CAPABILITY 01
Privacy-first by construction
Raw data stays with its originating organization. Signal contributions are anonymized, scoped, and minimized before they ever cross the boundary into the simulation fabric.
OPS · 24/7SIG-ANCHOR · ED25519EPOCH 0042
SIMSUMNEXUS.COMSIMSUMNEXUS.AI— · —
v0.4Signal simulation layer · now live for partners
Anonymized signals.Actionable outcomes.
Simulation intelligence for complex systems — without exposing the systems themselves.
SimSumNexus converts validated, signed, and time-bounded contributions into high-fidelity simulations that reveal downstream effects, dependencies, and ripple paths. Raw data never leaves its origin. PII never enters the model. The output is foresight.
capture activettl 14400spii withheldblake3:7a39·0d91·fd42
01◆Capture
Every signal arrives signed, anonymized, and bounded.
Contribution begins outside the platform. Edge devices and partner systems sign each event with ed25519, withhold raw payloads, and attach a time-bound lease before the signal crosses the boundary. We verify provenance before we ever simulate.
- 01Signed at the edgeEach frame, event, and credential is countersigned where it originates. We verify before we accept.ED25519
- 02Anonymized before mergeFace vectors discarded at edge, voiceprints committed-only, badges HMAC-truncated. The model never sees identities.VOPRF · BBS+
- 03Time-bounded contributionEvery signal carries a TTL and revocation window. Operators retain the right to retract.TTL 14400
- 04Provenance you can auditSigstore-style receipts, append-only commitment graph, replay nonces, and constant-time verification.REKOR
Inbound attestations · last 6m
accepted · 312challenged · 3window · 0042 ↔ 0048
Key ceremony · this epoch
- 01root-of-trustfips-hsm-04 · ed25519anchored
- 02session-derivationhkdf-sha512 · x25519derived
- 03threshold-sharefrost · 2-of-3quorum
- 04blind-tokenvoprf-p384issued
- 05time-lockvdf-wesolowski · epoch 0042sealed
- 06privacy-budgetrényi-dp · ε 0.72spending
Privacy budget · ε0.72 / 1.00
window · 14400sresets 02:14:03Z
boundary · enforcedquorum · 2/3ε · 0.72root · merkle:0d91·7a39 · blake3
Throughput · last 60s
accepted · 312/schallenged · 3window · 60s
Recent denials · live
- payload-agepartner.api.22P14
- replay-noncebadge.node.31P22
- pii-flagedge.optical.07P01
02◆Voice & sensors
A waveform without a voice.
Audio enters the platform as a commitment, not a recording. SimSumNexus buckets amplitude, withholds language, and discards speaker identity at the device. What survives the boundary is just enough signal to inform the model — and nothing a transcript would expose.
Amplitude
Bucketed · 0.42
Raw audio never ingested. Loudness is rounded to a coarse band before contribution.
Identity
Withheld · anonymous
Speaker identification, language, and any biometric vector are discarded before signal contribution.
03◆Architecture
The boundary is the architecture.
Four stages, four contracts. Raw data stays at origin. Signals are signed and anonymized at the gateway. The simulation fabric operates on bounded contributions only. Output is summary, never source.
Read the full architecture brief
01
Origin
Raw data stays
Customer systems, edge devices, and partner feeds never surrender raw payloads. They contribute signed, bounded events instead.
02
Gateway
Anonymization layer
ed25519 verification, PII suppression, format-preserving tokenization, and TTL enforcement happen before anything reaches the model.
03
Fabric
Simulation engine
Cross-org signals are merged inside a sealed enclave. Ripple-v4 propagates counterfactuals across the dependency graph.
04
Outcome
Summary, not source
Operators receive scenario deltas, confidence scores, and recommended actions. The underlying records remain on the far side of the boundary.
04◆Platform
Purpose-built for private, cross-system foresight.
Six contracts SimSumNexus enforces on every signal — and that operators can audit at any time. We treat privacy, retention, provenance, and output fidelity as a single system rather than four separate features.
CAPABILITY 02
Finite and mutable data
Time-bounded contributions can expire, refresh, or be withdrawn. The platform reduces persistent liability while preserving model utility.
CAPABILITY 03
Credentialed inputs
Every contribution carries provenance, validation, and confidence. Bad signals are caught at the boundary, not in the model.
CAPABILITY 04
Simulation plus summary
Scenario models surface ripple effects across the dependency graph and translate them into concise, operator-grade summaries — not source records.
CAPABILITY 05
Federated participation
Partners can contribute without centralizing data. Pairwise pseudonyms and selective disclosure preserve cross-org foresight.
