Where science actually begins
We design, build and verify software and AI systems for organisations that need control of their data, operations and infrastructure.
What we publish, counted now
The counts load in your browser.

What do you want to do?
Choose what you came to do and its layer comes forward. Every link is a published record or a working page; find your route if none fits.
Inside the platform
See how a change is checked
A change has a named caller, a current grant, a result and a record you can inspect with the right access.
Read the evidence register or inspect the security controls.
-
IdentityEstablish who is making the change.
- Who acts
- The session check or the API key check for a machine caller.
- Takes
- The session cookie and its request token or the API key.
- Produces
- The acting principal, loaded from the identity record.
- If refused
- The request is answered 401 and nothing is read or changed.
-
AuthorityDecide whether this principal may perform this operation on this resource.
- Who acts
- The authority layer, from grants the runtime can read and never write.
- Takes
- The principal, its current grants, the operation and the resource.
- Produces
- An allow decision bound to the request, with the request itself recorded.
- If refused
- The request is answered 403; the refused request stays on the record.
-
TransactionCarry out the authorised change.
- Who acts
- The operation that owns the data, in one database transaction.
- Takes
- The validated request and the state it was checked against.
- Produces
- The committed change.
- If refused
- The transaction rolls back and no partial change remains; a stale revision is answered 409.
-
EvidenceRecord what happened.
- Who acts
- The evidence layer, inside the same transaction as the change.
- Takes
- The principal, the grant, the operation, the resource and the outcome.
- Produces
- An entry linked into the hash chain, verifiable by recomputation.
- If refused
- If the entry cannot be written the change does not commit either.
Most changes commit with their audit record. Workflow approval decisions and run expiry commit first, then report whether the record was written.
Intelligence and digital agency
A native model, and what it actually did
AGI is our intelligence initiative and its language model is our own and we trained it and we serve it on our own host. The figures beside this text are that answer and we read them when this page was rendered and they show generation 1 and how many decisions the model took instead of its teacher completing them.
The portal is the operating environment and it is not the intelligence. The AGI page states the programme and the governed execution underneath it and the measurements of the core itself.
Read what the model reports and what we claimCommission engineering
Agree what delivery means
Set the scope, acceptance tests and responsibilities before work starts. Agree what you need to operate, maintain and recover the system after handover.
See the engineering stages and deliverablesLast reviewed 22 October 2026.