Docs, Tools & Community

SBOM Generator

CycloneDX 1.5 SBOM generation from Python packages. Dependency tree resolution, component hashing, and signature verification. MIT-licensed.

CVE Matching Engine

Daily CISA KEV catalog matching against your SBOM components. Alerting on actively exploited vulnerabilities with severity scoring.

VEX Generator

Vulnerability Exploitability eXchange documents. Declare affected/not-affected status with justification. CSAF 2.0 format.

ENISA Notification

Auto-drafted ENISA notification templates for Article 14 reporting. 24-hour actively-exploited vulnerability disclosure workflow.

Provenance Audit

Cryptographic audit chain from component to SBOM. Immutable verification trail for regulatory submissions and customer assurance.

Behavioural Anomaly

Runtime behavioural anomaly detection. Baseline deviation alerts for IoT and embedded devices. Cross-Oracle request signing.

System Architecture

Oracle Council

Eight specialist Oracles — Sia, Pythia, Anansi, Nostradamus, Yhi, White Buffalo, Shi Gandang — convened by ICID, who routes every request to the right hand and synthesises a single answer.

Constitutional Governance

Six immutable rules bind every Oracle: Safety, Privacy, Fairness, Transparency, Accountability, Human Dignity. Hardcoded in the kernel — no Oracle or external instruction can override them.

OFP Kernel

The governed execution engine. Every action is routed through consent tiers — AUTO, NOTIFY, CONFIRM, DENY — so nothing executes without authorisation.

10-Gate Security

Injection detection, PII scanning, cross-Oracle signing, harmful-content filtering, behavioural anomaly detection — ten gates on every query, outbound scan on every response.

Local-First Vault

Your life data lives in an SQLite vault on your own hardware — HMAC-signed entries, cryptographic provenance, no cloud, no third party.

Telemetry & Autonomy

Self-healing sentinels watch every service, proactive pipelines deliver briefings and reminders, and scheduled runs keep Starcaller working while you sleep.

Morning Briefing

8 Oracles collaborate to produce a personalised daily briefing: weather, news, calendar, health, and security — synthesised by ICID in under 3 seconds.

Smart Home Security

Shi Gandang screens all IoT device communications. Physical action blacklist blocks dangerous commands at the kernel level regardless of which Oracle initiated them.

Research Synthesis

Sia cross-references sources against citation networks while Nostradamus identifies trend trajectories. Cited, bias-audited research briefs delivered autonomously.

Injection Attack Defence

A simulated prompt injection via an IoT temperature sensor was blocked by the input sanitisation layer before it reached any Oracle. Audit record produced in 120ms.

Memory Provenance Audit

Every vault entry carries an HMAC-SHA256 source tag. An audit trace confirmed a recalled preference originated from direct user conversation, not a compromised device.

Financial Advisory

Yhi oracle, enhanced with financial capability, analyses spending patterns against energy-physics models. Physics-grounded recommendations, not generic advice.