Skip to content
Defense

AI security for defense systems.

Model release integrity for defense systems. Vraelis does not build weapons or mission software.

Satellite dishes on a rooftop.

Intended application areas. Vraelis has no customer deployments in them.

Why it matters

A model update crosses organizations.

Updates cross organizations

Trained by one team, integrated by another, operated by a third.

An unapproved change is a security event

A different release, or the wrong destination, changes what the system does.

Reviewers need to read the evidence

What was approved, for where, and what the system reports running.

How Vraelis Contour would apply

Five steps, release to record.

How Vraelis Contour works
  1. Identify the release

    Working in the experiment: model and configuration digestsProposed: preprocessing identity
  2. Bind approval to the release and destination

    Destination-bound approval: test approval cannot carry into operations.

    Working in the experiment: signed bindings
  3. Integrate with a supported runtime

    Working in the experiment: ONNX Runtime 1.23.2, CPUProposed: customer runtime adapters
  4. Compare approved and reported

    Working in the experiment: evidence app
  5. Preserve discrepancies, missing evidence and recovery

    Working in the experiment: recorded observationsProposed: investigation workflow
Approval for cpu-2: destination, policy, a 60 second age limit and the runtime.
Read-only evidence app, inside the controlled ONNX reference experiment.
Our position

The builder should not be the only judge.

Security software only

Vraelis does not decide how a system is used.

Approval apart from the builder

In the experiment, release authorization separates publisher, deployer and approver roles. The trace keeps a receipt digest, not the approver's identity.

A record kept in order

Every observation is kept, including ones that confirm nothing.

Limits

What we do not claim.

  • No deployments in defense systems, and no customers.
  • No contracts, security clearances or government authorizations.
  • No access to classified or restricted environments.
  • No certification, and no claim of fitness for operational use.
  • No protection against adversarial inputs or perception attacks.
  • No hardware attestation. Runtime identity is a worker self-report.

Build stronger evidence for model releases.

Join us in building Vraelis Contour.