CAPABILITY 06
Operator-grade output
Executive summaries, scenario deltas, recommended actions — written for decision velocity.
CAPABILITY 07
Audit-by-default provenance
Sigstore-style transparency receipts, append-only commitment graphs, and replay-resistant verification. Every signal answers the question: where did this come from?
05◆Theaters
Operational intelligence where the second-order effects matter.
The first wave focuses on complex systems that need shared foresight without shared raw data — supply chains, logistics networks, operational risk, and the resilience plans that depend on both.
Theater 01 · Supply ChainLive model · 14 partners
Material constraints, before they bite.
Model supplier disruption, substitution paths, and downstream availability — using bounded partner signals that never leave their origin systems. SimSumNexus surfaces the route to recovery, not the records that mapped it.
Read full theaterHorizon72h
Confidence0.82
Partners14
Privacy ε0.72
PII visible—
Update freq5m
Theater 02 · LogisticsLive
Cascading delay, contained.
Route congestion, capacity shifts, and cascading delays across carriers, ports, and fulfillment.
Routes18,400
Lanes312
Δ Conf.+11%
Theater 03 · RiskLive
Exposure, without exposure.
Exposure paths and second-order effects without centralizing operational or customer records.
Paths1,184
Critical9
PII—
Theater 04 · ResilienceLive
Stress-test before you need to.
Stress-test contingency plans and find the signal changes that would alter timing or recommended action.
Scenarios208
Triggers27
Recovery+31%
06◆Outcomes
The output is a decision, not a dataset.
SimSumNexus produces operator-grade summaries that compress thousands of signal contributions into the few sentences a decision-maker actually needs. Below: a real-shaped briefing from the supply-chain theater.
Move inventory before threshold breach.
Risk window
18h
Recovery lift
+31%
Confidence
0.82
Ripple propagation72h · ripple-v4
Dependency cascade · 14 downstream events
origindownstreamcriticalrecovery
Scenario deltas
Counterfactual variance
Supply path B absorbs 62% of delayed volume
+62%Partner signals remain anonymous across boundary
verifiedSummary generated from scenario deltas only
scopedSource records exposed to operators
007◆Deployment
Where it runs.
SimSumNexus is built to operate in the same environments the signals come from. Four reference patterns — pick the one that matches the boundary you already enforce.
Pattern 01 · Edge
Edge
Devices sign and bound contributions before anything reaches the gateway. Best for cameras, sensors, badges.
Pattern 02 · Air-gapped
Air-gapped
Gateway and fabric run inside the customer perimeter with no outbound network. Briefings transit via signed export only.
Pattern 03 · Sealed enclave
Sealed enclave
Trusted execution with attested keys. Fabric runs inside the enclave; partner signals merge without leaving it.
Pattern 04 · Federated
Federated
Multiple organizations contribute pairwise-pseudonymous signals to a shared fabric. No party sees another's raw data.
08◆Trust
Boundaries are the product.
SimSumNexus is architected around contribution without exposure. Privacy, retention, provenance, and output fidelity are treated as one system — and the contract is enforced before the model sees a single signal.
- 01NO-INGESTRaw data stays with the originating organization.We never ingest source records. Contributions are bounded events, not extracts.
- 02GATEWAYSignals are anonymized, validated, and scoped before simulation.PII suppression, format-preserving tokens, and signature verification happen at the gateway.
- 03TTL · REVOKEContribution windows can expire, update, or be revoked.Every signal carries a TTL and a retraction path. Operators retain control.
- 04SEALED · EXPORTOutputs are summaries, implications, and scenario confidence — never source records.Briefings are sealed exports. They contain the decision, not the dataset.
01Origin systemsno-ingest
Raw data stays with the originating organization.
02Signal gatewayed25519 · pii withheld
Signatures verified, identifiers suppressed, TTLs enforced before merge.
03Simulation fabricripple-v4 · enclave
Cross-org signals merge inside the enclave. Counterfactuals propagate along the dependency graph.
04Decision outputsealed export
Operator-grade summary. Source records remain on the far side of the boundary.
Time-bounded contribution design lets organizations participate in shared foresight without creating permanent data exposure.
09◆Briefings
Request a controlled briefing.
We work with a small number of operators per quarter. Briefings are scoped to your environment, your boundary, and the theaters that matter to you. We'll show you the platform end-to-end in a single session — under NDA, off the record.
“Anonymized signals. Actionable outcomes.” — and a 60-minute walkthrough of how we make that real.
⬢ signed channel · ed25519:4e9a·bc12