room","use-case-critical-infra.hero.business.lede":"A line of thunderstorms rolls through the region at 02:30. Alarms cascade across three substations, the comms link to the furthest feeder drops, and the anomaly tool on the wall shows a red score with no reason. The operations manager has thirty seconds to decide and nothing to show the regulator tomorrow morning. This is the night that changes.","use-case-critical-infra.hero.business.ledgerPill":"EU critical infrastructure","use-case-critical-infra.hero.business.ledgerValue01":"Storm front crosses the region","use-case-critical-infra.hero.business.ledgerValue02":"Three substations alarm at once","use-case-critical-infra.hero.business.ledgerValue03":"Comms to feeder F-12 drops","use-case-critical-infra.hero.business.ledgerValue04":"Red score, no reason given","use-case-critical-infra.hero.business.ledgerValue05":"Thirty seconds, no evidence","use-case-critical-infra.hero.business.ledgerValue06":"Regulator asks for the record","use-case-critical-infra.hero.business.ledgerValue07":"Stays inside the plant","use-case-critical-infra.hero.business.ledgerValue08":"96% less than a generative stack","use-case-critical-infra.hero.consumer.titleLead":"The grid that powers","use-case-critical-infra.hero.consumer.titleAccent":"your home, explained","use-case-critical-infra.hero.technical.titleLead":"The trace the regulator","use-case-critical-infra.hero.technical.titleTail":"reads the morning after","use-case-critical-infra.d0fd6c08e6":"See the incident record","use-case-critical-infra.6cc00d3102":"Where it runs","use-case-critical-infra.b6b2125647":"The storm shift","use-case-critical-infra.fe3f8e909b":"02:30","use-case-critical-infra.5592a60288":"The cascade","use-case-critical-infra.f0fb533a3f":"The link","use-case-critical-infra.597e25a2a9":"The tool","use-case-critical-infra.66e7a1b0ca":"The risk","use-case-critical-infra.e9376a281a":"Morning","use-case-critical-infra.cec3a9b89b":"Data","use-case-critical-infra.f2fcd3f7dc":"Energy","use-case-critical-infra.44d69c0805":"What you are owed","use-case-critical-infra.dc3c2db356":"How an alert becomes an answer","use-case-critical-infra.41a1acbef2":"What you get","use-case-critical-infra.7c58f1806b":"Every alert","use-case-critical-infra.7eed7b7b26":"Grid anomaly","use-case-critical-infra.0c31e9d749":"Cyber alert","use-case-critical-infra.43bc0f5fc0":"Override","use-case-critical-infra.9b2143805f":"Your telemetry","use-case-critical-infra.b4f3cba42c":"Trained on you","use-case-critical-infra.7ec78f3e07":"Kill-switch risk","use-case-critical-infra.1401e2e0a3":"Comms outage","use-case-critical-infra.96b36bdd0d":"How the witness attaches","use-case-critical-infra.fdbc00bcb3":"Signal surface","use-case-critical-infra.c8dae6371b":"Replay","use-case-critical-infra.5464a89144":"Witness","use-case-critical-infra.ef6691545d":"Standard","use-case-critical-infra.c73cc64719":"Air-gap","use-case-critical-infra.19a92e15f7":"Comms drop","use-case-critical-infra.b4ec9bba80":"Hosting","use-case-critical-infra.df12b8f89b":"Crypto","use-case-critical-infra.42972de55f":"NIS2","use-case-critical-infra.7e2a24bdca":"CER Directive","use-case-critical-infra.55d230ca9e":"EU AI Act","use-case-critical-infra.9ee09681f2":"Cyber Resilience Act","use-case-critical-infra.472eb5c19f":"IEC 62443","use-case-critical-infra.bb8f13e18e":"ENISA","use-case-critical-infra.6afaf5896e":"Pick one workflow: load forecasting, fault detection, OT cyber, predictive maintenance, renewable energy integration, water and waste management, incident response, or crisis rehearsal. Run it on operator hardware behind your OT-DMZ and watch the incident record assemble as the shift moves. Fully air-gapped if you need it, no re-platforming between postures.","use-case-critical-infra.d4b4f20e54":"Talk to an OT engineer","use-case-critical-infra.9bb448cbfe":"See where it runs","use-case-critical-infra.a5bc3dc4cb":"The link drops.","use-case-critical-infra.4052f61e49":"The decision cannot wait.","use-case-critical-infra.a1c10a8a15":"WHY GENERIC AI FAILS THE SHIFT","use-case-critical-infra.ce36dd1fc6":"Four structural gaps","use-case-critical-infra.08cbd764e5":"Hallucination","use-case-critical-infra.6c390330b6":"It invents a threshold instead of citing the one that fired.","use-case-critical-infra.53c1f76aec":"Black box","use-case-critical-infra.f129ede76f":"A red score is not an incident record the regulator can read.","use-case-critical-infra.8e3b1dc3e3":"Sovereignty","use-case-critical-infra.771967859e":"Foreign-hosted inference fails the CER and NIS2 requirements.","use-case-critical-infra.5479401fc0":"Connectivity","use-case-critical-infra.1b2df79eb8":"Stops working when the comms link to the substation drops.","use-case-critical-infra.23251ed766":"Fabric for the operations team","use-case-critical-infra.c705308753":"The