Skip to content

a11oy Sentinel — drift detector

a11oy Sentinel is the security-posture & observability vertical of a11oy. (Internal codename: sentra.)

Name origin. The internal codename sentra is a coinage on the English sentry (the guard who watches a boundary), styled to sit alongside the Quechua organ names. It is not a Quechua word and is labelled honestly as such. Its job matches the name: a11oy Sentinel watches the cyber-posture surface and raises a flag when it drifts.

Overview

a11oy Sentinel is the anomaly-detection and observability substrate of a11oy. It models enterprise cyber posture as a Kitaev surface — security state is a topological surface, and drift is the deviation from the ground-state configuration.

Frontier capability. First Kitaev-surface posture-drift detector on a Λ-axis-governed observability fiber — Lutar/QEC/KitaevSurface formal lattice basis (Ouroboros Thesis DOI 10.5281/zenodo.20434276).

Anatomy mapping: a11oy Sentinel is the operational face of the Hukulla immune system and the OTel-VSP nervous/observability fiber.

How it works

  1. Continuous posture scoring — a real-time topological stability score across the surface.
  2. Drift events — any delta beyond the policy threshold raises a classified event.
  3. Incident queue — events ranked by CVSS-weighted severity.
  4. Policy gate — every remediation passes the a11oy Covenant gate.
  5. Proof chain — every response is sealed in the SZL audit fiber with full attribution.

The Kitaev-surface stability model gives an objective stability scalar rather than a hand-tuned alert threshold — drift is measured against a topological ground state.

API / install

bash
git clone https://github.com/szl-holdings/a11oy.git
cd a11oy
pnpm install
pnpm test

Example — score posture drift

ts
import { driftScore } from '@szl/a11oy'

const report = driftScore({ baseline: surfaceA, observed: surfaceB })

console.log(report.stability) // topological stability score
report.events
  .sort((a, b) => b.cvss - a.cvss)
  .forEach(e => console.log(e.id, e.cvss, e.requiresApproval))

Source & evidence

Doctrine v11 LOCKED · 749/14/163 · kernel c7c0ba17 · Λ = Conjecture 1 · SLSA L1 honest. Math-grounded, Quechua-rooted, zero mysticism (PURIQ v12 agentic layer is additive).