Skip to content

drone-drone

Agents author. Simulations execute. Humans direct.

control

control plane

orchestration

orchestration plane

execution

execution plane

data

data planea3f01b2c9d5e44b72c81

Thesis

Agents draft missions. Simulations execute them. Humans direct the loop.

Every failure is a fixture. Every fixture is signed, replayable, queryable.

Discipline compounds: small, additive, reversible, fail-loud.

Source: project doctrine, CLAUDE.md §A-F.

Four planes

Control / orchestration / execution / data. Each plane is independent and composable. The data plane is the contract.

  1. Control plane

    Agents (LangGraph) decide what to try next.

    Agents author missions, propose mutations, and request validations through the orchestration layer.

  2. Orchestration plane

    Temporal workflows fan-out simulations and replay attempts.

    Durable execution; idempotent activities; signal-driven mutation and validation cycles.

  3. Execution plane

    PX4 + Gazebo + MAVSDK drive the simulated vehicle.

    Headless multi-vehicle sims; bit-equivalent replay (under active investigation); strict telemetry channel separation.

  4. Data plane

    Postgres + MinIO + Ed25519 chain — every event signed.

    Append-only event chain; rolling Ed25519 signatures; goldens deterministic; goldens never lie.

The loop

Mutation, validation, lineage. Each leaf is a failure or a near-miss; each branch is a mutation; each dashed edge is a counterfactual sibling.

lineage tree

Determinism

Two runs of the same fixture produce the same telemetry, byte for byte. Goldens never lie. Replay is the contract.

run a

run b

alt (m)
--
v (m/s)
--
pitch (deg)
--
t (s)
--

Trace (abstract)

Four roles compose a step: prepare, llm, validate, record. Every step is signed; every signature is chained.

4-node abstract LangGraph subgraph

Corpus (abstract)

A canonical sketch of the failure-fixture corpus structure. Three archetypes; deterministic seed; the rotation runbook rotates this view quarterly.

Discipline

Verify is a contract. Skips have a named gate. Audits land on a date, not a quarter.

ADRs
5
Events signed
thousands
Verify passed
hundreds
Last audit
2026-05-12

skips: 0 · build: d4be6f01

Posture

What this site does and does not do, in public.

Category Posture
Transport TLS 1.3 only. HSTS preload. mTLS on platform paths.
Content CSP: default-src 'self'; no inline scripts; no third-party SDKs.
Identity Anonymous on splash. Operator console behind Cloudflare Access.
Egress Only Cloudflare Insights (cookieless, first-party). No other origins.

Contact

For technical correspondence, security disclosures, or a question about the doctrine — reach out below or via [email protected].

Security: [email protected]