alert, the rule,","use-case-critical-infra.3b9d1b9d1c":"and the action in one place.","use-case-critical-infra.3ebc091bf6":"WHAT CHANGES THIS SHIFT","use-case-critical-infra.5d39c8eeeb":"Four outcomes","use-case-critical-infra.db347caeb3":"The reason","use-case-critical-infra.1f1dadc789":"Every alert names the asset, the threshold, and the rule. No red score with nothing behind it.","use-case-critical-infra.1dabba21cd":"✓","use-case-critical-infra.ac3afaab6a":"The link drops","use-case-critical-infra.26e0b4dcfe":"Air-gap capability means the platform keeps deciding when comms to the substation go down.","use-case-critical-infra.a94593089f":"The override","use-case-critical-infra.85f98fff60":"The operator trips the correct breaker with one click. The override is recorded the same way the original alert was.","use-case-critical-infra.78dbfd602e":"The morning","use-case-critical-infra.25c290a356":"The regulator request is a retrieval, ready at 09:00 instead of reconstructed from a screenshot.","use-case-critical-infra.63ea35666c":"Active alarms","use-case-critical-infra.e88669afd4":"Operating rules","use-case-critical-infra.cde56229ae":"Incident log","use-case-critical-infra.2e6d8fd641":"Asset health","use-case-critical-infra.769f655ab1":"Shift reports","use-case-critical-infra.762a4d1a0e":"feeder-f12-event-02h32.log","use-case-critical-infra.e4ff6b7e69":"protective-relay-policy-v4.1.pdf","use-case-critical-infra.12cc43a33d":"Why was feeder F-12 tripped at 02:32 during the storm cascade?","use-case-critical-infra.e2fc0d7f64":"Trace attached","use-case-critical-infra.8a8e65a6d2":"Opaque decisions","use-case-critical-infra.efb02cbb18":"Under a minute","use-case-critical-infra.e714de643d":"Why not another AI tab","use-case-critical-infra.e064b3c4eb":"A chat box gives a paragraph.","use-case-critical-infra.0e8ae83d6a":"The shift needs a record.","use-case-critical-infra.2722adce36":"HOW A RECORD STARTS","use-case-critical-infra.2853a66051":"Four steps, one incident log","use-case-critical-infra.6e9d5c91af":"Choose the alarm, fault, cyber alert, or maintenance flag the regulator named.","use-case-critical-infra.9251b1cc9b":"Run with sources","use-case-critical-infra.eb7d17e984":"Attach the telemetry snapshot and the policy version the decision used.","use-case-critical-infra.b9bd6efbca":"Review the record","use-case-critical-infra.441754fe6e":"Asset, rule, action, and operator state are recorded as the shift moves.","use-case-critical-infra.46f83a16a8":"Replay for the supervisor","use-case-critical-infra.74ce4b1f5e":"The same decision comes back bit-identical, in under a minute.","use-case-critical-infra.087fb02735":"A confident paragraph.","use-case-critical-infra.ff65622096":"The answer lands in a chat window with no rule version, no asset reference, and nothing the regulator can replay.","use-case-critical-infra.cf29dd3118":"A record you can hand over.","use-case-critical-infra.094a669eed":"The decision finishes with the rule cited, the asset named, the operator confirmed, and a record that replays the same way twice.","use-case-critical-infra.9dd3e76dd7":"The alert","use-case-critical-infra.4d88e08f47":"The rule","use-case-critical-infra.3d5e0053e9":"The comms drop","use-case-critical-infra.b3c4449e28":"The replay","use-case-critical-infra.9c2d15a8a1":"Where it runs, and what it satisfies","use-case-critical-infra.56dbc9d6f2":"Start on your hardware.","use-case-critical-infra.e459508a0d":"Air-gap by default.","use-case-critical-infra.d94b190a78":"WHAT TRAVELS WITH EVERY DECISION","use-case-critical-infra.d531e11345":"Three product properties","use-case-critical-infra.5b6f73f04f":"Grounded","use-case-critical-infra.6353e821ae":"Answers trace back to the rules your operator authored, versioned by effective date. The reasoning names which rules and thresholds fired.","use-case-critical-infra.c7175fa7a0":"Recorded","use-case-critical-infra.83e1b38286":"Asset, rule, action, and replay attach as the decision is made. The supervisory answer is a retrieval, not a reconstruction from a 03:15 email.","use-case-critical-infra.04f13cecbc":"Continuous","use-case-critical-infra.f70101aad5":"Air-gap capability means no dependency on any external service. The platform operates from the last telemetry snapshot for as long as the shift needs.","use-case-critical-infra.f2adad22f3":"How a regulator accepts an incident record","use-case-critical-infra.f2d07d86e5":"Think about how a NIS2 supervisor accepts a 24-hour report.","use-case-critical-infra.d167adea41":"ASSET NAMED","use-case-critical-infra.86d3fd1d9e":"RULE APPLIED","use-case-critical-infra.0a1188e50e":"OPERATOR CONFIRMED","use-case-critical-infra.876a2c2310":"REPLAY READY","use-case-critical-infra.a00fb0c507":"Accepted","use-case-critical-infra.8c53da5b1d":"Your side of the storm","use-case-critical-infra.ce579a5198":"Your