Centennial Defense Systems

Governed software factory for local-first, high-consequence systems. Every claim backed by machine-readable receipts (/receipts, /manifest.json). Evidence memory, verification gates, reproducible builds — where uncertain states must halt, not guess. Fail-closed, audit-first, deterministic.

It doesn't answer. It testifies.

[01] hero · sha:unknown · build:2026-05-11T14:56:46.930Z

[02] architecture · sha:unknown · build:2026-05-11T14:56:46.930Z

Architecture.

Centennial builds in seven planes, from bounded failure-mode analysis through machine-readable public attestation. Each plane produces its own evidence; no claim crosses a boundary without a receipt.

The stack is local-first by design: policy evaluates on-machine, evidence captures on-machine, and decisions produce receipts on-machine. Disconnected operation is the baseline, not the exception.

Plane

Signal

Status
Operational. Bounded failure-mode contracts govern every claim surface.
Proof
Public receipt boundary maps each capability to a bounded state before it reaches the page. /receipts and /manifest.json provide machine-readable attestation.
Not yet

Plane

Control

Status
Internal. Tower crate (Rust). Deterministic routing primitives. Local-only.
Proof
Rust library with deterministic routing primitives. Policy evaluation stays on-machine. Daemon mode on roadmap, not yet shipped.
Not yet

Plane

Execution

Status
Jarvis operator plane. Internal.
Proof
Release posture runs scan → lint → test → build → receipt chain. Jarvis is an internal operator control plane; not a public product.
Not yet

Plane

Inference / Routing

Status
Sovereign Stack. Active development. Operational locally.
Proof
Routes frontier and open-weight models through local policy. On-device inference running on M5 Max (128GB). Multiple model classes active. Not a published retail runtime.
Not yet

Plane

Memory

Status
Operational. Archivist 149GB corpus with live spatial demo.
Proof
Archivist and Spatial maintain content-addressed evidence stores under local gates. Corpus is FTS5-searchable with cross-source entity resolution (23/23 tests). Live public demo on this page.
Not yet

Plane

Verification

Status
Operational. Gate registry with independent review lanes.
Proof
Release gates act as separate review lanes. Verdicts are evidence-backed, not narrative. Gate glossary enumerates the chain.
Not yet

Plane

Attestation

Status
Public. Build SHA on every section. /receipts and /manifest.json.
Proof
/receipts provides per-release evidence with timestamps and SHAs. /manifest.json labels registry-backed, external-only, internal, and research states. The site does not prove private runtime state.
Not yet

Gate glossary

Review gates sit in the release chain; they do not replace tests.

Scan
Policy and claim-language checks before build.
Lint
Static code-quality pass for the changed surface.
Test
Executable behavior checks; no narrative substitute.
Build
Deployable artifact generation with receipt metadata.
Grand Jury
Adversarial review gate for claims, UX, privacy posture, and release evidence before a SHIP / NO-SHIP decision.
Receipt
Durable record that ties a claim to a command, artifact, or public attestation.
Edge R&D
Disconnected policy, evidence, receipts
Evidence operators
Dated snapshots and public-safe demos
Local-agent teams
Bounded launch, routing, review
Technical advisors
Narrow evidence deliverables

[03] shipped · sha:unknown · build:2026-05-11T14:56:46.930Z

What we've shipped.

Products, engines, and infrastructure in active operation. Every entry backed by a public link or receipt.

Products and engines in active operation.

Archivist

Local-first investigative evidence intelligence. Content-addressed, tamper-evident archives with chain-of-custody export and a standalone verifier. macOS desktop app with Rust kernel.

v1.x·external-only·archivist.tools →

Fleet Watch

Process governance for AI workloads. Port, GPU, and repository collision prevention with a hash-chained audit log. Local only. Zero configuration.

v1.x·registry-backed·MIT · PyPI →

Sworn

Deterministic, fail-closed AI code governance. Git pre-commit and CI-diff gates that emit tamper-evident evidence logs for review.

v1.x·registry-backed·Apache 2.0 · GitHub →

Assurance Kit

Offline/on-prem deterministic assurance system for forensic evidence capture and gate execution. 11 registered gates. Concurrent audit support with file-level locking.

