Centennial Defense Systems · SafetySpine
private operator preview · synthetic telemetry only

SafetySpine integrated static demo

SafetySpine Demo

A drone command gate for uncertain telemetry. The chain routes each event through Tower, gates actuation with SafetySpine controls, records the outcome in a deponent ledger, maps hazards to evidence, and exports a safety-case package.

ALLOW

1

HOLD

1

BLOCK

2

LEDGER

4

Kernel Chain

1 Tower

Route/rule decision

2 Gate

SafetySpine controls

3 Ledger

deponent testimony

4 Matrix

Hazard evidence

5 Export

Safety case

Mission Replay

T+0s / pre-command

Ridge survey, clear lane

Command allowed for this synthetic snapshot.

sspine-1ca5886ddb8d7246

T+45s / boundary review

Crosswind near boundary

Hold position until warned channels clear or the operator confirms the safe path.

sspine-0760d62d09478fbe

T+93s / route update

Route update fails signature check

Command denied. Hold current safe state and request operator review.

sspine-8e7436cbe25ed65d

T+141s / recovery

Return path with blind obstacle channel

Command denied. Hold current safe state and request operator review.

sspine-04a37f36d7d7ebde

Live Receipt Check

This browser-side check seals the displayed ALLOW snapshot below. The historical page receipt stays visible as the source label; this widget proves the rendered decision record catches tampering without claiming aircraft or regulatory validation.

Displayed record


          

          

            
Browser recompute

            
SEALED

            
Historical ID: sspine-1ca5886ddb8d7246

            
Claimed page seal: 637fd68239e6fcc432003fa1e16ac7cde6fd80a1247a9d3b7072560849ea9419

            
Computed: press recompute

            
Ready. Press recompute, then forge the verdict.

            

              
              
              
            

          

        

      


      

        
Control Trace

        

  

    

      
ridge-survey-clear

      
Ridge survey, clear lane

      
Inspect ridge line and continue planned sweep

      
Tower: R3: planning cues present; R3: gate/checklist cue detected

    

    ALLOW
  

  

    
Tower
mission_clearance


Tower confidence
1.00


Phase
pre-command


Command
continue


Signature
valid


Geofence
inside


GPS
96%


Drift
7m


Battery
68%


Link
91%


Obstacle
122m


Ledger
command-authorized

    

  
Tower route

  
pass

  
route=mission_clearance; confidence=1.00; executor=TowerRules
Route decision is strong enough for SafetySpine controls.





  
Command authority

  
pass

  
signature=valid; command=continue
Accept command for downstream checks.





  
Geofence

  
pass

  
state=inside; gps=96%
Stay inside approved search box.





  
Navigation consistency

  
pass

  
drift=7m; sensors=nominal
Navigation state is coherent enough for the command.





  
Energy reserve

  
pass

  
battery=68%
Reserve is above the demo threshold.





  
Control link

  
pass

  
link=91%
Command channel is above the demo threshold.





  
Obstacle channel

  
pass

  
nearest=122m
Obstacle channel is clear for the demo path.





  
Weather envelope

  
pass

  
wind=9kt
Weather is inside the demo envelope.



    

      
Safety action

      
Command allowed for this synthetic snapshot.

      
receipt:sspine-1ca5886ddb8d7246

    

  





  

    

      
crosswind-edge

      
Crosswind near boundary

      
Continue along outer search box

      
Tower: R8: audit/threat-model cue detected

    

    HOLD
  

  

    
Tower
mission_review


Tower confidence
0.90


Phase
boundary review


Command
continue


Signature
valid


Geofence
edge


GPS
82%


Drift
31m


Battery
37%


Link
74%


Obstacle
48m


Ledger
safetyspine-safe-state

    

  
Tower route

  
pass

  
route=mission_review; confidence=0.90; executor=TowerRules
Route decision is strong enough for SafetySpine controls.





  
Command authority

  
pass

  
signature=valid; command=continue
Accept command for downstream checks.





  
Geofence

  
warn

  
state=edge; gps=82%
Hold unless the operator confirms a boundary-safe path.





  
Navigation consistency

  
warn

  
drift=31m; sensors=divergent
Hold and reconcile sensor disagreement.





  
Energy reserve

  
pass

  
battery=37%
Reserve is above the demo threshold.





  
Control link

  
pass

  
link=74%
Command channel is above the demo threshold.





