Pre-pilot · dual-plane · HUMAN_ONLY · mapped to published NIST · CISA · NSA ZT · not an ATO
Ikaros is the engine, not the mesh
THE FRINGE is the platform for regulated operators. Ikaros is the policy engine (NIST SP 800-207 PE). AEGIS is the policy administrator. Edge PEPs sit on the data plane. Data sources feed the engine — CISA Visibility and Analytics — not a second product. This origin is the brand and the ENGINE PATH — not a PEP. Briefing is the ENGINE PATH in 90 seconds. Architecture and Ikaros are the live walkthrough. AEGIS on this page is the guide; in Ikaros it is the HUMAN_ONLY gate.
THE FRINGE is published only at c1bertitans.com — sole public sales and architecture surface.
This origin is not a PEP. Mapping to NIST is not an ATO. No agency endorsement.
Who this is for
One job each. Not a product mega-menu. Not a contractor logo wall.
Operator
Walk the ENGINE PATH.
Edge → Assess → Decide → Gate → Act. Dual-plane, classical rank, HUMAN_ONLY.
Open Briefing →General counsel
Mapped to NIST — not a seal.
Published NIST / CISA / NSA guidance. Mapped to — not verified by. Not an ATO.
Open Trust →Board
See what we sell.
Field Mandate stages and what we will not claim until a paid pilot measures it.
Open Mandate →Integrator
Use the public map.
Allowlisted public pages. ENGINE PATH, Claims, Mandate. No contract-vehicle theater.
Open Docs →Technical layers
For engineers who already know the job. Four pillars model the design. Each has a technical origin and a section that owns the writeup.
Zero Trust dual plane.
Hover · enterprise & government access
Board framing
Not a consumer access product. Untrusted vs private planes under NIST 800-207 concepts— visitors/contractors separated from workforce before fusion and PDE run. Network admission is one control inside the fabric.
Architecture fit: L1 access for enterprise & government facilities · feeds Content + Fusion. Full section: Zero Trust.
Open Zero Trust →Inspect by policy.
Hover · click for Fabric
Origin story
Modeled on enterprise secure web gateways—not global MITM of the open Internet. On the private plane only, TLS may be broken under an inspection CA, inspected (category / ICAP), then allowed or denied by policy. Untrusted-plane traffic is not default-inspected; public CAs after grant when internet is allowed.
Architecture fit: L4 content plane · OSS Bluecoat-class proxy · never default on Guest. Full section: Fabric (content plane).
Open Fabric →QFC multi-plane bus.
Hover · click for Ikaros
Origin story
Silos lose campaigns. The QFC · QUANTUM fusion core is a single telemetry bus: edge, admission PEPs, proxy verdicts, IDS, and external intel share one schema so joint evidence updates faster than isolated alerts.
Architecture fit: L5–L6 detect + fuse · HostB QFC · crypto bill of materials health. Full section: Ikaros.
Open Ikaros →Human-gated PDE.
Hover · click for Ikaros
Origin story
The Predictive Decisiveness Engine ranks via CEP-Rank (rules + scored correlation; LLM does not rank), proposes acts, and writes a decision journal. High-impact remains HUMAN_ONLY. AUTO_SAFE is off until a measured window exists.
Architecture fit: L6 decision plane · AI RMF-aligned gates · anti-fragile learn loop. Full section: Ikaros · Decision.
Open Ikaros →