Platform / DEGA
DEGAIs this physical action allowed to happen?
Sits between a decision and anything that moves hardware, machinery or infrastructure, and asks whether the action is permitted. If that check cannot complete, the action does not happen.
Deterministic Execution Gate Architecture · AU provisional 2026905506
Verification / A declared check
Explore what the method can establish.
Follow a supported route, an independent check and the record it leaves.
Select an illustrated object to inspect its role.
01 / 03
Choose an applicable method.
The declared workload and grammar determine which specialist route is supported. Unsupported work goes to review.
Supported families onlyRouting is bounded by the methods present in the intended implementation.
What it returns
Categorical, not probabilistic. Where a lane cannot decide, it says so explicitly rather than returning a low-confidence answer that reads like a decision.
What it does
- Interposes a permission decision before execution, not after it.
- Fails closed. An unavailable check is recorded as unavailable, never as a pass.
- Records the permission decision and its basis before the action runs.
- Supports a human authorisation step where automation is inappropriate.
What it does not do
- It is not a safety-instrumented system and does not replace one.
- It does not certify that an action is physically safe.
- It governs permission, not the engineering of the system it protects.
The questions this layer gets asked in procurement
| Concern | Why it decides the deployment |
|---|---|
| Fail-closed behaviour | The single most important property. Verified explicitly. |
| Authorisation model | Who may override, and what record that leaves. |
| Latency budget | A permission boundary in a control path has a hard ceiling. |
| Blast radius | What happens to in-flight actions when the boundary is unavailable. |
What runs inside DEGA
Each of these is a real implementation with code behind it. Status is labelled honestly, and nothing is listed as coming soon.
ExecutionGate
Open sourceFail-closed permission boundary for downstream use. The reference implementation of the DEGA layer.
OrbitGate
Open sourceDeterministic checks for orbital and satellite claims, with every verdict signed. Sweeping all 14,560 single-bit modifications of a signed certificate, 0 verified afterwards.
FlightGate
ResearchEarly work on refusing a commanded control action whose stated preconditions do not hold: outside the declared envelope, or contradicted by the sensor state the command cites to justify itself. Scoped, not built.
See it against your own workflow
A pilot runs in shadow mode. It controls no production decision, and the acceptance criteria are agreed before it starts.