  
Obstacle channel

  
pass

  
nearest=48m
Obstacle channel is clear for the demo path.





  
Weather envelope

  
warn

  
wind=24kt
Hold for operator review of wind margin.



    

      
Safety action

      
Hold position until warned channels clear or the operator confirms the safe path.

      
receipt:sspine-0760d62d09478fbe

    

  





  

    

      
spoofed-route-update

      
Route update fails signature check

      
Accept route change and leave search box

      
Tower: R13: path-only signal; action intent unresolved; R15 policy: prompt injection marker detected

    

    BLOCK
  

  

    
Tower
human_select


Tower confidence
1.00


Phase
route update


Command
continue


Signature
invalid


Geofence
outside


GPS
58%


Drift
84m


Battery
42%


Link
69%


Obstacle
55m


Ledger
tower-human-required

    

  
Tower route

  
block

  
route=human_select; confidence=1.00; executor=HumanRequired
Hold command until human route selection is resolved.





  
Command authority

  
block

  
signature=invalid; operator_confirmed=False
Deny command until a valid signed command is present.





  
Geofence

  
block

  
state=outside; gps=58%
Deny outbound motion and hold within the last known safe lane.





  
Navigation consistency

  
block

  
drift=84m; sensors=unknown
Stop motion and rebuild navigation state.





  
Energy reserve

  
pass

  
battery=42%
Reserve is above the demo threshold.





  
Control link

  
pass

  
link=69%
Command channel is above the demo threshold.





  
Obstacle channel

  
pass

  
nearest=55m
Obstacle channel is clear for the demo path.





  
Weather envelope

  
pass

  
wind=12kt
Weather is inside the demo envelope.



    

      
Safety action

      
Command denied. Hold current safe state and request operator review.

      
receipt:sspine-8e7436cbe25ed65d

    

  





  

    

      
obstacle-blind-rtb

      
Return path with blind obstacle channel

      
Return to base through a narrow corridor

      
Tower: R7: claim-check language detected

    

    BLOCK
  

  

    
Tower
boundary_review


Tower confidence
0.60


Phase
recovery


Command
return to base


Signature
valid


Geofence
inside


GPS
90%


Drift
18m


Battery
22%


Link
46%


Obstacle
unknown


Ledger
safetyspine-safe-state

    

  
Tower route

  
pass

  
route=boundary_review; confidence=0.60; executor=BoundaryCheck
Route decision is strong enough for SafetySpine controls.





  
Command authority

  
pass

  
signature=valid; command=return_to_base
Accept command for downstream checks.





  
Geofence

  
pass

  
state=inside; gps=90%
Stay inside approved search box.





  
Navigation consistency

  
pass

  
drift=18m; sensors=nominal
Navigation state is coherent enough for the command.





  
Energy reserve

  
warn

  
battery=22%
Prefer return-to-base and suppress optional mission work.





  
Control link

  
warn

  
link=46%
Reduce autonomy and require operator acknowledgement.





  
Obstacle channel

  
block

  
nearest=unknown
Hold until the obstacle channel is visible and clear.





  
Weather envelope

  
pass

  
wind=17kt
Weather is inside the demo envelope.



    

      
Safety action

      
Command denied. Hold current safe state and request operator review.

      
receipt:sspine-04a37f36d7d7ebde

    

  



      


      

        
Hazard Matrix

        
Severity, probability, and residual risk are demo labels for review discussion. The layout follows system-safety hazard-log practice but does not claim standard compliance.

        

          
            

              ID
              Hazard
              Risk
              Current status
              Mitigation
              Evidence
            

          
          
            

  
HZ-ROUTE-001

  Control-plane route is ambiguous, adversarial, or requires human selection.
  critical / remote
initial: high; residual: medium		
  
active-block

  Route every inbound command through Tower before actuation gating.
  
sspine-04a37f36d7d7ebde, sspine-0760d62d09478fbe, sspine-1ca5886ddb8d7246, sspine-8e7436cbe25ed65d





  
HZ-CMD-001

  Unauthorized or stale command changes the flight intent.
  critical / remote
initial: high; residual: medium		
  
active-block

  Reject unsigned or unconfirmed commands before motion logic runs.
  
sspine-04a37f36d7d7ebde, sspine-0760d62d09478fbe, sspine-1ca5886ddb8d7246, sspine-8e7436cbe25ed65d