operator owes you","use-case-critical-infra.c7e559d00d":"a reason, not a flicker.","use-case-critical-infra.efcb460cb0":"WHAT GENERIC AI GETS WRONG","use-case-critical-infra.482d32da39":"On your side of the meter","use-case-critical-infra.bc549cc97e":"No reason given","use-case-critical-infra.4e4e728081":"A red score is not an answer a citizen can read.","use-case-critical-infra.b2dd39d2e6":"No replay","use-case-critical-infra.ee8871337b":"No clear way to find out what happened months later.","use-case-critical-infra.6fcf458dc5":"Foreign servers","use-case-critical-infra.cd59417a64":"Your telemetry leaves the country quietly.","use-case-critical-infra.3d5133c756":"Stops in a storm","use-case-critical-infra.6c6c46920a":"Cloud-dependent tools fail when the comms link drops.","use-case-critical-infra.e8d00a9b9e":"Step by step","use-case-critical-infra.f36fede921":"From the signal","use-case-critical-infra.dabe57ed90":"to the reason.","use-case-critical-infra.85c483fc9f":"YOUR DECISION PATH","use-case-critical-infra.f2aeb524af":"How an answer appears","use-case-critical-infra.8891a19b2e":"Rules set","use-case-critical-infra.69160eef78":"Operators write their policies, following IEC, ENISA, and national requirements.","use-case-critical-infra.d316f28d59":"Signal checked","use-case-critical-infra.f8b628dc24":"Telemetry from every asset is evaluated against those rules.","use-case-critical-infra.1017831c9d":"Action confirmed","use-case-critical-infra.865cbd9eb0":"The recommendation and its reason reach the operator, who confirms or overrides it.","use-case-critical-infra.55d8fb5869":"Stored for replay","use-case-critical-infra.e3966122d7":"The record is kept and can be replayed by the regulator or a board of inquiry.","use-case-critical-infra.8ecce94dc3":"Recent events","use-case-critical-infra.de30aeb120":"Explanations","use-case-critical-infra.f19c179382":"Citizen requests","use-case-critical-infra.b4814fcfe4":"feeder-f12-citizen-record.pdf","use-case-critical-infra.a97721c70b":"The promise","use-case-critical-infra.87211d6f4b":"AI in the control room.","use-case-critical-infra.b79f3b5c3a":"Operator in charge.","use-case-critical-infra.108170750f":"Every output is a recommendation a person approves. You can ask why a service was affected, and your operator can answer with a replayable record. Regulators can verify independently. The record names the asset, the threshold that fired and the operator who acted, and it stays inside the operator's own systems.","use-case-critical-infra.33b68f3d34":"WHAT YOU GET","use-case-critical-infra.2c2e3b3481":"Click to override","use-case-critical-infra.22d350b38f":"Always available to the operator, always logged.","use-case-critical-infra.696ced9886":"Your telemetry stays inside Europe.","use-case-critical-infra.c302658c80":"Foreign training","use-case-critical-infra.c6d2b97a8a":"No model trained on your grid data.","use-case-critical-infra.166678b792":"Years later","use-case-critical-infra.f65ca3f9b4":"The record survives hardware refresh cycles.","use-case-critical-infra.696ef5a55e":"The stack behind the witness","use-case-critical-infra.5eba9c1ec0":"Four layers.","use-case-critical-infra.afd50bb592":"One proof surface.","use-case-critical-infra.4a85388b6d":"WHAT THE WITNESS CARRIES","use-case-critical-infra.a24fc42361":"Attached per decision","use-case-critical-infra.80d298c9f2":"Asset","use-case-critical-infra.452e180f11":"The exact asset reference and telemetry snapshot the decision used.","use-case-critical-infra.62845f31a2":"Rule","use-case-critical-infra.856c9924f5":"The policy version in force on the event date.","use-case-critical-infra.64cff1319d":"Action","use-case-critical-infra.2a86c1699e":"The operator confirmation, timestamp, and decision state.","use-case-critical-infra.4a95887e28":"A bit-identical witness, verifiable offline.","use-case-critical-infra.c5f2cc68ed":"Reconstruct the feeder F-12 trip at 02:32 during the storm cascade.","use-case-critical-infra.e84fa75f99":"Replay class","use-case-critical-infra.32cd9f10ac":"Chain seal","use-case-critical-infra.151b81ef86":"Verifiable","use-case-critical-infra.e777d9678c":"Where it runs, and how the witness travels","use-case-critical-infra.94d392fb97":"On operator hardware.","use-case-critical-infra.ec26f234e6":"On your existing event bus.","use-case-critical-infra.1314821020":"HOW THE WITNESS TRAVELS","use-case-critical-infra.cd28f2d499":"Bus, store, crypto","use-case-critical-infra.585db1aa42":"Event bus","use-case-critical-infra.7f576d29d1":"Decisions and witnesses publish to the SCADA and audit event stream you already maintain. No proprietary wrapper.","use-case-critical-infra.a69c4dece1":"Storage","use-case-critical-infra.465ad1a465":"The same artefact lands in the NIS2 incident store and the historian at once, EU regions, no double write to