Governed operational intelligence infrastructure

Architecture before autonomy.

UMBRA is the governed operational plane. PENUMBRA is the human-facing interface. Together they create a bounded place where humans, AI, applications, and authorized entities can interact without confusing capability with authority.

UMBRA → GOVERNED OPERATIONS · PENUMBRA → HUMAN SUPERVISION · UMBRA NETWORK → FEDERATION

UMBRA

Model-, agent-, device-, manufacturer-, and vendor-agnostic control architecture for identity, authority, intent, policy, execution, telemetry, verification, provenance, escalation, revocation, and receipts.

PENUMBRA

The human-facing layer that makes state, evidence, uncertainty, permissions, review, exceptions, and stop-the-line controls legible to the accountable person.

Domain instantiation

The architecture stays. The operating world changes.

NULLWORKS can apply the same governed architecture to different physical and digital domains without renaming the architecture for each project.

NOXWORKS

The NULLWORKS lunar instantiated prototype lab: the home for lunar systems, lunar prototypes, terrestrial analogs that directly serve lunar programs, and future Moon-instantiated operational experimentation.

PORTUS LUNARIS

The lunar spaceport program developed through NOXWORKS. PORTUS is the port-operations layer inside that program; UMBRA remains the underlying governed architecture and PENUMBRA remains the human supervisory interface.

Open PORTUS LUNARIS →

The public stack line

One application. Many doors. One host.

The presentation layer for NULLWORKS is this repository, not a family of landing sites. Corporate home stays at /. New surfaces are routes under src/app. Hive events record the decision. They are not the website.

src/app

Routes are doors

Public surfaces live as routes in this application. A page may exist without entering corporate navigation or the sitemap. New work is a door, not a second website.

src/lib

Shared truth

Common metadata, helpers, and operating utilities stay here so audience-specific pages can change sequence without inventing a second set of facts.

src/middleware.ts

Canonical host lock

Production traffic that still hits a portfolio or Vercel alias is redirected to nullworks.systems. Preview URLs stay internal. The company front door is one host.

The turnstile

Capability does not equal permission.

REQUESTWhat is being asked?
IDENTITYWho or what is acting?
AUTHORITYWhat are they allowed to do?
INTENTWhat outcome is actually desired?
POLICYWhat rules constrain the action?
PLANWhat bounded sequence will be attempted?
SAFE EXECUTIONWhat capabilities may be exposed?
TELEMETRYWhat happened while it ran?
VERIFICATIONDid reality match the intended outcome?
RECEIPTWhat evidence survives afterward?
Future: UMBRA Network

A federation layer for independent organizations and architectures to communicate through common protocols for identity, authority, intent, constraints, capability exposure, execution, verification, and receipts without requiring a shared database, AI model, or software stack.

← NULLWORKSHuman authority remains final. Public host: nullworks.systems