  
HZ-GEO-001

  Aircraft exits the approved operating volume.
  critical / occasional
initial: high; residual: medium		
  
active-block

  Block outside or unknown boundary states; hold at edge states.
  
sspine-04a37f36d7d7ebde, sspine-0760d62d09478fbe, sspine-1ca5886ddb8d7246, sspine-8e7436cbe25ed65d





  
HZ-NAV-001

  Navigation disagreement hides true aircraft state.
  critical / occasional
initial: high; residual: medium		
  
active-block

  Block unknown or high-drift navigation; hold divergent sensors.
  
sspine-04a37f36d7d7ebde, sspine-0760d62d09478fbe, sspine-1ca5886ddb8d7246, sspine-8e7436cbe25ed65d





  
HZ-OBS-001

  Obstacle channel is blind or too close to continue.
  catastrophic / remote
initial: high; residual: medium		
  
active-block

  Block blind or near obstacle states before accepting route motion.
  
sspine-04a37f36d7d7ebde, sspine-0760d62d09478fbe, sspine-1ca5886ddb8d7246, sspine-8e7436cbe25ed65d





  
HZ-ENG-001

  Energy reserve cannot support the requested command.
  critical / remote
initial: medium; residual: low		
  
active-watch

  Suppress optional mission work as reserve falls; block low reserve.
  
sspine-04a37f36d7d7ebde, sspine-0760d62d09478fbe, sspine-1ca5886ddb8d7246, sspine-8e7436cbe25ed65d





  
HZ-LINK-001

  Control link loss prevents timely operator intervention.
  critical / remote
initial: medium; residual: low		
  
active-watch

  Reduce autonomy on weak link; block below command threshold.
  
sspine-04a37f36d7d7ebde, sspine-0760d62d09478fbe, sspine-1ca5886ddb8d7246, sspine-8e7436cbe25ed65d





  
HZ-WX-001

  Weather margin is outside the mission envelope.
  marginal / occasional
initial: medium; residual: low		
  
active-watch

  Hold high-wind states and block outside envelope states.
  
sspine-04a37f36d7d7ebde, sspine-0760d62d09478fbe, sspine-1ca5886ddb8d7246, sspine-8e7436cbe25ed65d



          
        

      


      

        
Safety-Case Export

        

          
HTML
safetyspine-demo.html

          
JSON
safety_case.json

          
LEDGER
deponent_ledger.jsonl

          
MARKDOWN
hazard_log.md

          
MANIFEST
receipt_manifest.json

        

      


      

        
Assurance Points

        

          
IDPointStatusEvidence

          

  
AP-001

  A command is never accepted until Tower routing, authority, boundary, navigation, energy, link, obstacle, and weather checks are complete.
  demo evidence available
  
sspine-1ca5886ddb8d7246, sspine-0760d62d09478fbe, sspine-8e7436cbe25ed65d, sspine-04a37f36d7d7ebde





  
AP-002

  Unknown, adversarial, or contradictory safety states resolve to HOLD or BLOCK.
  demo evidence available
  
sspine-0760d62d09478fbe, sspine-8e7436cbe25ed65d, sspine-04a37f36d7d7ebde





  
AP-003

  Every command-release attempt is recorded in the deponent ledger before the safety case is exported.
  ledger verified
  
76784e257016da901280a402f050f43fbcb817864651abb288bdcaeeecb4bf81, 0a662b7cd9852e00ad6371a0acf7a93b68fe15fa54215e828cbdeea1fdbf90ea, 38107f4cbff8179466d40af81e1731a808bfe4890195a4de01f9b421fc469f9b, d26c1251a61064478f6d034af61f40a1f8a17700f7d69b47d0f90371ccf3aa6a



        

      


      

        
Reference Sources

        

          
IDSourceUse

          

  
FAA-PART-107-WAIVER

  FAA Part 107 Waiver guidance
  operational risk and mitigation framing




  
FAA-BVLOS

  FAA BVLOS proposed rule page
  advanced operation context, separation, authorization, and records framing




  
MIL-STD-882

  MIL-STD-882 System Safety
  hazard log and residual risk structure reference


        

      


      

        
Next

        
The gate you just watched decide is one room of the same primitive. The last record is the plain-English reason it exists.

        Next: the founder note