SOVEREIGN SECURITY · DEPLOYMENT

Compute centrally,
support decisions independently at the field edge.

CREAIM Defense targets a deployment model that connects central Command/C2 Runtime with on-device and Edge Runtime rather than relying on a public-cloud service. Mission Data remains inside designated security boundaries, and when communications are constrained the field node is designed to perform limited re-computation using the last synchronized state and Local Conditions.

ON-PREMISE TARGETCLOSED NETWORK TARGETTACTICAL EDGE TARGETHUMAN-IN-THE-LOOPNO DIRECT WEAPON CONTROL
ON-PREMISEDEPLOYMENT TARGET

Operate Runtime Core and Evidence Store on internal institutional servers/accelerators.

PRIVATE / CLOSED NETWORKTARGET ARCHITECTURE

Deploy C2, Data Adapter, and Runtime Node on an internal network without external internet.

ON-DEVICE / TACTICAL EDGEPoC TARGET

Deploy a reduced Runtime on field hardware for selective State re-evaluation.

CENTRAL COMMAND ↔ FIELD EDGE

Connect central control and field Runtime through one Mission State.

COMMAND / C2

Mission Objective · Common Operational State · Rule Set · Approval

CENTRAL MISSION RUNTIME

Normalize · Multi-COA · State/Branch · Constraint · Failure Elimination · Evidence

FIELD / EDGE RUNTIME

Last Sync State · Local Sensor Conditions · Local Constraint Gate · Selective Re-evaluation

SYNC
Synchronize authorized Mission State
COMPUTE
Central/field Runtime computation
DELTA
Transmit changed conditions only
RECONCILE
Reconcile Trace after link recovery
Design target: Central nodes preserve the full Mission Picture and common policy while field nodes re-evaluate time-sensitive conditions with Local Runtime. Final command and approval authority remains in the military command structure.
DEGRADED / DISCONNECTED MODE

When communications fail, the system does not pretend to know.

If a field node cannot receive the latest central state, it first checks data freshness and available Constraints. When required information is missing, the target behavior is to move to HOLD or NEED_MORE_DATA instead of generating GO from arbitrary defaults.

LINK DEGRADED
01CHECK LAST SYNC / DATA AGE
02LOAD AUTHORIZED LOCAL STATE
03APPLY LOCAL CONDITIONS
04RUN SUFFICIENCY + CONSTRAINT GATES
05LOCAL PASS / HOLD / STOP + TRACE
06RE-SYNC / RECONCILE WHEN LINK RETURNS
TARGET ARCHITECTURE · FIELD PERFORMANCE REQUIRES PoC
SECURITY MODEL

Security is a boundary across the entire Runtime, not a single feature.

DATA SOVEREIGNTY

Define storage, processing, and export boundaries for Mission data inside the deployment environment.

IDENTITY / ACCESS

Target architecture for linking user, role, permission, and approval boundaries with institutional identity systems.

RUNTIME ISOLATION

Separate input, Candidate, Run, and result by execution unit and preserve independent Trace.

AUDIT / REPLAY

Record Run ID, Input Hash, Core Version, Seed, and Replay Result.

NETWORK BOUNDARY

Exchange only authorized data between central and field nodes.

FAIL-SAFE BOUNDARY

When links or data are insufficient, use HOLD / NEED_MORE_DATA instead of automatic assumptions.

DATA FLOW BOUNDARY

The architecture does not assume all raw data must be sent outside.

Depending on institutional security policy, raw Sensor/C2 data can remain inside the Source System or On-premise Adapter boundary while only structured conditions required by Runtime are forwarded, or the entire Runtime can be deployed inside the same secure network.

NO PUBLIC CLOUD REQUIRED
Target deployment can run Runtime computation without external Public AI/API dependency.
MISSION DATA LOCAL
Target deployment keeps sensitive Mission Data inside the institutional or field boundary.
LLM OPTIONAL
LLM is separated as an input-structuring and explanation layer, not the Runtime decision engine.
HUMAN AUTHORITY
Commander Review remains the final authority boundary without direct weapon control.
MODEL / COMPUTE SEPARATION

LLMs do not make or authorize mission decisions.

LLM is an auxiliary layer for structuring natural language and documents into Fact/Context or explaining Runtime results. State, Branch, Constraint, Failure Elimination, Runtime Status, and Evidence Trace are handled by the Runtime Core.

NATURAL LANGUAGE / SENSOR DATA
↓ NORMALIZE / ADAPTER
STRUCTURED CONDITIONS
↓ RUNTIME CORE
STATE · BRANCH · CONSTRAINT · ELIMINATION
↓ RUNTIME STATUS / EVIDENCE TRACE
COMMANDER REVIEW
SECURITY / PERFORMANCE CLAIM BOUNDARY
CURRENT SOFTWARE FOUNDATION

Distributed Edge Runtime, Tactical Network state, adversarial input quarantine, Hardware Trust/Authorization, Mission Safety Kernel, and re-synchronization logic have been verified in synthetic environments.

PoC / CERTIFICATION REQUIRED

Military security accreditation, real closed-network integration, crypto modules, military Edge hardware, EW/communications-loss conditions, and 1–2 second end-to-end latency remain targets until measured and certified.