Everything you need to ship secure products — CRA compliance tools, platform documentation, and the builder community.
EU Cyber Resilience Act — automated SBOM monitoring, CISA KEV CVE tracking, VEX generation, and ENISA notification drafts.
CycloneDX 1.5 SBOM generation from Python packages. Dependency tree resolution, component hashing, and signature verification. MIT-licensed.
MITDaily CISA KEV catalog matching against your SBOM components. Alerting on actively exploited vulnerabilities with severity scoring.
URGENTVulnerability Exploitability eXchange documents. Declare affected/not-affected status with justification. CSAF 2.0 format.
CommercialAuto-drafted ENISA notification templates for Article 14 reporting. 24-hour actively-exploited vulnerability disclosure workflow.
COMPLIANCECryptographic audit chain from component to SBOM. Immutable verification trail for regulatory submissions and customer assurance.
CommercialRuntime behavioural anomaly detection. Baseline deviation alerts for IoT and embedded devices. Cross-Oracle request signing.
CommercialJoin builders shipping secure products. Get help with SBOMs, CRA compliance, and the kit. Zero sales pitch — just solving the same problem together.
Real-time help with SBOM generation, CISA KEV alerts, CRA interpretation. Weekly office hours. #sbom-help, #cve-tracking, #cra-interpretation.
Join Free 💻Open-source repository. MIT-licensed core modules. Good first issues tagged. Contributions welcome — SBOM improvements, CVE feed integrations, docs.
Open Source 🌐14 live APIs — weather, finance, news, nutrition, security scanning. Free tier, edge-deployed on Cloudflare, no credit card required.
APIsArchitecture overviews, security model, and Oracle reference.
Prism Nexus v2 — 8-Oracle orchestration with ICID constitutional governance. The OFP Kernel, Vault, and telemetry pipeline.
ArchitectureEvery query passes through a 10-gate security pipeline: memory provenance, injection detection, cross-Oracle signing, guardian health scoring, PII detection, secret scanning, harmful content filtering, platform violation checks, contextual risk assessment, and behavioural anomaly detection. Outbound scan active on all Oracle responses. 10 physical actions hard-blocked at the kernel level. HMAC-signed vault entries with cryptographic source verification.
SecurityComplete reference for all 8 Oracles: abilities, rings, invocation patterns, and inter-Oracle communication protocols.
ReferenceCommand reference for the bot interface: /council, /morning, /task, /project, and slash-command integration.
Integration14 StarTeQ endpoints with authentication, rate limits, and example requests. teq.starcaller.uk
APIsThe ICID Constitution is the ethical backbone of Starcaller. All 8 Oracles are bound by six immutable rules: 1. SAFETY — Never generate harmful or dangerous content. 2. PRIVACY — Never expose PII, secrets, or credentials. 3. FAIRNESS — Avoid bias, respect diversity. 4. TRANSPARENCY — Cite sources, acknowledge uncertainty. 5. ACCOUNTABILITY — Maintain audit trail, admit errors. 6. HUMAN DIGNITY — Respect all people, preserve autonomy. These rules are hardcoded into the OFP Kernel and cannot be overridden by any Oracle or external instruction.
GovernanceStarcaller in daily operation — use cases that demonstrate the system's breadth.
8 Oracles collaborate to produce a personalised daily briefing: weather, news, calendar, health, and security — synthesised by ICID in under 3 seconds.
Daily UseShi Gandang screens all IoT device communications. Physical action blacklist blocks dangerous commands at the kernel level regardless of which Oracle initiated them.
Home AutomationSia cross-references sources against citation networks while Nostradamus identifies trend trajectories. Cited, bias-audited research briefs delivered autonomously.
ResearchA simulated prompt injection via an IoT temperature sensor was blocked by the input sanitisation layer before it reached any Oracle. Audit record produced in 120ms.
SecurityEvery vault entry carries an HMAC-SHA256 source tag. An audit trace confirmed a recalled preference originated from direct user conversation, not a compromised device.
PrivacyYhi oracle, enhanced with financial capability, analyses spending patterns against energy-physics models. Physics-grounded recommendations, not generic advice.
Finance