a11oy Sentinel — drift detector

a11oy Sentinel is the security-posture & observability vertical of a11oy.

Name origin. Sentinel is an English role name — the guard who watches a boundary. Its job matches the name: a11oy Sentinel watches the cyber-posture surface and raises a flag when it drifts.

Overview

a11oy Sentinel is the anomaly-detection and observability substrate of a11oy. It models enterprise cyber posture as a Kitaev surface — security state is a topological surface, and drift is the deviation from the ground-state configuration.

Frontier capability. First Kitaev-surface posture-drift detector on a Λ-axis-governed observability fiber — Lutar/QEC/KitaevSurface formal lattice basis (Ouroboros Thesis DOI 10.5281/zenodo.20434276).

Anatomy mapping: a11oy Sentinel is the operational face of the Hukulla immune system and the OTel-VSP nervous/observability fiber.

How it works

1. Continuous posture scoring — a real-time topological stability score across the surface.
2. Drift events — any delta beyond the policy threshold raises a classified event.
3. Incident queue — events ranked by CVSS-weighted severity.
4. Policy gate — every remediation passes the a11oy Covenant gate.
5. Proof chain — every response is sealed in the SZL audit fiber with full attribution.

The Kitaev-surface stability model gives an objective stability scalar rather than a hand-tuned alert threshold — drift is measured against a topological ground state.

API / install

git clone https://github.com/szl-holdings/a11oy.git
cd a11oy
pnpm install
pnpm test

Example — score posture drift

import { driftScore } from '@szl/a11oy'

const report = driftScore({ baseline: surfaceA, observed: surfaceB })

console.log(report.stability) // topological stability score
report.events
  .sort((a, b) => b.cvss - a.cvss)
  .forEach(e => console.log(e.id, e.cvss, e.requiresApproval))

Source & evidence

• Repo: a11oy
• Model: Kitaev-surface basis in the Ouroboros Thesis (10.5281/zenodo.20434276), Lutar/QEC/KitaevSurface
• DOI: 10.5281/zenodo.20434276
• License: Proprietary