Ten Rust reference stacks plus five enforce-before-commit governors — Makefile-verified source IP,
buyer-operated VPC. Revenue rescue, agent resilience, sovereign compliance, and FinOps governance.
make demo-gold + FG mesh script (reference walkthrough)
Nexus Context Sentry
make demo — 50 agents, 1 WAN fetch
API Failure Sentry
Circuit breaker — cache serves while upstream fails
HIBS Edge — 10 platforms
v0.1 reference implementations · each passes make verify-strict · screenshots from make demo output or live UI.
Revenue & GTM
Lead Rescue Engine
Missed-call SMS rescue for trades, garages, and marketing agencies. When nobody picks up, the system texts back instantly, logs the event, and shows a recovery funnel (missed → SMS → reply → booked).
Rust engine :8787 + Next.js 15 control plane :3000
Structural scrape→enrich pipeline that squashes raw HTML before LLM ingest — cuts token bloat without losing lead signals for outbound GTM teams.
DOM squash · batch CSV · JSON-LD · robots.txt lane
Offline demo: 685→422 bytes (38% reduction) on sample page
Port :8082 · embed library + CLI
make demo — offline ingest pipeline
Agent & API resilience
Nexus Context Sentry
Stops redundant WAN fetches when many agents pull the same ERP context. Lock-before-squeeze materializes a 64-byte Context Crystal so 49 of 50 agents read locally.
50-agent demo: 1 network fetch, 49 egress drops
W3C trace/baggage · sidecar HTTP · egress watch
Port :8190
50-agent race — duplicate WAN loop blocked
Agent & API resilience
API Failure Sentry
Embeddable 3-strike circuit breaker with sub-µs fallback cache. When upstream APIs fail, your app keeps responding from LRU cache instead of hanging.
Demo: 998/1000 calls served from cache after trip
Redis optional · Prometheus · reqwest adapter
Port :9092 metrics
Circuit open — cache serves while upstream is down
Agent & API resilience
Agent Boundary Control Plane (ABCP)
Pre-dispatch spend gate for agent tool calls. Reserve budget, detect recursive loops, and freeze the thread before irreversible OpenAI/Anthropic dispatch.
Demo freezes at call 6 on recursive loop
Postgres audit ledger · JSONL export · SDK hooks
Port :8083
Runaway agent frozen before overspend
Sovereign & trust
Sovereign Compliance Bridge
Local AML/PEP screening before wire data leaves your perimeter. Blake3-masked SQLite, Allow/Review/Block decisions, dual OFAC + EU FSF ingest — zero live API calls at runtime.
1000 txs screened in demo · sub-ms gate
ISO20022 / travel-rule export CLIs
Port :8081
Local sanctions gate — no third-party API
Sovereign & trust
ZK Telemetry Control Plane
Satellite-grade IIoT proofs under 340B MTU. mmap WAL, SIMD batching, 269-byte Ed25519 proofs anchored per epoch with gRPC/MQTT/CAN ingest lanes.
40 proofs anchored in demo run · WAL tip 10k frames
Heterogeneous compute routing across CPU, GPU, TPU, and ASIC lanes. NVML default probe for PCIe bus, NUMA, and live util — sim accelerators on CPU-only hosts.
10k blocks routed in ~176ms (demo)
PinnedPool scheduler · backend override env
Port :8085
Silicon discovery + routing distribution
Sovereign & trust
APEP Secure Plane
Multi-vault analytics without pooling PII. Query shred → TEE simulation → MPC mesh; consortium insights computed while raw data never leaves vaults.
1000 queries · 4000 audit events in demo
DCAP/SEV quote parse · Intel PCS collateral stub
Port :8086
Consortium sum without raw data pooling
Sovereign & trust
Ghost Log Secure Chain
Tamper-evident logging for ransomware-first threat models. Blake3 hash chain, fsync witnesses, and automatic lockdown (isolate host, revoke IAM, alert SOC) on chain break.
Reserve LLM spend before provider dispatch. Gateway + policy sidecar + leader-elected reconciler on Postgres ledger — OpenAI-compatible /v1/chat/completions drop-in.
make demo-gold — 12-step sales walkthrough
Reserve → dispatch → settle · hash-chained audit
Governed dispatch — reserve before commit
Treasury
FinanceGovernor (FG)
Treasury wire and algo controls. WireMatch holds wires on beneficiary mismatch; AlgoFreeze on version skew; subledger sync and credit govern facets on shared spine.
make wirematch-demo — £900M anomaly HELD
Helm enterprise · examiner evidence packs
Beneficiary mismatch → policy HELD / 409
Insurance
InsuranceGovernor (IG)
Claims and MGA workflows with ClaimGate — reserve claim liability before irreversible payout. Partition shadow ledger for dual-write audit rows (not consensus).
Zero-trust egress wedge — policy before WAN exit. SPIFFE identity, posture reconcile, content guard; Envoy ext_authz adapter (buyer wires service mesh).
make cg-egress-wedge-demo
Egress lock offline verify · perimeter harness
Egress policy wedge — mesh HTTP 409
Sports / betting
BettingGovernor (BG)
Sportsbook and exchange composition — stake reserve before bet accept on shared governor spine. Mesh delegation and pilot attestation for regulated betting rails.
make bg-demo-gold · make bg-spine-test
Enforce-before-commit on placement rail
Composition demo — reserve before accept
Honest scope: Pre-revenue source IP · v0.1 reference stacks · not SOC 2 Type II certified · not hosted multi-tenant SaaS.
Terminal captures are from make demo on reference builds. Buyer operates Postgres, Redis, K8s, Twilio, and VPS.
Full Lead Rescue stack needs 2 vCPU / 4 GB; this site is static HTML only.
Confidential source review
Monorepo + Governor platform available under NDA · buyer-proof pack on request.