reconcile.","use-case-critical-infra.b3abdb99dc":"Ed25519 signature on the chain segment, SHA3-256 chain seal. Supervisors verify offline, no vendor crypto service in the path.","use-case-critical-infra.b697dd6a71":"Use Cases","use-case-critical-infra.94724492e7":"Critical Infrastructure","use-case-critical-infra.5d0b2f6bd4":"OBSERVED","use-case-critical-infra.80db3832a5":"OUTCOMES","use-case-critical-infra.de7b2b8384":"Fabric","use-case-critical-infra.f421d04a3d":"Fabric for the operations team. Alarms, rules, incident log, and asset health in one workspace.","use-case-critical-infra.4220599e3f":"The record the regulator","use-case-critical-infra.d072aa117d":"WORKFLOW","use-case-critical-infra.f6d9196699":"4 COUNTS","use-case-critical-infra.b338255a3c":"BY DESIGN","use-case-critical-infra.35e0d0360a":"LIVE","use-case-critical-infra.c251870a1b":"Your operator","use-case-critical-infra.d022b0b407":"The same record, in plain words. The reason, the rule, and a path to the operator.","use-case-critical-infra.238ee60d26":"WITNESS","use-case-critical-infra.1bb7cd00c7":"How a decision comes back bit-identical","use-case-critical-infra.e06bc83a00":"INTEGRATION","use-case-critical-infra.tech.contract.eyebrow":"THE OT EVENT CONTRACT","use-case-critical-infra.tech.contract.lead":"Cross the OT boundary once","use-case-critical-infra.tech.contract.accent":"With a typed event","use-case-critical-infra.tech.contract.body":"Telemetry time, asset identity, protection-policy version, and operator state travel as one event. The decision layer never reaches back across the OT boundary to fill in missing context.","use-case-critical-infra.tech.policy.eyebrow":"PROTECTION LOGIC","use-case-critical-infra.tech.policy.lead":"Settings travel by version","use-case-critical-infra.tech.policy.accent":"Every threshold accounted for","use-case-critical-infra.tech.policy.body":"The active relay policy is loaded as a signed runtime input. Its threshold set, asset class, and fallback rule stay attached to the event that used them.","use-case-critical-infra.tech.policy.owner":"Protection engineering","use-case-critical-infra.tech.policy.clause01":"Differential-current threshold by feeder class","use-case-critical-infra.tech.policy.clause02":"Telemetry-age limit before safe fallback","use-case-critical-infra.tech.policy.clause03":"Operator confirmation and escalation route","use-case-critical-infra.tech.verify.eyebrow":"RELAY-PATH VERIFICATION","use-case-critical-infra.tech.verify.lead":"Exercise the relay path","use-case-critical-infra.tech.verify.accent":"Against a known oracle","use-case-critical-infra.tech.verify.body":"Recorded telemetry fixtures and boundary cases run on standard CPUs in CI. The suite compares every threshold crossing with an independent reference before a policy or runtime build can move toward the OT network.","use-case-critical-infra.tech.replay.eyebrow":"THE STORM MANIFEST","use-case-critical-infra.tech.replay.lead":"Rebuild the storm decision","use-case-critical-infra.tech.replay.accent":"From four sealed artefacts","use-case-critical-infra.tech.replay.body":"Telemetry snapshot, relay policy, operator state, and witness receipt form one offline bundle. The supervisor can replay it without touching the live control network.","use-case-critical-infra.tech.footer":"Critical infrastructure, technical","use-case-critical-infra.business.trace.accent":"replays in under a minute","use-case-critical-infra.business.trace.lede":"The incident record is created as the shift happens, not reconstructed the morning the regulator asks. Asset, rule, action, and replay are attached while the work moves, so the supervisory request is a retrieval, not a reconstruction.","use-case-critical-infra.business.trace.panel":"The incident record","use-case-critical-infra.business.trace.questionLabel":"THE SUPERVISOR ASKS","use-case-critical-infra.business.trace.answerLabel":"THE RECORD SHOWS","use-case-critical-infra.business.trace.answer":"Protective relay policy version 4.1, rule 3.2, applied because the differential current on feeder F-12 sat above the policy threshold for the asset class at 02:32. The comms link had dropped at 02:31; the platform operated from the last telemetry snapshot and the operator confirmed the trip. The same decision replays bit-identical, with the rule, the asset reference, and the operator action on one screen.","use-case-critical-infra.business.trace.signal":"SIGNAL","use-case-critical-infra.business.trace.signalDetail":"Feeder F-12 telemetry, 8.4 kA differential flagged","use-case-critical-infra.business.trace.rule":"RULE","use-case-critical-infra.business.trace.ruleDetail":"Protective relay policy in force on the date of the event","use-case-critical-infra.business.trace.action":"ACTION","use-case-critical-infra.business.trace.actionDetail":"Trip and isolate, restore