ARCHITECTURE · THE PAGE EVALUATORS READ TWICE

The Command Chain.

Six members, one organism: telemetry becomes detections, detections become investigations, investigations become governed agent work — and nothing acts without a human signature.

Five layers, one signature.

The family is a layered system: memory below, perception above it, investigation above that — and a human approval gate before anything becomes work. Simurg powers every layer’s reasoning; Heimdall wraps the whole stack as its trust boundary.

Humans do not sit inside the loop as a checkbox. They sit above it, as command.

HEIMDALL PERIMETER

5 · REVIEWABLE OUTCOMEShuman-signed, on the record

4 · AGENT DESK + AGENT CENTRALworkforce & command

⛨ HUMAN APPROVAL — NOTHING EXECUTES WITHOUT A SIGNATURE

3 · SOC ANALYST · MIMIRinvestigation, read-only

2 · NEURAL ENGINEperception, CPU-only tier

1 · TELEMETRY & EXPORTSCSIEM — the memory

⚡ SIMURG — THE POWER PLANT UNDER EVERY LAYER

The integration map.

Only real edges — every line below exists in the platform today.

NEURAL ENGINE → MIMIR Scored anomaly incidents — freshness-gated feed

CSIEM → NEURAL ENGINE & MIMIR Telemetry; read-only investigation queries

MIMIR ↔ SIMURG Local reasoning — HTTP, role-keyed

HEIMDALL → MIMIR Approved requests in; gated deliveries out; scoped credential grants

BIFROST ↔ NEXUS Agent catalog, routing decisions, bindings; Nexus workers poll Bifrost’s agent API

NEXUS ↔ SIMURG Model routes; health-gated, local-first dispatch

The doctrine, stated formally.

I. Nothing executes without an accountable human signature. Approval is structural: unapproved work is invisible to agents.

II. Every verdict cites evidence into the customer’s own data. Ungrounded claims cannot leave the system; gates enforce it in code.

III. Dissent is recorded. Humans approve, agents reason — and when they disagree, both judgments are preserved on the record.

IV. Powers are separated on purpose. The analyst holds no authority; the watchman holds nothing else; the engine decides nothing; the desk hides unapproved work.

V. Sovereign by design. All reasoning runs on customer hardware; no byte of telemetry leaves the network.

Deployment reality.

SERVICES

Single-binary services under systemd. No database servers, no message brokers.

STATE

Filesystem state with journaled snapshots — deterministic, replayable, backup-friendly.

AIR GAP

Air-gap-friendly by construction: no cloud dependency anywhere in the loop.

HARDWARE

Detection tier is CPU-only; the reasoning tier sizes to your GPUs — workstation to DGX-class.

Walk the chain with our engineers.

The architecture briefing follows one real event end to end — raw telemetry to human-signed outcome — on your constraints.

Request the architecture briefing