AEGIS‑EDGE

Drones outpace humans. Two units can’t share a picture across a jammed link. And “AI that fires” can’t be accredited.

• The pain point nobody solves — linking two units under fire. A beachhead and a convoy each see part of the sky, but fusing their pictures across a contested, jammed tactical link is where cooperative defense breaks down. Today that hand-off is manual, slow, and dies when comms degrade.
• We fix the link. Two units fuse into one air picture over Link-16; one unit engages what the other sees; and when the link is jammed the system degrades gracefully — each unit self-protects, then re-fuses the instant comms return.
• Deterministic gate decides in <1 ms, a human authorizes every kill (two-person, positive-ID, fratricide), and the LLM stays OFF the kill chain — it explains, it never fires.
• We don’t compete on a better detector. We compete on a governable, jam-resilient, cooperative architecture — the linking layer between units.

• 1 · Detect → classify → human‑gated defeat — grey UNKNOWN flies in, sensor acquires, classified HOSTILE, you approve the kill.
• 2 · Cooperative engagement — Beachhead + Tank Column fuse over Link‑16; ROE picks the cheapest in‑range effector; shoot‑and‑shout.
• 3 · Swarm saturation — past ~6 threats, per‑target gating is impossible → pre‑authorized AUTO‑DEFENSE at machine speed.
• 4 · DDIL — jam it — radars go blind, the threats drop to TRACK LOST, we can't see or shoot — but the edge keeps governing (no cloud).
• 5 · Recover — the money shot — the instant sensing returns, the system reacquires the threats it couldn't touch and defeats them. Degrade gracefully, stay in the fight.

Drones inbound. A human authorizes every shot.

• Contacts ingress from the edge — grey UNKNOWN → sensors acquire → classified HOSTILE.
• Mode = Manual: the gate names the cheapest in-range effector but pauses on a two-person human gate — nothing fires yet.
• The operator reads the plain-English threat call, approves, and the threat is defeated — every step written to the audit ledger.
• Maximum control, deliberate tempo. Nothing engages without a human.

Too many, too fast — machine-speed defense inside a bounded envelope.

• A swarm saturates the airspace. Past ~6 simultaneous threats, per-target human gating is physically impossible.
• The operator pre-authorizes a bounded AUTO-DEFENSE envelope — two-person to arm, ABORT always live.
• The deterministic gate engages at machine speed (~0.58 µs/decision); every action is still hash-chained into the ledger.
• Machine tempo, human-bounded — and the LLM still never touches the trigger.

What happens when we get jammed?

• Enemy EW blackout: the radars go blind, threats drop to ⚠ TRACK LOST — we can't see or shoot.
• COMMS DENIED → EDGE-AUTONOMOUS: the gate keeps governing locally — no cloud, no link.
• The instant sensing returns, the system reacquires and defeats the threats it couldn't touch.
• Cross-unit pictures degrade gracefully → self-protect → re-fuse. Jamming delays us; it doesn't beat us.

Bedrock turns the collected data into a plain-English report.

Data the military already has.

• RF detection → DroneRF — real small-UAS RF signatures (drone vs background).
• Thermal / EO-IR → HIT-UAV — real high-altitude infrared UAV imagery.
• Cooperative discrimination (friend-or-foe) → ADS-B / adsb.lol + OpenSky state vectors — real friendly aircraft, held cooperative → the <0.1% false-positive guarantee.
• Cross-unit linking → MITRE Cursor-on-Target — the DoD standard for sharing tracks between units (our Link-16 fusion layer).
• Real threat data → Ukraine UAV-strike dataset — real launched / shot-down drones ground the threat side.

Edge decides. Cloud explains & remembers.

• SAPIENT / BSI Flex 335 — the open C‑UAS interoperability standard. Partners plug sensors & effectors straight in.
• Pure, I/O‑free deterministic core → the renderer only draws what the core decides. Clean, testable seams.

An enterprise‑grade platform, not a one‑off.

A deterministic, auditable kill chain is accreditable.

• Tamper‑evident — hash‑chained Ed25519 signed ledger → S3 Object‑Lock WORM (immutable).
• Separation of duties — two‑person authorization · positive‑ID · fratricide / blue‑on‑blue check.
• GovCloud IL5, KMS encryption, IAM least‑privilege · LLM off the kill chain by design.
• Feasibility superpower: a black box that decides to fire is nearly impossible to accredit — a deterministic gate you can audit line‑by‑line is fieldable.
• Scales & cost‑bounded: gate is <1 ms; the LLM is async and throttled to narrate a sample — so cost doesn’t grow with threat volume.

From this PoC to a fielded system

The money is in sensors & effectors — we're the cheap keystone.

• Per-site capex — Light (mobile) ~$150–450k · Standard (fixed) ~$0.5–1.5M · Heavy (base) ~$1.5–5M+. Radar / RF / EO-IR + effector dominate; our software is single-digit % of that.
• Cloud is tiny and FLAT — Bedrock is off the hot path & throttled (~$15–75/mo/site) and doesn't grow with drone count; the deterministic gate is near-free (0.58 µs/decision, measured). Cloud ≈ 1–5% of TCO.
• Deploy into what exists — AWS Modular Data Center (ruggedized, DDIL-built) under the $9B JWCC vehicle. No infrastructure to build.
• Capital-light — we sell software + integration per site; the customer/partner owns the hardware. At 100 sites our layer is low single-digit % of TCO.

One system, two views.