Gates  /  DEGA  /  FlightGate

FlightGate

Research

Early work on refusing a commanded control action whose stated preconditions do not hold: outside the declared envelope, or contradicted by the sensor state the command cites to justify itself. Scoped, not built.

What it checks

  • Commanded action against the declared operating envelope
  • Agreement between a command and the sensor state cited to justify it
  • Authority limits on an automated rather than a crew-initiated command
  • Fail-closed on an unavailable check rather than defaulting to permit

What it does not check

  • It does not fly anything and does not stop an aircraft doing anything. It would govern whether a command is permitted to reach an actuator. The aerodynamics are not its business.
  • Research scope. Not certified, not airworthy, not for operational use, and not a safety-instrumented system.

Research scope

This gate is early work with a limited scope. It is not certified, not validated for operational use, and must not be placed in any live control or clinical path. It is listed because the work is real, not because it is ready.

Evidence

Every verdict leaves a record

PropertyBehaviour
DeterminismThe same input produces the same verdict. A result that does not reproduce is treated as a defect.
SigningVerdicts are Ed25519 signed and anchored in a tamper-evident chain.
ReplayA sealed pack can be re-run later to detect verification drift.
AvailabilityFail-closed. If this gate cannot be reached, the result is recorded as unavailable, never as a pass.
IndependenceA third party can verify a pack without our source code and without contacting us.

Run it against your own cases

The audit protocol is public. You do not need our permission, our source or our involvement to test a gate and publish what you find.

Next · See it work Eco Control Tower