Platform
SIX LAYERS.ONE VERDICT.
Every sample receives a single attested decision — PASS, QUARANTINE, or REJECT — before training ever sees it. A tier-aware, first-match-wins policy decides which layers weigh in.
Verdict contract
One attested decision per sample. Three outcomes.
first match wins · tier-aware
trusted · standard · untrusted · probation
routed inline to training
held for review
dropped with reason
The six layers
Six specialists. One composable verdict.
Provenance
Cryptographic attestationEvery sample is fingerprinted and attributed at the ingestion boundary. A tier-aware, first-match rule policy decides PASS, QUARANTINE, or REJECT before anything downstream runs.
- Signals
- source identitycontent fingerprintsubmission ratedrift signallabel agreementrevocation
- Catches
- Provenance spoofSybil identityIngestion floodingLabel conflictTrust grooming
Statistical
Distribution defensePopulation-level evidence — drift, per-class density, outlier clusters — feeds the same verdict shape. Catches shifts that are invisible at the sample level.
- Signals
- rolling distributionper-class densitydrift magnitudeoutlier score
- Catches
- Slow-drip poisoningCovariate shiftDistribution contamination
Adversarial
Perturbation defenseRobustness probes run only against samples the earlier layers flag as uncertain. Composes into the verdict rather than duplicating work.
- Signals
- probe scoreperturbation sensitivitymanifold distance
- Catches
- Clean-label poisoningGradient matchingBackdoor triggers
Semantic
Meaning defenseCompares what a sample says against what its label claims. Disagreement escalates to QUARANTINE; strong cross-modal inconsistency can REJECT.
- Signals
- content–label congruencecross-modal agreementinstruction-leak
- Catches
- Label corruptionMis-mapped categoriesPrompt injection via data
Consensus
Cross-source defensePeer-source disagreement weighed against trust tier — trusted, standard, untrusted, probation. Cohort evidence can override a lone PASS upstream.
- Signals
- cohort agreementsource-vs-peer deltareputation shift
- Catches
- Coordinated SybilTrust groomingMinority-source manipulation
Forensic
Audit & replayEvery verdict is signed with a deterministic decision ID. The stack the others are attested to — investigable and replayable end-to-end.
- Signals
- upstream verdictssource-event historydeterministic IDs
- Catches
- Split-view manipulationPost-hoc tamperingRegulatory audit gaps
Guarantees
Every sample is attributed
No anonymous writes. Every record carries verified source identity, captured before any layer runs.
Every decision is explainable
Verdicts are the composition of named detector scores, each with recorded input and threshold. Replayable end-to-end.
Every record is tamper-proof
Immutable, cryptographically verifiable history. You can prove what was ingested, when, by whom, and what was decided.