// product lines
8 surfaces
ai governance
61% completebuilding
AI agents act autonomously — every tool-call is an unrecorded risk without a governance layer. No audit trail, no human oversight, no proof of compliance when a regulator asks. Konsonans AI Governance routes every agent action through a typed policy gate, writes a tamper-evident SHA-256 hash chain, and holds high-risk decisions for human approval before they reach the upstream tool.
buyer page → formal specification → prospectus →componentsarchitecture →
mcp ingress
model-context-protocol gateway. every agent tool-call is intercepted and routed through the policy gate before it reaches the upstream tool. identity + rbac enforced at entry.
policy gate
glither.governance dialect (risk-tiered, fold first-match) compiled to a wasm component. synchronous allow / hold / deny, fail-closed on missing evidence.
audit chain
append-only postgres event store with sha-256 hash chain and verify-chain. ≥6-month retention. art 9 risk management, art 12 traceability.
human oversight
hold-for-approval lifecycle with sla-timeout-to-deny. notifications to discord and email, rbac-gated approvers. art 14 human oversight.
manifest signer
ed25519 replica-manifest signing, software or pkcs#11 / hsm backend, anchoring cross-node divergence detection and conformity evidence.
identity + rbac
oidc / saml authentication, role→permission authorization (agent / reviewer / approver / admin) enforced at ingress and on approvals.
agent→mcp-ingress→policy-gate→audit-chain→oversight→replica-signer
matches
78% completelive
autonomous cinematic battle runtime — grounded locomotion, tactical ai, procedural choreography, per-bone keyframe timeline in an in-browser studio.
prospectus →componentsarchitecture →
viewport
real-time 3d scene renderer. webgl2 viewport with orbit controls, selection, transform gizmos. multi-camera layout (perspective, top, front).
timeline
per-bone keyframe editor. dope sheet and curve editor. blend modes, easing presets, frame-stepping. deterministic replay.
tactical ai
goal-oriented action planner. perception system (sight, sound, damage). stance state machine, formation logic, cover evaluation.
dsl editor
embedded domain-specific language for choreography. syntax-highlighted editor with live preview. seed-based determinism for reproducible playback.
procedural engine
locomotion blending, ragdoll transitions, procedural wind/react. constraint solver for foot-planting and hand-placement.
dsl-editor→tactical-ai→procedural-engine→viewport←timeline
articulate
86% completelive
WordPress powers 43% of the web — and is the single most targeted CMS. Every plugin, theme, and zero-day is an attack surface you didn't write. Articulate wraps your WordPress in a Rust gateway with filesystem immutability, WASM image hardening, GraphQL depth/pagination guardrails, and a private origin invisible from the internet — then adds a Next.js storefront, multi-tenant provisioning, and GraphQL edge federation.
read the docs → pricing → prospectus →componentsarchitecture →
gatekeeper
secure ingress proxy. authenticates and routes requests to tenant wordpress instances. handles custom domain ssl, rate limiting, waf rules.
storefront
next.js 16 headless frontend. app router, tailwind v4, stripe payments, oauth (google/facebook/microsoft/apple). courses, shop, events, digital downloads.
provisioner
multi-tenant lifecycle manager. creates wordpress instances via docker-compose, manages dns (cloudflare), mail users, ssl certs. stripe webhook integration for billing.
graphql edge
federated graphql gateway (strawberry + fastapi). aggregates wp graphql, storefront data, and tenant management into a single endpoint. mcp server for ai-driven operations.
mailstack
tenant email infrastructure. dovecot imap, postfix smtp, dkim signing, alias management, mailbox provisioning per tenant.
provisioner→gatekeeper→wordpress↔graphql-edge↔storefront→stripe
mailroute
74% completebeta
Hostile mail bypasses every perimeter filter eventually — phishing, malware, data exfiltration, and spoofing land in inboxes before signatures catch up. MailRoute sits between the MTA and the mailbox, inspecting every message against hot-reloadable rules with quarantine buckets, audited rule edits (propose → apply → revert), and webhook relays for downstream automation.
read the docs → cellular school → prospectus →componentsarchitecture →
rule engine
pattern-match pipeline. header, body, attachment analysis. allow/block/reject actions, scoring, tag injection. hot-reloadable rule sets.