ARS Recursive Synthesis

Recursive evidence synthesis pipeline. Reads indexed Archivist segments through unified search, filters through operator-curated allowlists, writes deterministic wiki-style outputs.

Cross-Source Entity Resolution

4-stage pipeline linking entities across document sources. Production-grade with structured output and evidence-chain posture.

Telegram Archivist Adapter

Bidirectional bridge from Telegram messages to the Archivist evidence pipeline. Cross-contamination guard on ingest.

v1.0.0·internal·shipped · adapter v1 →

Itinerary Engine

Case management, date reconciliation, timeline generation, and reporting with ARS integration. Fail-closed on ambiguous dates.

Expert Training Pipeline

Production-quality fine-tuning data across 5 domains: creative writer, general reasoner, Python coder, SRE debugger, system architect. Multi-format export (Axolotl, HuggingFace TRL, OpenAI).

batch 05·internal·shipped · multi-format →

Recursive engines.

Release Chain

Scan → lint → test → build → grand jury → receipt → SHIP/NO-SHIP.

Recursive Artifact Engine

Structured evidence synthesis with cycle-based question generation and delta analysis.

Archivist Deep-Search

FTS5 full-text search across 149GB content-addressed corpus. Keyword and semantic retrieval.

Constraint Kernel Gate

9 constraint kernels governing worker behavior, budget, and thermal limits.

Weekday Standard

Quality bar: every claim must survive an uneventful working day with zero human intervention.

Operator Amplifier

Detects operator state and routes work to appropriate lanes.

[04] spatial · sha:unknown · build:2026-05-11T14:56:46.930Z

Archivist Spatial.

Dated local-corpus snapshot above; searchable public subset below. Natural-language parsing, typed labels, and evidence-chain posture stay separated from private stores.

photo artifacts

50,807

photo-entity links

243,368

As of
2026-04-22
Source
operator-recorded Archivist Spatial snapshot
Line item
/receipts

Halt when provenance or quality fails policy. The website reads only committed JSON snapshots and the public-safe demo corpus, not live operator stores.

Public demo · committed subset

Explainable retrieval over static records.

This module searches 6 synthetic public-safe records bundled with the site. Snapshot counts above are receipt metrics, not the searchable public subset.

Workflow: Inspect whether a record carries handling and receipt signals.

Parser
tampertapesamplebag
Expanded
tampertapesamplebag
Status
ready · confidence 96%
Boundary
Ranked over committed public-safe metadata only.

Parsed filters

keyword

tamper, sample, bag

semantic

none

spatial

none

temporal

none

entity

tamper tape, sample bag

Retrieval posture

Static hybrid facsimile: keyword, semantic aliases, spatial, temporal, and entity fields in committed JSON.

Private-data terms block results. The demo never widens into operator stores.

Low-confidence queries are labeled instead of padded with unrelated records.

Entity graph boundary

Demo subset
Derived labels only.
This page reads committed synthetic records and shows which entities helped rank a result.
Archivist
Evidence graph where enabled.
Read-only graph projections can tie entities and relationships back to evidence-bearing segments.
Jarvis
Internal control-plane context.
Local operator context and graph views stay separate from the public website demo.

The demo explains graph-style signals; it is not a live graph backend or private archive browser.

1 result

snapshot 2026-04-22 · ready

Evidence packaging bench

rank 1 · demo-lab-bench

Evidence packaging bench

keyword + entity match over committed metadata

quality 94%

A clean bench with tamper tape, labeled sample bags, a ruler, and a printed receipt stub.

