SecGenix by CardioAssure: TAL reference stack

Design-intent reference implementation of the Trusted Access Layer (TAL). The demo is a simulation with fictional devices. Not a shipped product, not a medical device, no clinical claims. Patents: US 12,272,455 B2 and US 12,592,317 B2.

What is here

• packages/core pure default-deny decision core, signed bundles, signed hash-chained receipts, replay, tenancy, RBAC, events, flags
• packages/edge TAL edge agent (Worker, Node container, browser)
• packages/control-plane control plane (Cloudflare D1 + KV adapters, AWS stub)
• packages/simulator traffic generators and scenarios
• apps/site, apps/demo, apps/admin web apps
• infra/terraform Cloudflare and AWS, scripts/deploy-cf.sh
• docs/ ARCHITECTURE, CAPABILITIES, THREAT_MODEL, DEMO_RUNBOOK, DEPLOYMENT_PLAN

Quick start

npm ci
npm run typecheck && npm test
npm run cp:local          # control plane on :8787 (memory adapter)
npm run edge:node         # edge on :8788 with a self-issued demo bundle
npm run sim -- --scenario telemetry-flood --seconds 5
npm run build && npm run docs && node scripts/copy-docs.mjs
Copy

Scenarios: baseline, rogue-programmer, autonomous-request, firmware-gated, telemetry-flood.

Deploy

See docs/DEPLOYMENT_PLAN.md. npm run deploy:cf -- prod.