Operational ontology
Link assets, identities, events and commitments while preserving provenance, uncertainty and authoritative records. Cross-organisation access is governed by each participant’s permissions, data-sharing arrangements and source ownership.
Bounded agent investigations
Bound investigations by objective, sources, tools and resource limits. Evaluate specialist models on customer-relevant tasks and retain evidence for review. An anomaly is an investigative signal, not proof of a threat.
Readiness and constrained planning
Assess quantities, qualified substitutes, capacity, lead times and shared dependencies. Compare response options against policy and mission priorities, and explain when no feasible plan exists. Digital Twins provides a complementary modelling direction.
Workforce intelligence and readiness
Research how authorised employer, qualification, skills and workforce records can be linked to operational commitments. Investigate capacity shortfalls, expiring credentials and training dependencies; compare response options under human approval. Define verification, consent, access and data ownership with participating organisations before evaluating cross-organisation workflows.
Approved response and verification
Coordinate response responsibilities across participating teams. Define approval gates and evidence of completion; reconcile partial execution before retrying and retain a review or recovery path for consequential changes.
Customer control and continuity
The deployment design targets customer-controlled cloud, on-premises and air-gapped environments. NOMAD addresses disconnected operation, visible source age and pending approvals. Access, model availability and reconnection behaviour require acceptance in each environment.