System Architecture Deep Dive

Each layer is independently deployable, independently testable, and independently replaceable. Defense-in-depth from silicon to strategy.

JSON-RPC 2.0 Message Flow

{
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "name": "detect_objects",
    "arguments": {
      "image_source": "rtsp://192.168.1.100/stream1",
      "model": "yolov8n-defoneos-v3",
      "confidence": 0.75,
      "sigil_sign": true
    }
  },
  "id": "req-7f3a2b"
}

// Response (truncated)
{
  "jsonrpc": "2.0",
  "result": {
    "detections": [
      {"class": "vehicle", "confidence": 0.94, "bbox": [120, 340, 280, 510]},
      {"class": "person", "confidence": 0.87, "bbox": [450, 200, 520, 380]}
    ],
    "sigil": "S|detect|yolov8-v3|ed25519:8a4cc85da8dbba21...",
    "processing_ms": 132,
    "model_version": "yolov8n-defoneos-v3",
    "sigil_chain_seq": 14782
  },
  "id": "req-7f3a2b"
}

Federation Discovery

3-Layer OrgKernel Audit Pattern

SIGIL Line Format

S|<source_agent>|<action>|<payload>|ed25519:<signature>

# Example
S|yolov8-v3|detect_objects|{"detections":2,"confidence_avg":0.905}|ed25519:8a4cc85da8dbba21...
S|bft-council|charter_amendment|{"article":"Art-7","vote":28_for_3_against}|ed25519:cef92dd24cfb85b5...
S|mava-swarm|tasking_order|{"swarm_id":"alpha-7","waypoints":[...]}|ed25519:5f6210fb5c633db8...

Chain Integrity Verification

# Verify entire chain (runs in O(n))
def verify_chain(events: list[SIGIL]) -> bool:
    prev_hash = "0" * 64  # genesis
    for event in events:
        computed = sha256(prev_hash + event.payload).hexdigest()
        if computed != event.prev_hash:
            return False  # TAMPER DETECTED
        if not ed25519_verify(event.signature, event.payload, event.pubkey):
            return False  # FORGERY DETECTED
        prev_hash = computed
    return True  # Chain intact

Council Composition

The 33-agent council is the sovereign governance authority. No single agent (including the King) can issue a DEFONEOS-SEAL credential, approve a charter amendment, or authorize a kinetic-adjacent action without quorum.

Voting Protocol

PROPOSAL PHASE:
  1. Any agent submits proposal to council
  2. Proposal hashed + signed → SIGIL chain
  3. 30-second deliberation window opens

VOTING PHASE:
  4. Each of 33 agents casts vote: FOR / AGAINST / ABSTAIN
  5. Each vote is Ed25519-signed → SIGIL chain
  6. Vote window: 5 minutes (configurable)

RESOLUTION:
  7. If FOR ≥ quorum threshold → APPROVED
  8. Resolution signed by all voting agents → DEFONEOS-SEAL
  9. Result broadcast to all MCP servers + edge nodes

RED LINES (auto-reject, no vote needed):
  - Kinetic targeting patterns
  - Personal surveillance patterns
  - Cross-compartment data leakage (meok-defoneos ↔ csoai-defoneos ↔ dagon)

From Camera to COP in 132ms

Swarm Tasking Flow

BFT COUNCIL APPROVES MISSION
       ↓
Mava RL Policy selects waypoint assignments
       ↓
PX4 SITL validates flight paths (collision check)
       ↓
FreeTAKServer issues CoT tasking orders
       ↓
Swarm executes (simulated or real PX4)
       ↓
Telemetry streams back via MQTT → fusion-mcp
       ↓
SIGIL chain records every waypoint + telemetry sample
       ↓
AAR (After Action Review) auto-generated

Edge Resource Requirements

3 Operating Modes

Air-Gap Deploy Procedure

# 1. Build on connected system
docker compose -f docker-compose.prod.yml build
docker save defoneos-mcps.tar $(docker compose config --images)

# 2. Transfer via approved media (USB/CD with virus scan)
sha256sum defoneos-mcps.tar > checksums.txt

# 3. On air-gapped system
sha256sum -c checksums.txt  # Verify integrity
docker load < defoneos-mcps.tar
docker compose -f docker-compose.airgap.yml up -d

# 4. Verify
python scripts/verify_airgap.py --check-sigil --check-mcps --check-bft
# Expected: 30 MCPs healthy, SIGIL chain intact, BFT-33 quorum reachable