Design-intent reference and simulation. Not a shipped product, not a medical device, no clinical claims.

Docs home | API reference

Capabilities: built versus designed

Honest status for the 11/4/2026 review. "Built" means code exists in this repo and is covered by tests or verified locally. "Live" means deployed and reachable. "Designed" means specified only.

Built and tested

  • Default-deny allowlist decision core, pure and deterministic, with explicit reasons: no-policy, policy-expired, unknown-source, revoked-source, unknown-destination, no-matching-rule, outside-window, source-not-enumerated.
  • Device identity enumeration with revocation.
  • Ed25519 signed policy bundles, digest check, unknown key refusal, rollback refusal, freshness and fail closed on expiry.
  • Signed, hash-chained decision receipts with offline verification and replay.
  • Token bucket shaping per flow and strict priority queuing with per-class tail drop.
  • Control plane router with RBAC, subtree inheritance, separation of duties, versioned policy, signed publish, event log.
  • Memory and Cloudflare adapters (D1, KV, optional Queues).
  • Traffic simulator with five scenarios and a fleet push view.
  • Three web apps and a docs site with TypeDoc API reference.

    • Live (see README for URLs)

  • Cloudflare Workers: control plane API, edge Worker, three static apps on custom domains.

    • Stubbed or designed only

  • AWS adapter (typed stub that throws), Terraform for AWS (plan level, not applied).
  • Passkey sign in (UI and design; demo login is used).
  • Durable Objects edge state, Merkle batch receipts, KMS or HSM key custody.
  • SDK embedded form factor (direct command visibility) is described, not built. This repo builds the network proxy form factor, which sees flow metadata and identity and does not decrypt TLS.

    • Not claimed

  • No clinical claims. Not a medical device. No claim of a public implant command exploit.

    • Phase 2 status

    | Capability | Status |

    | --- | --- |

    | Go gateway: WireGuard, SOCKS5, CONNECT, transparent | Built, tested, run against prod control plane |

    | Signed allowlist, default deny, golden vectors in Go and TS | Built, tested |

    | Per flow shaping and strict priority | Built, measured (integration test: control p99 8.42 ms vs 23.97 ms FIFO) |

    | Signed hash chained receipts, verified on ingest | Built, live |

    | tal attach / connect / renew | Built, live |

    | Tenant DO, outbox, Queues, D1 projections | Built, live |

    | R2 archive | Built; R2 not enabled on the account, KV fallback in use |

    | Passkey admin | Built, deployed; first passkey needs the bootstrap token |

    | Hosted gateway with public UDP | One command (compose or Terraform); not running publicly |

    | Cloudflare Tunnel or WARP on ramp | Design intent |

    | AWS Terraform | Written, validated, not applied |