bucket store
quarantine and archive buckets. sqlite-backed with litestream replication. time-based retention policies, manual release or delete.
audit
propose-apply-revert cycle for rule changes. full diff history per rule. operator approvals, rollback on failure. immutable event log.
webhook relay
event-driven delivery for matched mail. configurable endpoints, retry with backoff, delivery receipts, secret signing.
imap proxy
transparent smtp/imap intercept. sits between mta and mailbox. inspects in transit, no client config changes required.
smtp→imap-proxy→rule-engine→bucket-store|webhook-relay
detcordon
60% completebeta
Unknown payloads are the most dangerous — you cannot safely detonate them on your workstation, but ignoring them leaves blind spots. DetCordon runs hostile web content and attachments in disposable, network-isolated sandboxes, recording every I/O — DOM mutations, network requests, filesystem writes — into structured indicators and evidence bundles without exposing your operator surface.
open prospect → forensics school → docs →componentsarchitecture →
sandbox
hardened browser or headless runtime in a disposable container. no network egress except to capture sinks. memory and filesystem snapshots.
recorder
captures all i/o: http requests, dom mutations, canvas reads, clipboard access, storage writes. structured event stream, not just video.
analyzer
static and dynamic analysis. payload deobfuscation, call graph extraction, data-flow tracking. ioc and signature generation.
feeder
url or attachment ingestion queue. pulls from rss feeds, mailroute buckets, api submissions. dedup and priority scheduling.
feeder→sandbox→recorder→analyzer
esp32tolk
building
esp32 speech-translator firmware — i2s mic or bluetooth capture, on-device transcription, live translation.
components
capture
i2s digital microphone input or bluetooth a2dp source. 16khz/16bit mono pipeline, configurable gain and noise gate. ringbuffer with dma.
stt engine
on-device speech-to-text via esp-sr or whisper.cpp (q4 quantized). streaming inference, voice-activity detection, keyword spotting.
translate
local nllb or tiny-llm translation model. phrase cache for low-latency repeat translations. configurable source/target language pair.
output
serial/uart text out, i2s tts playback, or ble gatt characteristic. lcd display for standalone mode. wifi or bt transport.
mic→capture→stt-engine→translate→output
ShipWrecks
building
interactive swedish shipwreck explorer — charted wrecks, dive records, and documented provenance over the swedish coast.
componentsarchitecture →
map
leaflet-based interactive map of the swedish coast. clustered wreck markers with depth contours, exclusion zones, and maritime navigation layers.
archive
curated registry with per-wreck provenance. coordinates, depth, cargo, sinking date, discovery story. photos, sonar scans, and diver reports.
backend
node/express api server with postgresql. geo queries, full-text search, image serving. stripe subscription billing, user auth, admin interface for curators.
map↔backend↔archive
baz trade signal stack
47% completeactive embryo
Automated trading pipelines are opaque — strategies execute without audit, and a bug in the signal chain appears first as a loss. The BAZ Trade Signal Stack compiles each glither.hft strategy to a signed WASM component with Ed25519 monetary audit receipts, enriches tick data in a verifiable Rust pipeline (SMA/EMA/RSI/Bollinger), and surfaces every execution in a live browser notebook you can inspect.
glither component path → platform architecture → prospectus →componentsarchitecture →
baz.hft
glither.hft compiler dialect and no_std wasm host embryo. compiles trading strategies via baz-hft-roux. signed ed25519 monetary audit receipts, deterministic market-policy evaluation.
baz.palantir
rust/axum orchestration server. rule lifecycle management, sma/ema/rsi/bollinger enrichment via bounded ring buffers, websocket streaming, sqlite backlog, bearer auth.
baz.luna
vite 6 browser trading frontend. codemirror 6 glither.hft notebook editor, lightweight-charts candlestick + rsi view, signal markers, backlog viewer. ~2.7 kB initial js.
baz.cx
python fastapi exchange connector. 5 venue adapters, websocket stream of tick data and enriched candles to palantir. live execution gate open pending durable receipts.
baz.cx→baz.palantir→baz.hft→audit-receipts|baz.luna
RAGBAZ