Sovereign domain superiority
Anomaly detection + track fusion — with a signed receipt for every verdict.
SZL SDA turns raw multi-sensor tracks into a governed Common Operating Picture: it scores anomalies, fuses tracks across sensors, attaches an honest confidence interval and a Λ-gated advisory verdict, and emits a cryptographic provenance receipt — so each threat call is checkable, not just plausible.
SZL's clean-room sovereign Domain-Superiority engine — khipu-sda-core — inspired by True Anomaly's Mosaic capability (not affiliated).
The capability — plainly
Spot what doesn't belong, fuse the picture, and prove the call.
SDA watches many sensor streams at once, flags tracks that behave abnormally, merges duplicate sightings into single confirmed objects, and never asserts a threat without a confidence band and a receipt. Today it runs at the air / maritime / counter-UAS edge; the orbital extension is a labelled roadmap, not a live claim.
01 · Detect
Multivariate + graph anomaly
An ensemble (isolation forest + autoencoder + robust z-score) scores each track on stationary behavioural features — speed, RCS, acceleration, heading-rate. A separate graph-relational channel (GDN-style) flags tracks that deviate from their velocity-space neighbours — explainable, not a black box.
AIR / MARITIME LIVE02 · Fuse
Multi-sensor track fusion → COP
Nearest-neighbour association plus a compact Kalman filter merge noisy, duplicate sensor reports into one Common Operating Picture: each real object becomes a single fused track with a clean state estimate, even when two sensors disagree.
AIR / MARITIME LIVE03 · Orbital seed
SGP4 conjunction (roadmap)
A real python-sgp4 TLE-propagation + conjunction-flag stub seeds future orbital SDA. It is shipped clearly labelled as a space roadmap — today's live surface is air / maritime / counter-UAS; SZL does not claim to fly in orbit.
SPACE ROADMAP04 · Gate
Λ-gated advisory confidence
Every verdict carries a split-conformal interval plus a PAC-Bayes bound — both labelled ESTIMATE. The Λ axis (Conjecture 1) returns allow / advisory / deny as an advisory only — never "proven trust", never a false green.
AIR / MARITIME LIVE05 · Prove
Signed provenance receipt
Each detection emits an in-toto Statement v1 receipt — method, input hash, anomaly score, fused track id, Λ verdict, confidence band. It is honestly UNSIGNED until a real DSSE signs it downstream; no signature is ever fabricated.
SCHEMA LIVE06 · Deploy
Sovereign + air-gap
Pure own-metal compute with 0 runtime CDN. Packaged as the szl-sda cosign-signed UDS / Zarf bundle for classified or air-gapped systems — sovereign by construction, not by promise.
BUNDLE STAGEDAttribution (clean-room — cite, never plagiarize): SZL SDA is inspired by True Anomaly's Mosaic capability (sensor-fusion Common Operating Picture, OODA acceleration, ML threat-warning) — described publicly by Eric Hilmer / True Anomaly. SZL is not affiliated with True Anomaly and no proprietary code was seen or copied; the capability was re-built from public descriptions only. Methods were independently re-implemented from a verified-permissive lineage: PyOD (BSD-2), PyGOD (BSD-2), Merlion (BSD-3), TODS (Apache-2.0), tsod (MIT), GDN (MIT), GraGOD (MIT), python-sgp4 (MIT). alibi-detect is excluded (Seldon BSL-1.1) and CI-enforced absent.
The picture, drawn honestly
A live Common Operating Picture.
Fused tracks as blips, an anomaly overlay coloured by score, a per-track score panel, and how multiple noisy sensor reports converge into one confirmed track. This is a labelled demonstration driven by SDA's real scoring logic on illustrative tracks — it reads the live killinchu /mosaic endpoints when reachable, and says so when it is not.
Common Operating Picture — anomaly overlay
DEMO DATAAnomaly score · Λ verdict
DEMOScore ∈ [0,1] from the multivariate + graph ensemble. The Λ verdict (allow / advisory / deny) is advisory only — Λ is Conjecture 1, never a proof of trust.
/api/killinchu/v1/mosaic/* endpoints are reachable, this panel reads them and re-labels itself LIVE; until then it stays honestly labelled demo.
Benign tracks (cyan) drift normally; an anomaly (violet, ringed) trips the ensemble and graph channels; two noisy sensor reports for one object are associated and Kalman-fused into a single COP track (teal).
The moat
Every detection is provable — a verified verdict receipt.
A threat call you can't check is an opinion with extra steps. SDA emits a provenance receipt for every verdict — method, input hash, anomaly score, fused track id, Λ verdict, conformal interval, walltime, verified flag — anchored to the same Khipu / DSSE receipt fabric the rest of the estate uses. Below are the honest receipt fields (example shape — not a live verdict).
Verified verdict receipt — fields
EXAMPLE SHAPE — NOT A LIVE VERDICTanomaly_score and the confidence band are ESTIMATES, never a proof of threat. walltime_ms is measured. The Λ verdict is advisory (Λ = Conjecture 1) — never "proven trust", never a false green. The receipt ships honestly UNSIGNED / verified:false until a real DSSE signature is applied downstream by the szl_lake / khipu path (Khipu BFT settlement is Conjecture 2); no signature is ever fabricated. You can check a real receipt against the live fabric below.
Honest baseline metrics — synthetic data
SYNTHETIC-DATA BASELINE| Channel | Precision | Recall | F1 |
|---|---|---|---|
| Point ensemble iForest + AE + robust-z | 0.44 | 0.74 | 0.55 |
| Graph-relational GDN-style velocity dev. | 1.00 | 0.35 | 0.52 |
| Fused consensus 0.5·point + 0.5·graph | 0.40 | 0.70 | 0.51 |
These are honest synthetic-data baselines, not operational accuracy. The point ensemble carries recall; the graph channel is high-precision / low-recall and correctly misses the RCS spike (no kinematic signature) — the right behaviour, not a bug. Numbers improve with real training data; they will be re-measured on the live GPU fabric and re-issued with a real signed DSSE receipt — never inflated.
Track fusion: 6 fused COP tracks recovered from 6 true objects across 2 noisy sensors. Source: khipu-sda-core validation harness (synthetic).
Where it fits
A governed domain-awareness layer for the sovereign estate.
SDA is a capability, not a silo. It is already wired into the estate.
Powers killinchu
Feeds the killinchu Track Board, Threat-DB and the new Mosaic / Domain-Superiority COP view via /api/killinchu/v1/mosaic/* (PR #118) — anomaly overlay on every fused track. killinchu effectors remain simulated.
Governed by a11oy
Every verdict is policy-evaluated in a11oy's Governed Anomalies tab via /api/a11oy/v1/mosaic/governed (PR #356): 13-axis Λ advisory, DSSE-shaped receipts, Khipu BFT 3-of-4 quorum (Conjecture 2), and a human-approval gate. receipts.in ≡ receipts.out.
Air-gap deployable
Ships as the szl-sda UDS / Zarf bundle (cosign-signed, OSCAL, Section-889 denylist, λ-gate policy) for classified or air-gapped install. Image digest stays blank until founder-signed — never fabricated. Canonical version uds-v0.4.0.
Sovereign GPU fabric this runs on
SNAPSHOTLive read of a11oy.net /v1/compute-pool. sovereign GPU = own-metal only: nodes you actually own are flagged sovereign; hosted APIs are labelled hosted fallback — not compute you own and never counted as sovereign. If the live read fails, this panel falls back to a captured SNAPSHOT and says so — it never invents a live status. The MEASURED SDA validation will be re-run here on the real GPU fabric and re-issued with a signed DSSE receipt.