Initiatives · LTKAU

Lutine: governed intelligence and response.

Lutine, developed under the LTKAU Initiative, combines agentic AI and an operational ontology to investigate risk and plan accountable responses across connected systems.

Current statusIn development

Connect a signal to the operations it affects, the responses that are feasible and the evidence needed to verify the outcome.

What it isLutine connects risk investigation with accountable response planning.

Lutine is an intelligence and response system in development for government, enterprise and critical infrastructure. Its ontology connects entities, events and permitted actions across systems, with source ownership and access boundaries explicit.

The problemSeparate alerts can miss shared dependencies and operational consequences.

Procurement, logistics, infrastructure, finance, identity and cyber systems record different parts of the same operation. A compromised account, unavailable component or supplier disruption can affect multiple commitments; isolated alerts rarely show the full consequence or a workable response.

How it worksInvestigate context, assess feasible responses and verify approved actions.

Connect authorised records and investigate deviations in operating context. Planning models assess affected commitments and feasible responses. Reconcile conflicting evidence, recheck permissions, then verify the result of approved actions. Cross-organisation workflows require agreed data access, responsibilities and acceptance criteria.

Approach at a glance
  1. Detect
  2. Investigate
  3. Plan
  4. Approve
  5. Verify

Who it benefitsGovernment, enterprise and infrastructure teams responsible for readiness and continuity.

Government, enterprise and critical-infrastructure teams responsible for readiness, supply continuity, risk investigation and coordinated response. Evaluation settings can include defence sustainment, manufacturing, energy and semiconductor supply networks, with interfaces and authority defined for each setting.

Workforce planners and regional industry partnerships can scope evaluations connecting verified employers, skills and qualifications to project demand, service continuity and training dependencies.

Development focusExplore ontology, investigations, workforce readiness and controlled response.

Operational ontology

Link assets, identities, events and commitments while preserving provenance, uncertainty and authoritative records. Cross-organisation access is governed by each participant’s permissions, data-sharing arrangements and source ownership.

Bounded agent investigations

Bound investigations by objective, sources, tools and resource limits. Evaluate specialist models on customer-relevant tasks and retain evidence for review. An anomaly is an investigative signal, not proof of a threat.

Readiness and constrained planning

Assess quantities, qualified substitutes, capacity, lead times and shared dependencies. Compare response options against policy and mission priorities, and explain when no feasible plan exists. Digital Twins provides a complementary modelling direction.

Workforce intelligence and readiness

Research how authorised employer, qualification, skills and workforce records can be linked to operational commitments. Investigate capacity shortfalls, expiring credentials and training dependencies; compare response options under human approval. Define verification, consent, access and data ownership with participating organisations before evaluating cross-organisation workflows.

Approved response and verification

Coordinate response responsibilities across participating teams. Define approval gates and evidence of completion; reconcile partial execution before retrying and retain a review or recovery path for consequential changes.

Customer control and continuity

The deployment design targets customer-controlled cloud, on-premises and air-gapped environments. NOMAD addresses disconnected operation, visible source age and pending approvals. Access, model availability and reconnection behaviour require acceptance in each environment.

Illustrative operational questionIdentify exposed commitments and qualified alternatives when a supplier fails.

If a supplier becomes unavailable, which commitments are exposed across participating organisations, which substitutes are qualified, and which allocation preserves priority work? An evaluation would test the impact assessment, feasible responses and verification of authorised changes.

EvaluationTest investigation quality, planning feasibility and verified outcomes.

Compare the integrated workflow with existing practice using authorised data. Measure investigation quality, false alarms and missed events, planning feasibility, time to an approved response and correctness of verified outcomes. Test stale inputs, conflicting evidence, permission revocation, partial execution and disconnected recovery.

For workforce applications, evaluate employer and qualification verification, information freshness and permitted sharing, alongside the usefulness of shortage forecasts and planning options. Assessment criteria are agreed with workforce and training specialists.

EngagementScope one operational question, its data sources and action authority.

Lupotek’s public preview uses illustrative records. Scope one operational question with its source systems, action authority and baseline; establish available functionality through integration, testing, security assessment and customer acceptance.