FURTHER DETAIL SPECIAL ACCESS REQUIRED
Proof Before Power.
IMPACTS ADVANCED DEVELOPMENT · SPECIAL PROGRAMS OFFICE
The trusted execution fabric between autonomous intent and physical action. Permission is made physical — and withdrawn, in hardware, the instant its basis fails.
The drawing the planner never sees.
Two trust domains. One boundary that cannot be bypassed. A single protected path to consequence — and no mission processor may assert it.
The most dangerous moment is after the plan is chosen — and before the hardware acts.
Modern autonomy plans, allocates, and reroutes at machine speed. But a planner's picture of the world can be stale, replicated, estimated, or drawn from a node that is no longer trusted. A plan valid the moment it is chosen can be invalid milliseconds later — and a physical action, once taken, cannot be recalled.
The time-of-check / time-of-use and authority gap. IMPRIMATUR exists to close it — advanced autonomy without monolithic trust.
Four authorities. Separated on purpose.
The architecture reduces to four propositions. They are not slogans — they are distinct technical authorities, and no one of them can do another's job.
Two domains.
One never touches the trigger.
The mission-allocation processor can run the most advanced planning in the fleet — and still cannot assert a protected enable path. That authority lives across a hardware-enforced trust boundary, in an isolated assurance controller. Compromise the planner, and you have compromised a proposal — not a weapon.
Enablement is held, not granted. The moment one predicate fails, the interlock deasserts locally — without a coordinator, a quorum, or a network — and the lost function is reconstituted under a later epoch.
The trust domain, in section.
Isolated silicon — measured, sealed, and gated — pulled apart along its alignment axis. Two layers sit above the boundary; everything that can energize hardware sits below it.
Prepare. Commit. Arm. Activate. Then watch — and reconstitute.
Six movements convert an authorized objective into a bound, attested, revocable commitment — and restore the function when it breaks. None of them energizes hardware until the one before it is real.
The last microseconds, on the wire.
The execution sequence as the gate sees it. The enable path exists only while every bound predicate holds — and collapses the instant one fails.
Five records.
No record answers another's question.
Each record is owned by a different authority. Keeping their questions separate is the whole discipline — it stops any one service from claiming the mission, reporting the state, choosing the action, certifying it, and authorizing itself to act.
Cryptography establishes authority. Protected logic preserves the machine.
The strongest embodiment fuses software-defined coordination with hardware-defined permission — split cryptography, a measured root of trust, a fast hard-fault path, and freshness that never depends on a clock.
The evidence is part of the product.
Every commitment, lease, gate state, fault, and reconstitution is an authenticated record. Evaluate the architecture against measures with a direct nexus to its mechanisms — not against adjectives.
One architecture.
Every platform that acts.
The same transaction governs an aircraft's payload, an undersea vehicle's sonar, a ground vehicle's emitter, a spacecraft's downlink, and a fixed sensor's transmit path. Only a domain adapter changes — which resources are material, which hardware is gated. What is never gated: the functions that keep the platform alive.
Deep inside the ring — by permission.
Operational employment in a contested environment. The platform persists where it otherwise could not — because every emission, release, and action waits on a current, authorized, feasible commitment, and the lost relay is reconstituted under a later epoch.
What it cannot do is built in, not promised.
IMPRIMATUR governs exactly one transition — from authorized intent to physical action — and stops precisely at the decisions that must remain human.
It makes authorized intent physically executable, attributable, continuously bounded, locally containable, and recoverable — without surrendering human authority, platform safety, or control of consequential hardware.
Engineered for the irreversible.
IMPRIMATUR is built by IMPACTS Research & Development — an engineering practice working at the boundary between autonomous decision and physical consequence. It builds the control and assurance machinery that lets advanced autonomy be fielded without surrendering authority over what it does.
Its method is the architecture itself: nothing acts that is not measured, bounded, attested, and revocable — and nothing stays enabled once any of those ceases to hold.
EXECUTION CORE · MRCAL — MISSION RESOURCE COORDINATION AND ASSURANCE LAYER
FOUNDED BY SCOTT CORWON
What can be shown has been shown.
The rest is discussed under authority, with the programs it is built for. If you are accountable for autonomy that will act in the physical world, that is reason enough to make contact.
IMPRIMATUR.SYSTEMS