⌂ HOME

Aless · The Human Touch › The system

Safety and soundness

The system is sealed. Not the model — the system.

Totally airgapped. No wifi. No outside ethernet. A physical data diode: one way in, one way out. No code ever leaves.

No wifi No outside ethernet No code out
S1 FI RAW DATABASE · S2 DIODE IN · S3 DATA SCRUBBER — IN · S4 ENIGMA — ENCRYPT · S5 DATA_SERVER · S6a ENIGMA — DECRYPT · S6 THE SLM — 4× ASUS GX10 · S6b ENIGMA — ENCRYPT · S7 RESULT_SERVER · S8 ENIGMA — DECRYPT · S9 DATA SCRUBBER — OUT · S10 DIODE OUT · S11 FI RESULT DATABASE · S12 LOG SERVER · S13 DATA SYNTHESIZER EXTERNAL FINANCIAL INSTITUTION OUTSIDE THE SEAL THE AIRGAP — SEALED · NO WIFI · NO OUTSIDE ETHERNET S1 FI RAW DATABASE the institution's raw data any type · legacy · extracts ad hoc · daily · at set times S2 DIODE IN raw data in nothing goes back out no IP · no MAC S3 DATA SCRUBBER — IN every language, incl. legacy → readable Parquet S4 ENIGMA — ENCRYPT AES-256 only nothing at rest S5 DATA_SERVER encrypted history by FI and as-of date S6a ENIGMA — DECRYPT what the batch or the request needs S6 THE SLM — 4× ASUS GX10 Bambi · Thumper · FriendOwl · Prince timed batch runs · ad hoc requests S6b ENIGMA — ENCRYPT the results re-encrypted S7 RESULT_SERVER encrypted results historical S8 ENIGMA — DECRYPT on the way out S9 DATA SCRUBBER — OUT into the language the user wants numbers + text, never code S10 DIODE OUT results out nothing comes back in S11 FI RESULT DATABASE every result the user asked for numbers + text, never code S12 LOG SERVER every action, every hop append-only · hash-chained S13 DATA SYNTHESIZER synthesized testing data → the raw database S12 LOGS EVERY STAGE · S1 IN THROUGH ONE DIODE (S2), OUT THROUGH THE OTHER (S10) · NO WAY BACK IN
Phase I production · the single-site airgap system — proven first, end to end, on a two-server pre-production estate before it is sealed.

One business day

The same pipe, every day.

01

Raw data in — one way

The institution puts its data into its own FI RAW DATABASE — ad hoc, daily, at set times: trades, amendments, curves, prices, the official T+1 set from finance and product control, and its own structure. It crosses the inbound hardware data diode over a hard-wired cable. Nothing can travel back to the institution.

02

Scrub to one form

Faline’s data scrubber turns every language and format, even legacy, into readable Parquet — one consistent shape the system reads.

03

Encrypt and store

Enigma encrypts it (AES-256) and the data server keeps the encrypted history by institution and as-of date, to the agreed term — the system’s own set and the institution’s official one, kept for back-checking and regression.

04

Batch runs and requests

When a batch is triggered or a user asks, the data server sends what is needed to Enigma to decrypt, and Bambi and the team — Thumper, FriendOwl and Prince — do the work: the timed batch, so it is pre-run before anyone asks, and the ad hoc requests.

05

Results stored

Enigma re-encrypts every result into the result server, with its history. Pulling is instant.

06

Out in the user’s language — one way

On the way out Enigma decrypts, and the data scrubber translates the result into the language the user wants — tokens back to client names, the institution’s own formats. It crosses the outbound hardware data diode over a hard-wired cable into the institution’s result database, where it is kept immutable. Pure data: text and numbers, never code. Nothing can come back in.

07

Every step logged

The log server records every action and every crossing — from the FI RAW DATABASE, through both diodes and every server inside, to the push into the institution’s result database.

The log is append-only and stays inside. Reading it means standing at the rack.

Trust

What keeps it shut.

Nothing calls in

There is no connection from the outside world to the inside. Nothing can reach it, because there is nothing for anything to reach it through.

Two physical data diodes

Hardware data diodes, hard-wired — one direction in for raw data, so nothing goes back to the institution; one direction out for results, so no data and no code can come back into the airgap. They have no IP address and no MAC address; there is no wifi and no cloud on either side.

Stolen hardware is a brick

The keys live in hardware security modules, never as a file on a disk. Take the servers out of the building and you have encrypted noise — nothing decrypts, nothing runs. Specified; not yet purchased.

The log stays inside

The log server records everything, including both diodes’ watch copies. Reading it means standing in the room.

The Podiums →

← Aless AI home page