Certifiable domain-agnostic assurance software.

One assurance stack for autonomous systems. Define the boundaries, enforce them in real time, prove performance afterwards.

Our Platform

Anvil

Define what your system is allowed to do.

Safety, mission and regulatory requirements translated into machine-enforceable policy.

VIGIL

Runtime assurance at the edge.

Monitors autonomous systems continuously and intervenes before constraints are violated.

Prism

Understand what happened and why.

Assurance intelligence that turns operational data into certification evidence.

Vigil

Enforce safe behavior in autonomous systems

Real-time safety monitoring that acts in unsafe situations

VIGIL runs on-platform, at the edge. It monitors the autonomous system continuously against the constraints defined in ANVIL, predicts when those constraints are about to be violated, and intervenes before they are.

Once the intervention is complete, control is handed back to the parent system.

It works whether the underlying AI is deterministic or not. It works when behavior becomes unreliable, unpredictable, or unsafe. It works without communication or data links.

VIGIL also works on human-controlled systems.

Where Vigil fits in autonomous systems architecture

Built to integrate

  • Enforces user or regulator-defined constraints on-platform, at the edge
  • Open architecture PYRAMID and A_GRA, integrates with common flight controllers including Ardupilot, PX4 and SC3
  • Low SWAP-C, low latency under 5ms
  • Supports DDS, MAVLink, RAS-A and STANAG 4586
  • Framework support for ROS and ROS 2

Built to certify

  • Meets UK SORA Operational Authorisation requirements to SAIL 6 Containment (COR 1–4), Flight Envelope Protection (OSO 18), System Safety (OSO 5), Airworthiness (OSO 4)
  • Conformant with ASTM F3269 and F3201
  • Aligned with ASTM F3442 and CAP3015 for Detect and Avoid
  • Designed to be certifiable to ARP4754B / ARP4761A, DO-178C DAL B, ISO 26262 ASIL C and IEC 61508 SIL 2

Anvil

Define what your system is allowed to do

Assurance policy engineering. Human intent, translated into machine-enforceable rules.

ANVIL is where safety requirements, mission constraints, and regulatory obligations become policy an autonomous system can act on.

Those policies define the system’s operational boundaries and determine what happens when a boundary is approached or risks being crossed.

Policies are configurable, reusable, and independent of the underlying autonomous system, the same safety standards apply consistently across platforms, missions, and domains.

Pre-developed modules for your specific stack, operating domain, and region are available for fast integration.

Where it’s going

We’re building machine-assisted translation of human-readable rules and regulations into formally defined, verifiable policy. A direct path from written intent to runtime enforcement.

Prism

Understand what happened and why

Assurance intelligence for autonomous operations

PRISM captures and analyzes the data that matters for assurance: safety margins, policy evaluations, predicted violations, VIGIL interventions, and recovery actions.

Engineering, safety, and operations teams get a clear account of how the system behaved, why an intervention occurred, and how the assurance mechanism performed.

Across multiple missions and platforms, PRISM surfaces recurring behaviors and emerging risks to show where the autonomous system and its policies can be improved.

Evidence

PRISM produces structured assurance evidence to support safety cases, certification, regulatory engagement, and continuous improvement.

Fleet-level safety monitoring included.