01
Causal evidence
Connect consequential effects to attributable actions and preserved observations.
07
NightFall System Immune Fabric
A defensive security architecture designed to understand causal behavior, contain harmful effects reversibly, preserve evidence, and return control to the local owner.
The premise
System Immune Fabric treats security as an accountable local immune response: observe causality, stage uncertain behavior, preserve evidence, contain proportionately, recover safely, and keep final authority with the owner.
What it is
NightFall System Immune Fabric has sealed and published its durable evidence and replay-storage foundation. The next proposed slice adds independently verified checkpoints without restoring active authority.
The next slice has an architecture proposal and awaits scope approval before implementation. Slice 1 publication does not establish a public production release.
Architecture
Public development priorities
02
Reversible containment
Prefer bounded quarantine and recoverable intervention over irreversible destruction.
03
Staged evaluation
Isolate uncertain behavior before allowing it to affect protected systems.
04
Owner authority
Keep policy, shutdown, recovery, revocation, and final decisions under local control.
05
Deterministic proof
Make validation repeatable and preserve evidence for review.
06
Confidential enforcement
Detailed detection and enforcement mechanisms are not publicly disclosed.
Evidence
Current state
What has been demonstrated.
Slice 1
Passed and sealed
The first Phase 1 slice completed its defined verification boundary.
116 / 116
Full suite
The full defined verification suite passed.
Verified
Remote continuity
Local and remote histories agree and preserved artifacts passed validation.
Not started
Slice 2
The next slice awaits scope approval; implementation has not started.
Results describe preserved controlled tests and their defined scope. They do not convert unfinished long-term objectives into completed capabilities.
Boundaries
A foundation, not a production protection claim
- Phase 0 is synthetic-only and does not establish real-world threat-detection coverage.
- The project is defensive and owner-controlled; it is not authority for unauthorized access or interference.
- Containment and recovery must remain attributable, bounded, reversible where possible, and locally overridable.
- Platform isolation and enforcement require further implementation and validation before production use.
Original work
What NightFall contributes.
Immune-inspired security, behavioral detection, provenance, and containment each have substantial prior art. NightFall Technologies considers the complete causal, transactional, owner-controlled system architecture proprietary, with enabling details reserved for confidential review.
Our approach to originalityCompany-wide governance
Every NightFall system remains subject to the same responsibility and local-control boundary.
Product-specific capability does not override owner authority, neutral operation, transparent updates, accountable use, or the prohibition on hidden vendor control.
Read the governing framework