Home · Architecture

C1BERTITANS · CTO architecture

Ikaros is the engine, not the mesh

Ikaros is the Predictive Decisiveness Engine — the NIST SP 800-207 policy engine (PE). This page is the ENGINE PATH: ingest, fuse, rank, propose, gate, act, learn. Data sources feed the engine; PEPs enforce on the data plane. Mapping: PE / PA / PEP — not a second product.

Five stages. One engine. One gate nothing skips. Click a stage — it highlights where that step runs on the diagram. Play walks the path.

01ingest→ 02fuse→ 03rank→ 04propose→ 05gate→ 06act→ 07learn

Five stages. One gate nothing skips.

Deployment mapping, not just definitions — each box names where it runs on the reference architecture below. Click any box to highlight the nodes.

Edge

Observe · data arrives

Traffic hits Policy Enforcement Points: untrusted, enrolled, WAN. Dual-plane. Nothing has been decided yet.

Runs at: Access PEPs

Assess

PDE CORE · ingest + fuse

Ikaros ingests PEP and content verdicts and fuses them on one schema. Silos do not rank.

Runs at: QFC → Ikaros CORE

Decide

Algorithm · CEP-Rank

CEP-Rank scores the hypothesis against policy. Classical algorithm. LLM narrates only — it does not hold the score.

Runs at: Ikaros PDE · CEP-Rank

Gate

HUMAN_ONLY · nothing skips

AEGIS applies policy to what happens next. High-impact does not auto-execute. AUTO_SAFE is off.

Runs at: AEGIS kernel

Act

Enforce · then learn

Approved acts return to Edge PEPs. The journal records. Stress becomes signal. The engine does not bypass enforcement.

Runs at: PEPs ← engine · Journal

Click any box — it maps onto the reference architecture below.

One diagram — click any node

Every box is published doctrine, explicitly illustrative, or the gate. Color, not adjective, tells you which. Packets ride the active hop. The scenario below runs this exact path. Nothing in it skips the gate.

Data sources

NIST SP 800-207 data sources into the policy engine. CISA Visibility and Analytics. Not sister products. Untrusted is never enrolled. PQC, CBOM, and harvest-now-decrypt-later are feeds into QFC, not a quantum computer in the rank path. ATT&CK Txxxx are evidence IDs for the HUMAN_ONLY reviewer.

Legend: green = published doctrine. steel = illustrative, not live on this host. rose = the checkpoint nothing is cleared to skip. amber = Ikaros PDE core. Dashed line = learn feedback into QFC.

ENGINE PATH

Edge → PDE CORE → gate → Act

Data hits the Edge. Ikaros assesses and decides against policy. AEGIS gates what happens next. Arrow keys step. Space plays.

ENGINE PATH · 01–05

Edge

Policy

observe

Algorithm

—

Confidence

PEP-UNTRUSTED PEP-PRIVATE WAN-IDS PQC-CBOM

AEGIS · guide

Traffic just hit the PEPs. Untrusted is not enrolled. Nothing has been decided — dual-plane honesty, not a fused alert.

forward to PDE. Data arrives at Policy Enforcement Points. Dual-plane access. This host is not the Edge. The PEP logs; it does not rank.

QFC record · ENGINE PATH

{
  "ts": "2026-09-08T21:04:11Z",
  "plane": "untrusted",
  "actor": "sess-4471",
  "object": "—",
  "verdict": "observe",
  "confidence": "0.06",
  "crypto-health": "—"
}

One engine. Named parts.

QFC

Fusion bus. One schema: timestamp, plane, actor, object, verdict, confidence, crypto-health. Silos do not rank.

CEP-Rank

Score function inside Ikaros. Classical rules plus scored correlation. LLM narrates only — not in the rank path.

AEGIS kernel

Policy decision. HUMAN_ONLY until a written AUTO_SAFE threshold exists. Writes the journal. Operator remains sovereign.

Journal

Append-only decision record. Shape a reviewer can inspect. Not a live API. The case does not close itself.

The same walkthrough, as text

01 · EDGE

Edge

A session on the untrusted plane makes a request that does not match its admission grant. The PEP logs the event. No score has been computed. No act has been proposed.

02 · ASSESS

Assess

Verdicts from admission and WAN land on the fusion bus. Ikaros opens a hypothesis. It does not yet believe anything is wrong — confidence is a range, not a point.

03 · DECIDE

Decide

The ranker returns H-0412 at rank 1: contain_session. Evidence cites a multi-plane join and ATT&CK T1566. The proposal is not an act. Authority has not moved.

04 · GATE

Gate

The kernel holds the proposal. The operator sees the journal shape — hypothesis, rank, evidence, proposed act — and decides accept, reject, or defer. The model does not close its own case.

05 · ACT

Act

The operator accepts. The PEP isolates the session. Record H-0412 is appended. A reviewer can inspect the shape. Posture hardens.

What is real here

This page is the ENGINE PATH. Live code on this origin walks Edge → Assess → Decide → Gate → Act. Dual-plane. HUMAN_ONLY. AUTO_SAFE off. No LLM in the rank path. No quantum computer in the rack.

This origin is not a PEP. Ikaros CORE, QFC, CEP-Rank, and the journal run in the dedicated enclave. This site publishes the path and the walkthrough.

Claims we will not make here: no unlabeled MTTD, no “outperform ATT&CK”, no ATO sticker. Q-Core, if used as a name, means QFC + CEP-Rank + AEGIS kernel — classical prediction, quantum-facing crypto health.

Enterprise

Dedicated enclave.

Telemetry stays in the customer enclave. Not a multi-tenant cloud brain. PEPs at the edge.

Access honesty →

Government

Mapped, not sealed.

NIST · CISA · NSA Zero Trust language. Residual risk named. Not an ATO sticker.

Trust →

Private sector

Inspect where trust exists.

Dual-plane. No guest mass intercept. PDE proposes; humans own irreversible acts.

Ikaros PDE →

vs Big Tech

Same risks. Different control plane.

They fuse in their cloud and sell autonomy. We fuse in the enclave and gate the engine.

Dimension map →

This origin publishes the path. It is not a node on the path.

Tenancy: dedicated per customer fielding — one enclave. Residency: fused telemetry does not leave that enclave. This origin is the brand and the live architecture page. Mapping to NIST is not an ATO.