sequence queued, operator confirmed","use-case-critical-infra.business.trace.replay":"REPLAY","use-case-critical-infra.business.trace.replayDetail":"Compact witness the regulator can replay in under a minute","use-case-critical-infra.business.sovereigntyQuote":"Sovereignty in an OT network is not about buying European servers. It is about the platform still deciding when the communications link drops, on your timelines, in your jurisdiction, against your operating policy.","use-case-critical-infra.9611f273b6":"The decision is taken at 02:32 and explained at 09:00. Both have to come from the same record.","use-case-critical-infra.e0fd9813d3":"The alarm, the rule and the action sit in one place, so the morning answer is a retrieval rather than a search.","use-case-critical-infra.28272fb2c0":"OT OPERATIONS","use-case-critical-infra.1a1d08ef2d":"Storm cascade, feeder F-12","use-case-critical-infra.6da386c509":"Ask about an alarm, a rule, or an asset","use-case-critical-infra.4a955327fe":"The incident record","use-case-critical-infra.0ac26c098f":"Three standing claims about the incident record, each with the measure the section states.","use-case-critical-infra.8149262416":"A record created as the decision is made is the only kind that can be replayed rather than rewritten.","use-case-critical-infra.0703ea95ac":"What the record actually contains","use-case-critical-infra.9625898672":"The supervisory question, the answer that comes back with its sources, and the four entries written while the shift moved.","use-case-critical-infra.f1e4e67c53":"Asset, rule, action and replay, attached as the work moves.","use-case-critical-infra.d93faf3622":"Think about the 24-hour report","use-case-critical-infra.8c1d7604be":"a NIS2 supervisor accepts","use-case-critical-infra.ab403873b4":"What the supervisor checks","use-case-critical-infra.633f99974b":"Fabric assembles this record as the decision happens","use-case-critical-infra.ef6a69968e":"Whichever workflow you point it at, the record is assembled the same way and answers the same four questions.","use-case-critical-infra.b6eacfc430":"The three product properties against the three deployment postures, showing that each property holds in each posture.","use-case-critical-infra.da9dff80ab":"Procurement changes where the decision layer sits. It does not change what travels with a decision.","use-case-critical-infra.35e33658f3":"One platform, three postures. NIS2, the CER Directive, and the EU AI Act are design constraints satisfied by construction, not posture added after the morning call gets harder.","use-case-critical-infra.499231ec1e":"Anything that reaches your supply comes with a reason you can read and a record you can ask for.","use-case-critical-infra.6339449287":"Operators write the rules, the system checks the signal against them, and every step is written down as it happens.","use-case-critical-infra.0527265e09":"WHY THIS HAPPENED","use-case-critical-infra.fac216bfae":"Why did my power flicker at 02:32?","use-case-critical-infra.c85d0916f5":"Ask why a service event happened","use-case-critical-infra.179048b3ab":"Four commitments in plain words about the AI helping run the services you depend on every day.","use-case-critical-infra.b70fa07307":"Four layers, one witness. Each layer writes its own field before the decision leaves the plant.","use-case-critical-infra.0aeea3e25d":"One typed event crosses the boundary. Nothing reaches back across it later to fill in what was missing.","use-case-critical-infra.2be5ce5e13":"A decision at a timestamp sees the rule version in force then, never the one that is current today.","use-case-critical-infra.c307cbb812":"The claim is one you can re-run on your own hardware rather than one you have to take on trust.","use-case-critical-infra.2cd5fd4871":"The decision witness","use-case-critical-infra.164eb3eb9b":"Three properties of an extracted witness slice, each with the mechanism that provides it.","use-case-critical-infra.c02f35a072":"Nothing is recomputed at replay time. The replay reads back the same artefacts the decision was taken from.","use-case-critical-infra.b1b88c36de":"The slice, extracted and verified","use-case-critical-infra.194cf825f1":"The supervisory replay request, the answer the witness returns with its sealed sources, and the four entries the stack wrote.","use-case-critical-infra.970fb8ae1e":"Decide, ground, prove, replay. Four entries written by the four layers that took the decision.","use-case-critical-infra.308f51f199":"Four artefacts, one bundle. The supervisor replays it without touching the live control network.","use-case-critical-infra.1ae9fbc004":"The witness rides the infrastructure you already maintain, so nothing new has to be operated to keep the record.","use-case-critical-infra.f3f65ee148":"One platform on standard CPUs, no GPU