CISO Dossier

Security Scope & CISO Briefing

Honest boundaries. No marketing fluff.

What It Is

  • Local, offline Windows security tool.
  • Job Object wrapper for local autonomous AI.
  • Behavioral scoring engine (NCSC-aligned).
  • Last line of defense on the endpoint.

What It Is Not

  • Not an antivirus or EDR replacement.
  • Not a firewall.
  • Does not control pure cloud/API agents.
  • Source code is not sold.
Assurance

Technical Security Briefing

This briefing outlines the architectural and cryptographic guarantees established within the Opure Sovereign Agent Security platform. It demonstrates strict alignment with the UK Sovereign AI Procurement standards, verifying zero-trust isolation and audit persistence.

1. OS Containment Parity

The execution boundaries abstract over the underlying OS to enforce hardware-backed isolation:

  • Windows (Job Objects): Utilizes strict nested JOBOBJECT_EXTENDED_LIMIT_INFORMATION directives (JOB_OBJECT_LIMIT_KILL_ON_JOB_CLOSE). Instantly destroys spawned process trees upon boundary compromise or agent termination without leaving residual orphans.
  • Linux (Cgroups v2): Maps containment to strict /sys/fs/cgroup/ virtual filesystem directories. Employs hard resource quotas (memory.max) and zero-latency process sweeps (cgroup.kill) to maintain identical deterministic termination parity with Windows.

2. NativeAOT Compiler Metrics

The enclave binaries are compiled using strict .NET 10 NativeAOT constraints (PublishAot=true, TrimMode=full, OptimizationPreference=Speed):

  • Zero Reflection: Employs advanced source-generated serialization (JsonSourceGenerationMode.Metadata) ensuring the compiled footprint contains zero dynamic type invocation vulnerabilities.
  • Memory Predictability: Eliminates JIT compilation overhead and JIT-compiled dynamically executable memory regions, strictly preventing JIT-spraying and dynamic code generation exploitation vectors.
  • Cryptographic Provenance: SHA-256 binary signatures are established during the CI/CD compilation matrix to prevent sovereign supply-chain tampering.

3. NCSC Agent Risk Taxonomy Mappings

The Enclave actively monitors and intercepts systemic anomalies mapped directly to the NCSC taxonomy:

  • Privilege Escalation: Medium/Mitigate (Spawn anomalies) -> High/Reject (API Hooks).
  • Cascading Failure: Memory spikes and runaway allocations trigger immediate ContainmentResponse.Mitigate constraints.
  • Data Exfiltration: Unpermitted Network outbound signals force instantaneous ContainmentResponse.TerminateProcessTree executions.
  • Audit Compromise: Immutable Ledger tamper attempts instantly invalidate the cryptographic hash chain verification, exposing offline evidence of tampering.

4. Verified Sovereign Build Signature

Authoritative Build Manifest Thumbprint (SHA-256):

B4303AA8C6F5A60E8010CDA42D47F04BE50B99B28FE1F74F779CAD438CAACEA0

5. Sovereign Commercial Procurement Model

  • 1) Evaluation: £500 — 30-day non-production evaluation
  • 2) Year 1: £1,000 — first year production licence
  • 3) Annual: £1,500 — year 2+ renewal confirmation

Commercial terms: Clients retain compiled binaries permanently. Yearly renewal issues licence confirmation only with zero reinstallation friction. No source code is shipped.

AUTHORIZATION: Christopher Tommy Dyer | Ctrl_Alt_Haze | classified
CLASSIFICATION: Sovereign Procurement Confidential