Evidence & Scope
What a SEARIN cut means, precisely.
Containment is only worth what you can prove. Here is exactly what we measure, what we control, who holds authority, and what is validated today versus still in progress.
Four measurements, not one
A cut is timed at four separate points.
A relay opening is not the same as every copy being contained. Every SEARIN record reports all four, separately.
T1
Latch open
The Sentinel relay or breaker physically opens. Measured at the contact, in milliseconds.
T2
Workload stopped
In-scope compute draws no current and schedulers report zero running tasks.
T3
Credentials dead
Keys, tokens and service accounts for the scope are revoked and rejected on use.
T4
Copies contained
Every known replica, checkpoint and cache in scope is isolated or confirmed unreachable.
Stop is not erase
Three different outcomes.
Stop
Execution halts. Power, compute and network are removed. Weights and data still exist on disk.
Restrict
Stored models, checkpoints and vectors are locked: keys revoked, storage detached, egress closed.
Destroy
Only on a separate, explicitly authorised order. SEARIN never erases data as a side effect of a cut.
Authority policy
Who can cut, and what happens on silence.
Cutting
Always requires accountable humans: one key at home, two keys in companies, an n-of-m quorum for governments. SEARIN never cuts on its own judgement.
Loss of signal
Each scope has a written policy chosen at commissioning: hold and alarm (default), or fail to off for scopes the customer designates. Life-safety circuits are never on a fail-to-off scope.
Restore
A deliberate, staged, logged procedure under the same authority that cut.
Coverage boundaries
We cut what is in scope — and tell you what isn't.
Every deployment ends with a signed scope register. Collateral matters: shared power, cooling and networks outside scope stay live, and a drill proves it.
In scope
- • Systems the customer owns, operates or has contractual control over
- • Power, cooling and network paths physically wired through a Sentinel interlock
- • Cloud and SaaS resources reachable through credentials the customer administers
- • Replicas the Replica Hunter can fingerprint inside declared environments
Reported, not claimed
- • Third-party systems the customer has no access or authority over
- • Copies that have left every environment the customer controls — these are reported, not claimed as cut
- • Shared infrastructure outside the agreed scope — it stays live and is listed on the scope register
Validation status
What is proven today, and what is next.
Updated as each milestone lands. Anything not marked complete should be treated as a design target.
REV-A bench prototype
Built and running. 4,200 loaded cut cycles; 1.38 s median key-turn to dead load (T1–T2) on the bench.
Test reports
Bench test conditions and raw logs available to buyers and investors under NDA.
Independent witnessed test
Third-party witnessed bench demonstration scheduled ahead of REV-B.
CE / UL electrical safety
Not yet granted. No unit ships before third-party certification and a witnessed factory acceptance test.
Customer deployments
No named customer deployments yet. Case studies are illustrative scenarios from bench and drill data.
Control room ↔ hardware link
The public control room is a safe simulation. Hardware-in-the-loop demonstration offered at witnessed sessions.
Works with your stack
SEARIN is the independent layer underneath what you already run.
You likely already buy AI security software and have emergency power off on the floor. SEARIN doesn't replace them — it ties them into one authorised, verified, reversible cut.
Agent identity & permission tools
Revoke what an agent is allowed to do.
SEARIN adds the physical path when revoking permissions is not enough, and records the whole cut.
AI security platforms
Detect and block risky model and agent behaviour.
They raise the alarm; SEARIN is the independent stop they can hand off to.
Red-team & assurance services
Prove defences work under attack.
SEARIN supplies rehearsed, timed severance evidence for the same audit.
Emergency power off & e-stops
Cut electricity to a room or machine.
SEARIN integrates with them and adds scope, credentials, replicas, verification and restore.
One-way network gateways
Enforce a hardware network boundary.
SEARIN coordinates the boundary with power, compute and identity in one authorised action.
Where we start
Bounded environments first, where every claim can be tested.
Our first deployments are sites the customer fully controls, so discovery, cut, verification and restore can be measured against agreed criteria.
On-premises AI cluster
GPU racks you own, one or two rooms, a known set of power and network paths.
Robotics test facility
Physical machines with agents in the loop, where a clean stop and safe restart matter most.
Isolated operational system
An OT or edge environment with bounded connectivity and clear ownership.