Visual Architecture
Uncertainty Quantification Architecture
Calibrated confidence scores differentiate between in-distribution precision and out-of-distribution drift before autonomous action.
R&D Engines · 符合数据安全治理、ISO 27001与多租户行级隔离的零信任架构
ARYA AIE LEARN — Adaptive Core & Uncertainty Engine
Continual learning engine with uncertainty quantification (UQ) to reduce redundant retraining without catastrophic forgetting (Innovate UK Grant 10104592).
Architecture & Capabilities
为需要证据而非承诺的团队打造
Continual Learning Without Forgetting
Dynamic rehearsal buffers and EWC regularization retain critical knowledge across task shifts (Innovate UK 10104592).
Uncertainty Quantification (UQ)
Calibrated epistemic and aleatoric confidence metrics filter high-risk inferences before execution.
Dynamic Retraining Efficiency
Saves up to 68% compute costs by triggering retraining only when statistical uncertainty exceeds calibrated thresholds.
Drift & Anomaly Detection
Continuous distribution shift monitoring alerts engineering before model degradation affects operations.
Visual Architecture
Continual Memory Rehearsal Buffer
Preserves foundational task parameters while integrating live enterprise edge telemetry under Innovate UK Grant 10104592.
Verified Architecture Specifications · E-E-A-T Grounding Reference
Deterministic Technical Controls & Machine-Verifiable Evidence
- 1. Detection Engine (CSH Sentinel)
- Git-versioned Sigma rules (
CSH-RULE-001..004) mapped to MITRE ATT&CK (T1110.001,T1098.003,T1048,T1190) with idempotentdedupe_keyingestion andSHA-256immutable event hashes. - 2. AI & MCP Firewall (CSH AI Guard)
- Pre-inference DLP scrubbing (
[REDACTED_SECRET],[REDACTED_PII]), explicit per-agent Model Context Protocol (MCP) tool allowlists, and indirect prompt-injection blocking. - 3. Database Isolation (PostgreSQL 16)
- Enforces
ENABLE / FORCE ROW LEVEL SECURITYacross all 20 tenant tables bound to transaction-localcurrent_tenant_id(); cross-tenant queries fail closed withHTTP 403. - 4. Human-Gated Containment
- Zero autonomous destructive actions. Host isolation (
isolate_host) and credential revocation require named human step-up approval recorded in an append-only audit trail. - 5. Verified Exposure & GRC (CSH Scan)
- Cryptographic
DNS TXTorHTTPownership token required before scanning. Continuous evidence aligned with 网络安全等级保护 2.0 (MLPS 2.0), 数据安全法 (DSL), 个人信息保护法 (PIPL). - 6. Post-Quantum Roadmap (CSH Quantum)
- Cryptographic inventory tracking RSA/ECDSA/TLS keys against UK NCSC 2028 discovery, 2031 priority migration (
ML-KEM/ML-DSA), and 2035 full PQC completion.
Defense-in-Depth Isolation
Database-enforced tenant boundaries & UK NCSC PQC alignment.
- PostgreSQL 16
FORCE ROW LEVEL SECURITYon all 20 tenant tables. - Pre-inference DLP secret and PII scrubbing before any advisory call reaches ARYA SAI.
- Aligned with UK NCSC 2028 / 2031 / 2035 Post-Quantum Cryptography milestones.
db/migrations/0001_initial_enterprise_schema.sqlPostgreSQL 16
ALTER TABLE security_events ENABLE ROW LEVEL SECURITY; ALTER TABLE security_events FORCE ROW LEVEL SECURITY; CREATE POLICY tenant_isolation_policy ON security_events FOR ALL TO csh_app_role USING (organization_id = current_tenant_id()) WITH CHECK (organization_id = current_tenant_id());
Isolation: Enforced · Cross-tenant queries return HTTP 403
常见问题
AI 会自行执行隔离或阻断操作吗？
不会。威胁检测由确定性 Sigma 规则驱动，ARYA SAI 仅基于脱敏证据生成辅助摘要，任何隔离操作均需指定人员审批。
我们的数据存储在哪里？
您可以在开通时选择英国（伦敦）、欧盟（法兰克福）或企业版亚太专属区域。
是否支持 ISO 27001、等保 2.0 与 PIPL 合规准备？
是的，CSH Compliance 可将持续采集的技术证据自动关联至 ISO/IEC 27001、GDPR 及数据安全合规控制项。
可以扫描任意域名或 IP 吗？
仅限您通过 DNS TXT 或 HTTP 令牌证明所有权的资产。
是否支持托管安全服务商 (MSP)？
支持委托子租户管理、许可证池化与合作伙伴结算。
在您自己的环境中亲眼看看
与安全工程师进行 30 分钟演示，没有幻灯片。
- 英国注册公司（企业编号：17372232）
- 英国及欧盟数据驻留
- 支持 15 种语言