mandate. OT-DMZ, on-prem, or air-gapped, with no re-platforming between postures.","use-case-critical-infra.da2df665c2":"An operations manager does not buy a platform. She holds a shift. At 02:30 the storm front arrives, alarms cascade, the comms link to the furthest feeder drops, and the anomaly tool shows a red score with nothing behind it. The regulator will ask for the record in the morning.","use-case-critical-infra.0fac4ad440":"The same shift, with the platform in place. The operations manager sees the cascade, the feeder alert names the asset and the threshold, and she trips the correct breaker with the reason already attached. Every alert carries the asset, the threshold and the rule, so there is no red score with nothing behind it, and the override is recorded the same way the original alert was. When the comms link drops, the platform keeps deciding. The regulator request the next morning is a retrieval, not a reconstruction from screenshots.","use-case-critical-infra.d6f7d6597f":"The discipline is the same whichever decision you point it at. A load forecast, a fault call, an OT cyber alert, a maintenance flag: each one gets the asset, the rule version, the operator action and a replay path attached while the work is happening. You tried sending the alert to a chat tab instead. It gave you a confident paragraph and nothing you could hand to the morning supervisor. A chat box answers the question. Dweve finishes the storm shift with the record attached. The same record answers the regulator and the morning supervisor without being rebuilt for either.","use-case-critical-infra.4a310162a7":"Two questions decide procurement: where does it run, and which rules does it satisfy. Under both sits one property. The decision layer is deterministic: the same inputs, the same rule version and the same operator state return the same result, and the decision replays bit-exact on request. It runs on operator hardware behind the OT-DMZ, on your own servers, or fully air-gapped, with no re-platforming between postures. NIS2, the CER Directive, and the EU AI Act are design constraints the platform satisfies by construction, not posture added after the morning call gets harder.","use-case-critical-infra.20a36cee2b":"You are not the operator. You are the household that depends on the grid holding through the storm. The same night that makes the operations manager dig for evidence is the night you finally find out why your power flickered, which asset caused it, and what the operator did about it.","use-case-critical-infra.35787d5fd4":"Behind every operational decision is a simple, repeatable process. Operators write their policies, following IEC, ENISA and national requirements, and telemetry from every asset is evaluated against those rules. The recommendation and its reason reach the operator on shift, who confirms or overrides it before anything is switched. Every step is recorded as it happens, so the record is there if you or your regulator ever ask, and it can be replayed by the regulator or a board of inquiry with the rule version that was in force at the time, not the one in force today.","use-case-critical-infra.758a5050ac":"You are the OT integrator behind the storm shift. When the supervisor asks for the 02:32 incident record, you are the one who has to make the feeder trip replay bit-identical, with the rule, the asset reference, and the threshold, on hardware the operator controls. The work is attaching a witness to a decision and routing it through the OT stack you already run. The rest of this track walks that stack in order: the determinism contract, the policy boundary, verification, the witness itself, the replay manifest, and where it runs.","use-case-critical-infra.c4d77487b7":"The witness is built incrementally as the decision is made. On a clean case it is empty and the wire path is unchanged. When the supervisor asks, the slice is extracted from the chain and replayed, with the rule, the asset reference, and the operator action intact.","use-case-critical-infra.5dea71425e":"Determinism is asserted in the suite, not promised in prose. The same oracle run on your hardware produces the same answer as on ours. Recorded telemetry fixtures and boundary cases run on standard CPUs in CI, and the suite compares every threshold crossing with an independent reference before a policy or runtime build can move toward the OT network.","use-case-critical-infra.c1ff950dae":"Two questions decide the integration: where it runs, and how the witness travels. It runs on operator hardware behind the OT-DMZ, on your own servers, or air-gapped, with no re-platforming between postures. The witness rides the event bus you already maintain, so the same artefact lands in the NIS2 incident report and your historian without a double write.","use-case-critical-infra.911b24d915":"The