Two planes, one Postgres, zero ungrounded claims.
A business plane handles auth, tenancy and configuration. A high-throughput data plane owns the canonical intelligence model — bitemporal, partitioned, Ed25519-signed, isolated per tenant by row-level security. An AI service sits over the top and is never allowed to invent.
Ingest
Live and open-tier feeds — AIS, OFAC/EU sanctions, energy grids, research literature — are normalised into signed, bitemporal observations the moment they arrive.
Resolve
Deterministic keys (IMO, MMSI, designation IDs) plus probabilistic matching collapse raw observations into entities, aliases and a relationship graph.
Detect
Event detectors fire on the stream — AIS dark-loiter, cable throughput drop, new designations, grid stress — and attach to the entities they concern.
Ask
The analyst chat answers in natural language over a typed tool layer. Every claim carries a citation; a server-side validator rejects any that don’t resolve to a real observation.
Decide
AI proposes case updates and report sections. A human approves anything that ships. Provenance, clearance and cell travel with every row.