← Divisions
HEIMDALL

The guardian that says no — and proves why.

HEIMDALL applies the COSMIC reasoning substrate to the decisions you can’t take back. It grounds every claim in verified evidence, weighs whether even a true claim bears the weight of the moment, and refuses when it can’t. A human holds every decision — the gate can refuse, hold, or stand aside, but it cannot grant permission. No guessing at the irreversible edge.

The HEIMDALL gate

Every proposed action carries claims, and every claim must cite evidence that can be verified. The gate returns one of four verdicts — and not one is a permission word.

REFUSE

A claim can't be grounded in verified evidence. The action cannot proceed — and the failed claim is named.

HOLD

True, but it doesn't bear the load of the moment. Escalated for human judgment, not executed.

ABSTAIN

The stakes can't be assessed. The gate will not stamp what it can't see.

NO OBJECTION

Grounded and proportionate — and still not permission. Authority remains with the human operator.

The one rule

By design, HEIMDALL has no approval verdict — there is no path in the engine that can emit one. It can refuse, hold, abstain, or raise no objection. It removes options; it never grants them. A human stays accountable on every decision. The gate is the brake and the record — never the trigger.

Deterministic.Identical inputs produce an identical verdict — reproducible in any review or inquiry, no model, no guess. Accountable. Every decision, and every refusal, is sealed into the LUNA audit chain: append-only, tamper-evident, post-mortem ready.

One guardian, every edge

A decision that can’t be undone should never rest on a claim that can’t be proven — wherever it happens. A defense review. A clinical intervention. An irreversible financial execution. An infrastructure cutover. The same posture applies: ground the claims, weigh the consequences, refuse what can’t survive scrutiny, and leave an immutable record of why every call was made.

All gate demonstrations use synthetic, illustrative scenarios. HEIMDALL is decision oversight — verification, refusal, and an auditable record — with a human in the loop at all times.

Products
HEIMDALL Airborne Command CenterCoalition brief

A runnable synthetic command-center slice for airborne decision support: fused-picture stepping, brake-only verdicts, human-in-command framing, and a tamper-evident decision log.

Open airborne console →
HEIMDALL GateDemo

The verification-and-refusal gate for irreversible decisions. Grounds every claim (COSMIC), weighs proportionality, refuses what it can't prove, and seals each decision into the LUNA audit chain. Brake-only by construction — it cannot grant permission.

SENTINELPre-pilot

Deterministic SOC alert triage. SOAR adapters for Chronicle, Microsoft Sentinel, Splunk, and Elastic. 94.0% held-out accuracy. LUNA audit chain on every decision.

Held-out accuracy: 94.0%
SENTINEL benchmark results
Held-out accuracy
94.0%
Unit tests passed
210/210
Regressions introduced
0
View full SENTINEL benchmark →
Why deterministic matters at the edge

A system that occasionally hallucinates a confident answer at a high-consequence decision is not a decision system. It is a liability. HEIMDALL escalates anything that falls outside what the evidence can support to a human — rather than guessing on a call that can’t be taken back.

The LUNA audit chain means every decision — and every refusal — has an immutable, tamper-evident record. When a call requires post-mortem, the chain of evidence is already there.

Contact for pre-pilot access →