decision cannot wait for the link to come back. Protective action on a feeder is taken in seconds, from whatever telemetry the site holds at that moment.","use-case-critical-infra.7148f3582b":"The explanation cannot wait either. By 09:00 the supervisor wants the asset, the rule version and the operator action, and a summary written after the fact is not that.","use-case-critical-infra.f77921162b":"The decision layer is deterministic. The same inputs, the same rule version and the same operator state return the same result, which is what makes a replay worth running at all.","use-case-critical-infra.aa7cb3cad0":"It is also explainable by construction. The rule that fired and the measurement it fired on are recorded beside the outcome, so an explanation is read off the record rather than composed afterwards.","use-case-critical-infra.8a7405ce92":"Nothing here happens to you without a person. Every action the system suggests is approved by an operator, and that operator is named on the record.","use-case-critical-infra.e17a5bcc5f":"You do not have to know how any of it works to use it. You ask why your supply was affected, and the answer comes back with the measurement and the rule that caused it.","use-case-critical-infra.21e1b23bfe":"The witness is not a log written alongside the decision. It is assembled by the same layers that take the decision, which is why it cannot drift out of step with what happened.","use-case-critical-infra.51e08cb872":"On a clean case it stays empty and the wire path is unchanged. Nothing in the OT hot path waits on evidence being written.","use-case-critical-infra.b940fdd8e6":"The oracle is independent of the runtime it checks. It is not the same code asked whether it agrees with itself.","use-case-critical-infra.f652ed2d34":"The gate sits before the OT network, not after it. A build that disagrees with the reference does not reach a substation to be discovered there.","use-case-critical-infra.da7320346d":"The witness accretes rather than being compiled. Each stage writes its field as it runs, so extraction is a read of what happened and not a reconstruction of it.","use-case-critical-infra.e27da022c6":"Extraction is a slice, not an export of the whole chain. The supervisor gets the segment covering the decision, and the seal still verifies on that segment alone.","use-case-critical-infra.18561dbcbb":"A storm decision has to survive the morning","use-case-critical-infra.a59bf4dbf2":"Each gap blocks the shift","use-case-critical-infra.9862eefb98":"What the operations manager sees this shift","use-case-critical-infra.2a1c7139bd":"On every decision","use-case-critical-infra.ca6956f24e":"The record is written while the shift moves","use-case-critical-infra.3b5179ec60":"Retrieval, not reconstruction","use-case-critical-infra.27d948bc23":"The same four steps on any of those workflows","use-case-critical-infra.b2f00a5006":"One incident record","use-case-critical-infra.bb3149d113":"The properties do not move with the posture","use-case-critical-infra.4f6a5fb55f":"Three properties, three postures","use-case-critical-infra.8eb59927bd":"What a confident guess costs you","use-case-critical-infra.053e59e26a":"A named decision instead","use-case-critical-infra.0b2250801a":"Four steps, and none of them is a guess","use-case-critical-infra.d146514463":"Written down as it happens","use-case-critical-infra.43afe95a57":"What you are entitled to, in four numbers","use-case-critical-infra.c0b8c59cee":"Written down, not implied","use-case-critical-infra.f578232a19":"Each layer writes one field of the witness","use-case-critical-infra.39e4c05b06":"The slice carries its own proof of integrity","use-case-critical-infra.f5646ce4db":"Verified without us","use-case-critical-infra.d484b99989":"One artefact across three hops you already run","use-case-critical-infra.41653ebd1a":"No double write","use-case-critical-infra.aed3b8c6a7":"Verified","use-case-critical-infra.17d120d8bb":"Replayable","use-case-critical-infra.4dbba36b46":"four entries","use-case-critical-infra.66c95e7fc7":"Sealed","use-case-critical-infra.65c821a596":"Live","use-case-critical-infra.5f548c4716":"THE SUPERVISOR REPLAYS","use-case-critical-infra.b814bda31a":"THE WITNESS RETURNS","use-case-critical-infra.0057b5df75":"Protective relay policy version 4.1, rule 3.2, fired because the differential current on feeder F-12 sat above the policy threshold for the asset class at 02:32. The witness replays bit-identical, the chain segment verifies offline, and the operator confirmation and decision state are recorded alongside the system reasoning. Comms drop at 02:31 was logged; the platform operated from the last telemetry snapshot.","use-case-critical-infra.02977df2c2":"DECIDE","use-case-critical-infra.2bddb332b7":"OT domain specialists route the decision, constraints fired