Place
controlled lab bench
Time
midday
Receipt
demo-corpus-v1/demo-lab-bench
Privacy
public-safe synthetic
Quality
demo-reviewed
Rights
synthetic public demo asset

Match breakdown

keyword · weight 3

tamper, sample, bag

entity · weight 4

tamper, tape, sample, bag

Matched terms
tampersamplebagtape
Derived entities
tamper tapesample bagrulerreceipt stubbench mat
keywordentity

keyword + entity match over committed metadata. Entity graph limit: derived labels only; no identity proof.

[05] live · sha:unknown · build:2026-05-11T14:56:46.930Z

Live systems.

Verify at /receipts →

Operational state at build time. Every claim on this site is backed by machine-readable receipts — no narrative substitute. This section reflects a dated snapshot; /receipts carries the authoritative record.

Archivist API

149GB corpus · spatial available · online

FTS5 full-text search. Content-addressed evidence store. Live public demo on this page.

Inference

10 models active · local routing

deepseek-v4-pro · qwen3.5-122B · gemma4-pro · gemma4-agent · qwen3-vl · deepseek-r1. Local routing via Sovereign Stack.

Vigil

4 cameras · 45K extraction backlog

Continuous surveillance pipeline. Evidence extraction and spatial catalog integration.

Hermes Gateway

Telegram · scheduled tasks · agent dispatch

Notification surface and autonomous agent dispatch. Duration-classified task routing (L0-L3 lanes).

Fleet Watch

Active on 3 nodes

M5 Max (local) · M1 Air (server) · Pi (10.0.0.179). All nodes operational.

Infrastructure

All nodes healthy

Pi (Docker + inference) · M1 Air (server, SleepDisabled=1) · M5 Max (local, 128GB).

[06] factory · sha:unknown · build:2026-05-11T14:56:46.930Z

Factory depth.

The factory is the system behind the systems: routing, local inference, verification, and receipts. Each surface produces its own evidence; nothing ships without passing its gate.

Surface

Sovereign Stack

Status
Active development. Routes models through local policy.
Proof
Local inference router and control-plane work under active development. LLM routing operational on M5 Max via open-weight and API-provided models.
Not yet

Surface

Worker supervision

Status
Operational. Hermes gateway with agent dispatch, scheduled tasks, and Telegram integration.
Proof
Receipt-first worker discipline: preflight, routing authority, independent review, and no automatic commit. Subagent-driven development with duration-classified dispatch across cost lanes.
Not yet

Surface

Tower

Status
Public package boundary. Rust routing library.
Proof
Deterministic primitives live in crate form. Local policy evaluation. Standalone daemon mode planned, not yet shipped.
Not yet

Surface

Verification lane

Status
Operational. Gates rest on protocol and test artifacts.
Proof
Merge and ship gates are evidence-backed, not inferred from marketing copy. Independent review lanes run per-release.
Not yet

Surface

This site

Status
Public receipt-bearing surface.
Proof
Prebuild scans, build-time attestations on /receipts, and deterministic client bundles where policy requires them. Per-section SHAs and build timestamps.
Not yet

[07] ships · sha:unknown · build:2026-05-11T14:56:46.930Z

Proof surfaces.

Published packages and public demos are labeled by attestation state: registry-backed, external-only, internal, or research.

Public proof surfaces.

Archivist

proof-01

Local-first investigative evidence intelligence. Content-addressed, tamper-evident archives with chain-of-custody export and a standalone verifier. Built for offline operation on macOS.

PROOF SURFACE

ATTESTATION STATE external-only · public CDS receipt pending

LOCAL EVIDENCE PATH content-addressed segment model

RECEIPT PATH export · local verifier path

GATE PATTERN halt on missing chain / policy breach

Distribution and purchase: archivist.tools

Public CDS receipt pending SBOM/binary attestation.

Fleet Watch

proof-02

Process governance for AI workloads on a single machine. Port, GPU, and repository collision prevention with a hash-chained audit log. Local only. Zero configuration.

