One protocol, four products, two profiles
Sigilcore holds identity, Driftwell moves traffic, Saelvor is the radio and Irythra Watch is the console. Two profiles of Quorum Lace cover drone command and cross-domain release.
All products
Sigilcore
A radio's identity is split across its formation and exists only while a quorum is present. A captured radio holds no long-term key.
Sigilcore Transport · courier meshDriftwell
Every message is sealed, split into shards and sprayed across every bearer at once. Jam some, tap one: the message still arrives and the tap learns nothing about the key.
Driftwell Emission · the radioSaelvor
The client a signaller carries. Constant-rate emission means traffic volume no longer reveals an orders group, an H-hour or a command post.
Saelvor Operations · the consoleIrythra Watch
Which callsigns can talk, which are compromised, and where emission exposure is rising. It holds no keys and cannot unlock anything.
Irythra Watch Profile · drone C2Quorum Lace / UAS
Signed, time-boxed, geofenced intent capsules let the ground station transmit once and go quiet. A mission record that survives a court of inquiry.
UAS profile Profile · cross-domainQuorum Lace / Release
Each field carries its own release policy. One artifact reaches every reader, and each opens exactly what they are entitled to.
Release profileWhat each one replaces
| Product | For | Replaces | Removes | Status |
|---|---|---|---|---|
| Sigilcore | Signals branches, COMSEC authorities | Fill devices, KEK hierarchies, net-wide re-key drills | The key on the device | Protocol real Hardware not started |
| Driftwell | Integrators, radio OEMs, DPSUs | Primary/fallback link plans | The single link | Dispersal real ML-KEM stub |
| Saelvor | Dismounted sections, command posts | Tempo-revealing emission | The traffic pattern | Simulated COTS build next |
| Irythra Watch | Signals officers, COMSEC authorities | Management planes that can unlock the fleet | The capturable console | In design |
| Quorum Lace / UAS | UAS units | The continuously radiating GCS | The leash | Ledger real |
| Quorum Lace / Release | Coalition operations, release cells | Manual retyping across domains | The box in the middle | Policy tree real |
Status is volunteered, not extracted. The full component-by-component picture, the open problems and the kill criteria are on the engineering status page.
The binding constraint is a signals regiment willing to run a trial.
Not capital. If you can open that door, or want the architecture note and the runnable prototype to take apart yourself, we would like to hear from you.