logged","use-case-critical-infra.cb9cfdf235":"GROUND","use-case-critical-infra.c1c0eb1292":"Policy version effective on the event date attached","use-case-critical-infra.a2fea83933":"PROVE","use-case-critical-infra.f34cc75a82":"Witness emitted and sealed into the hash chain","use-case-critical-infra.4e250b4fde":"REPLAY","use-case-critical-infra.aa2eb064b6":"Slice extracted and verified offline by the supervisor","use-case-critical-infra.2bd4f547e9":"Start with the shift you most dread explaining.","use-case-critical-infra.c81b5aeea9":"Two answers to the same alarm","use-case-critical-infra.5b1ab1e243":"Weighed","use-case-critical-infra.dc6622cbab":"Four counts, weighed","use-case-critical-infra.acb770b58d":"A record on every one","use-case-critical-infra.03e74b778c":"Sources attached, replay ready","use-case-critical-infra.79a52585da":"Every decision carries the asset it came from, the rule that fired and the operator who confirmed it.","use-case-critical-infra.141fd83684":"A score with nothing behind it never reaches the incident log, because the derivation is written with the decision.","use-case-critical-infra.f40d1454aa":"The supervisory request is answered by replaying the decision, not by rebuilding it from email.","use-case-critical-infra.8e632ceca6":"Attached","use-case-critical-infra.f9312169ef":"Pinned","use-case-critical-infra.e51845cb11":"Named","use-case-critical-infra.20c7c5522f":"Ready","use-case-critical-infra.bdf63f00da":"Reason attached, record available on request","use-case-critical-infra.02161836ef":"The same inputs and the same rule version return the same decision, byte for byte.","use-case-critical-infra.87b698147e":"The slice is sealed into the hash chain as it is written, so tampering shows as a break.","use-case-critical-infra.9f3172e572":"A supervisor verifies the segment without the live control network and without a service of ours in the path.","use-case-critical-infra.ba235b784f":"The same storm alarm weighed on four counts, with what each route leaves the morning supervisor holding.","use-case-critical-infra.733e8e0917":"The grid that powers your home, the water that comes out of your tap, the trains that get your kids to school. The AI helping run those systems should explain itself, stay inside the country, and never silently take an action that affects you. Your operator can override it in one click.","use-case-critical-infra.f922ba0092":"You are the OT integrator who has to make a 02:30 storm decision answerable by 09:00. The same action the operator took when the comms link dropped has to replay bit-identical, on hardware your operator controls. Here is how the witness attaches to a decision and travels through the OT stack you already run.","use-case-critical-infra.eb0ac06849":"02:30","use-case-critical-infra.43e2b215f6":"02:31","use-case-critical-infra.285fd145c3":"02:32","use-case-critical-infra.62646b00e3":"09:00","use-case-critical-infra.4bc1e1065a":"ALARMS","use-case-critical-infra.9077aa00ab":"RULES","use-case-critical-infra.bbb86bcb94":"ACTIONS","use-case-critical-infra.3f8b2815dc":"INCIDENTS","use-case-critical-infra.289e7cb687":"SIGNAL","use-case-critical-infra.aaa398a28b":"RULE","use-case-critical-infra.2b9f1cf5c4":"ACTION","use-case-critical-infra.1ec4de7e1b":"THE ALERT","use-case-critical-infra.7f5464a063":"THE RULE","use-case-critical-infra.bc70b60fac":"THE ACTION","use-case-critical-infra.2da7864289":"THE REPLAY","use-case-critical-infra.fdff52de3b":"OT-DMZ","use-case-critical-infra.e0e66c8de3":"ON-PREM","use-case-critical-infra.a49fe775c6":"STORM","use-case-critical-infra.51138d4247":"ASK","use-case-critical-infra.64b080ec54":"ANSWER","use-case-critical-infra.31355a2868":"RECORD","use-case-critical-infra.fdf7016fa1":"CITED","use-case-critical-infra.ab8b10b039":"APPEALABLE","use-case-critical-infra.20a32b7930":"YOUR DATA","use-case-critical-infra.8ffa1146c7":"REASONING","use-case-critical-infra.73ca671632":"KNOWLEDGE","use-case-critical-infra.3395f87c48":"PROOF","use-case-critical-infra.055d363a8e":"EXECUTION","use-case-critical-infra.077ec27652":"OT EVENT","use-case-critical-infra.06d55361b1":"VERSIONED","use-case-critical-infra.29d4067539":"NO CALLBACKS","use-case-critical-infra.127edee78d":"SIGNED","use-case-critical-infra.d570538125":"EFFECTIVE-DATED","use-case-critical-infra.39fe84387c":"FAIL-SAFE","use-case-critical-infra.b109c2b628":"FIXTURES","use-case-critical-infra.63bec5f0bc":"BOUNDARIES","use-case-critical-infra.a1a27ef897":"CI-GUARDED","use-case-critical-infra.63cea569e5":"BLAKE3","use-case-critical-infra.c689932b7d":"OFFLINE","use-case-critical-infra.fa760e3c7d":"AIR-GAPPED","workspace-mockup.2eb56be3c2":"Sources","workspace-mockup.a010de5c61":"Fabric","workspace-mockup.905cb326c7":"You","workspace-mockup.fffbce7dc4":"Ask anything","workspace-mockup.f9312169ef":"Pinned","workspace-mockup.19adc47be3":"Folders"}