PROOF SURFACE

ATTESTATION STATE registry-backed

LOCAL EVIDENCE PATH repository · port · GPU bind checks

RECEIPT PATH hash-chained log (on-machine)

GATE PATTERN collision → halt before bind

Published package: fleet-watch (PyPI).

Sworn

proof-03

Deterministic, fail-closed AI code governance. Git pre-commit and CI-diff gates that emit tamper-evident evidence logs for review.

PROOF SURFACE

ATTESTATION STATE registry-backed

GATE PATTERN git pre-commit · CI diff pass

RECEIPT PATH tamper-evident evidence record

LOCAL EVIDENCE PATH ambiguous change → halt (fail-closed)

Published package: sworncode (PyPI).

Internal / in progress.

Buddy Core — Behavioral regulation runtime. Operator state as a governed input to system safety. Phase 1, internal.

Research / proposal track.

Agent Civilization / P1 — Research-track submission package prepared; not product proof. Demo artifacts stay separate from canonical evidence.

SafetySpine — Proposal track for fail-closed governance patterns in autonomous systems.

[08] build · sha:unknown · build:2026-05-11T14:56:46.930Z

How it's built.

  1. Principle 1. Uncertain states halt. Evidence and deterministic checks precede release; fail-closed gates are part of the default path, not a retrofit.
  2. Principle 2. Local-first execution: policy and archives stay on-machine; receipts tie claims to durable artifacts.
  3. Principle 3. Models draft, inspect, and test assumptions; integration and release authority stay with the operator.
  4. Principle 4. Operator-controlled routing and local orchestration keep claims, evidence, and authority inside one governed boundary.

[09] believe · sha:unknown · build:2026-05-11T14:56:46.930Z

Why local-first matters.

Most software assumes the network is always there. Centennial assumes it is not.

High-consequence work often happens disconnected: shipboard, airborne, forward-deployed — places where cloud policy and opaque remote behavior are liabilities.

Local-first surfaces avoid cloud dependency where stated. Policy is evaluated locally. Evidence is captured locally. Decisions produce receipts. Uncertain states halt.

Development follows the same rule: no wishful availability, no unverifiable authority.

Receipts prove what happened under policy; they do not replace it.

[10] who · sha:unknown · build:2026-05-11T14:56:46.930Z

Who.

CJ Chanhnourack is the founder of Centennial Defense Systems and the principal engineer–operator behind its governed local-first work.

Pattern: technical publishing, self-hosted stacks, multi-machine local inference, and disciplined supply-chain-style release habits applied to software that must preserve state, evidence, and policy under pressure.

Centennial formalizes that pattern as evidence-gated engineering: models assist under receipts; policy and release authority stay with the operator.

Writing: The Internal OS on Substack — cjchanh.substack.com

Code: github.com/cjchanh

Founder
CJ Chanhnourack
Founded
2026
Base
Colorado Springs, CO
Operating model
Local-first, evidence-gated
Focus
High-consequence systems
Stack
macOS · Linux · Rust · Python · local LLM stack · DeepSeek · Claude
Outputs
3 PyPI packages · 2 websites · 149GB corpus · 4,650-file codebase
Writing
The Internal OS (Substack)

[11] engagements · sha:unknown · build:2026-05-11T14:56:46.930Z

Engagements.

Four paths, depending on what you need:

Explore — Public docs, /receipts, /manifest.json. No contact needed. Start at /receipts or browse the architecture above.

Pilot — Evidence brief pilot for white-label, traceable client deliverables. Scoped engagement with public-safe outputs. See pilot scope.

Product — Archivist direct purchase at archivist.tools. Fleet Watch: pip install fleet-watch. Sworn: pip install sworncode.

Engage — Custom work, R&D partnership, or technical advisory. cj@centennialsystems.com for principal review.

No intake form. No automated scheduler. Each engagement path leads to a real person and verifiable evidence.