Event bus
NATS JetStream + CloudEvents. Graceful degradation by design — a missing product never breaks another.
NATO-FMN aligned · APP-6 symbology · air-gap capable
When the grid goes dark, the beacons still burn.
Yula is a sovereign, offline-capable civil-resilience and total-defence platform. It turns civilians, militia and units into a single sensing network, fuses what they see into one live picture, and keeps everyone connected when an adversary cuts the wires.
yula — sovereign signal-fire: the beacon chain that once warned of invasion, rebuilt in software.
// Three-layer architecture
One core. Many products. A bus that lets them stand alone or fight together.
Products never call each other; they publish and subscribe events on a NATS + CloudEvents bus. Plugged in, each product enriches the platform. Unplugged, each still runs on its own.
Products
Five independently sellable products: phishing · ot-ics · deception · pqc-scanner · yula-platform.
Shared core
Hot path in C++20 (capture, SDR, SIMD, correlation) bridged by nanobind to a Python cold path (ML, orchestration, API). Backed by PostGIS, TimescaleDB, Redis, NATS, MinIO.
// Portfolio · Layer 2
Each product earns its keep alone — and makes the whole stronger.
Independent revenue per product, plus an integrated defence fabric a point-solution competitor cannot replicate.
phishing
Catch impersonation domains before they are weaponized, from free public data. Deterministic ML detects; the LLM only cuts false positives.
emits threat.disinfo.detected
ot-ics
Passive OT/ICS anomaly detection at line rate. Raw industrial traffic never leaves site (NIS2 / IEC 62443). Local-only LLM.
emits infra.anomaly
deception
Decoys that turn an attacker's touch into clean, prioritized threat intelligence — decisions, not raw data.
emits threat.attacker.observed
pqc-scanner
Find quantum-vulnerable crypto, score the risk, produce a CycloneDX CBOM and a migration roadmap. Agentless, air-gap capable.
emits crypto.weakness
yula-platform
The platform itself — modules M1–M6 plus the OPSEC belt. Consumes every product's events into one operating picture.
consumes all of the above
// Platform modules · M1–M6
Everyone a sensor. Every node a beacon.
Six modules turn raw field signals into a shared, role-filtered common operating picture.
Collection & Trust
Every person a sensor — with anti-poisoning and deterministic trust scoring so the adversary can't flood it.
Fusion & Prediction
Space-time fusion into adversary tracks; movement as probabilities. Human decides, AI accelerates.
COP / Visualization
Everyone's live map, filtered by role. MapLibre + deck.gl, offline vector tiles, APP-6 symbology.
Resilient Comms
Survives the cut: internet → SMS/USSD → satellite → mesh → LoRa → radio, with store-and-forward.
EW & Civil Protection
Jammer, EW and GPS-spoof detection → EW shadows on the map; evacuation routing and resource matching.
Counter-UAS
Cheap acoustic + RF drone detection and citizen early warning. Detection, warning and coordination only.
M1 field reports + M6 drone detection → M2 fusion & trust → M3 live common map
// Technology · spec sheet
Right job, right language — bridge kept ready.
Start in Python, profile, move only proven bottlenecks to C++. Local-LLM-first, no API keys required.
CorePython 3.12 cold path + C++20 hot path, bridged with nanobind / scikit-build-core
ContractsProtocol Buffers + CloudEvents over NATS JetStream
DataPostgreSQL / PostGIS, TimescaleDB, Redis, pgvector, MinIO
Map / COPMapLibre GL + deck.gl + globe.gl · offline vector tiles · APP-6 / MIL-STD-2525
AI / MLLocal Ollama / vLLM · YOLO-derivative vision · Whisper STT · ONNX Runtime at the edge
CommsReticulum · Meshtastic / LoRa · GNU Radio + RTL-SDR · BLE / Wi-Fi Direct mesh
CryptoSignal protocol E2E + PQC (ML-KEM / ML-DSA / SLH-DSA) via liboqs
HostingAzure-primary (EU region) + optional integrated on-prem replica nodes (k3s)
// Non-negotiable principles
Built for occupation from day one — and for the law that outlives it.
01
LLM is never the detector
Detection is always deterministic ML / rules. The LLM only translates and reports.
02
No single server of truth
Decentralized and federated. Regional nodes work standalone and survive the center falling.
03
Local-first, air-gap capable
Works with no connectivity and no API keys. Cloud is optional enrichment, never a dependency.
04
Dual-use by design
A peacetime disaster and monitoring tool that converts to defence in crisis.
Yula is a detection, situational-awareness, resilient-communications and civil-protection system. It does not implement weapons control, fire direction, or targeting. Counter-UAS is detection, warning and coordination only — kept within a defensive, humanitarian-law-compliant frame, with a tamper-evident evidence chain for accountability.