UNENROLLED
DISCOVERED
ATTESTING
IDENTITY_ISSUED
POLICY_BOUND
PLAN_STAGED
LOCAL_READY
DEGRADED
QUARANTINED
REVOKED
Plan v2 · signed, immutable
Instrument · observing
Site · journal, lease
Fleet controller
10 km
20 km
30 km
40 km
Mast
Building the scene…
Software · Explainer
A node agent that enrols, attests and updates every node. A fleet view that shows each node with its state, its plan and its evidence. Signed plans that roll out in waves and roll back on their own. A journal that keeps observing when the link drops.
01 · Enrolment
A node boots with nothing but its hardware. It is discovered, attests with measured boot evidence, receives an identity, binds a signed policy and stages a plan before it may run anything. Pick an outcome and run it; each move shows the guard that allowed it.
Outcome
Run
02 · Fleet
The fleet view is a projection built from evidence, not from labels nodes report about themselves. Filter by state and watch nodes move as plans land and links come and go.
Show
03 · Signed plans
A release is built from controlled source with an SBOM and provenance, signed, compiled into an immutable plan and rolled out in waves inside a blast-radius limit. Every node verifies the plan, applies it, checks health and keeps its last known-good state.
04 · Store and forward
When the central path is lost, the site keeps operating inside its authority lease, journaling events with their identities unchanged. On reconnect it sends a replay batch; dispositions come back per event and conflicts stay explicit.
05 · the Nexus Observatory app
the Nexus Observatory app models a site as a team: where the mast goes, what it can reach, which instruments fall inside the radio horizon. Over a smooth Earth with standard refraction the horizon is d = 3.57 (√(k·h₁) + √(k·h₂)) km, k = 4/3; over real terrain, line of sight decides.
06 · Integrations
The runtime speaks the standards the observing world already uses, so SCADA, GIS and data platforms connect by contract, not by custom glue. Pick a standard to see the role the protocol gives it.
A node agent that enrols, attests and updates every node. A fleet view that shows each node with its state, its plan and its evidence. Signed plans that roll out in waves and roll back on their own. A journal that keeps observing when the link drops.
A node boots with nothing but its hardware. It is discovered, attests with measured boot evidence, receives an identity, binds a signed policy and stages a plan before it may run anything. Pick an outcome and run it; each move shows the guard that allowed it.
The fleet view is a projection built from evidence, not from labels nodes report about themselves. Filter by state and watch nodes move as plans land and links come and go.
A release is built from controlled source with an SBOM and provenance, signed, compiled into an immutable plan and rolled out in waves inside a blast-radius limit. Every node verifies the plan, applies it, checks health and keeps its last known-good state.
When the central path is lost, the site keeps operating inside its authority lease, journaling events with their identities unchanged. On reconnect it sends a replay batch; dispositions come back per event and conflicts stay explicit.
the Nexus Observatory app models a site as a team: where the mast goes, what it can reach, which instruments fall inside the radio horizon. Over a smooth Earth with standard refraction the horizon is d = 3.57 (√(k·h₁) + √(k·h₂)) km, k = 4/3; over real terrain, line of sight decides.
The runtime speaks the standards the observing world already uses, so SCADA, GIS and data platforms connect by contract, not by custom glue. Pick a standard to see the role the protocol gives it.
Global Privacy Control detected. We have honored it as your request to opt out of the sale and sharing of your personal information and of targeted advertising.Signal Global Privacy Control détecté. Nous l'avons respecté comme une demande d'opposition à la vente et à la communication de vos renseignements personnels ainsi qu'à la publicité ciblée.
Cookie policyPolitique relative aux témoins Privacy policyPolitique de confidentialité Do Not Sell or Share My Personal InformationNe pas vendre ni communiquer mes renseignements personnels
Your browser sent a Global Privacy Control signal. We treat it as a refusal for the purposes marked below, and those switches stay off.Votre navigateur a envoyé un signal Global Privacy Control. Nous le traitons comme un refus pour les finalités indiquées ci-dessous, et ces interrupteurs restent désactivés.
Needed for the site to work, to keep you signed in, to protect it from attacks and to remember your privacy choices and the settings you pick. Always on.Nécessaires au fonctionnement du site, pour vous garder connecté, le protéger contre les attaques et retenir vos choix de confidentialité et les réglages que vous choisissez. Toujours actifs.
Remember optional settings beyond the ones you pick yourself. Off until you allow it.Retenir des réglages facultatifs autres que ceux que vous choisissez vous-même. Désactivés tant que vous ne les autorisez pas.
Count visits and see how pages are used, so we can improve the site. Off until you allow it.Compter les visites et voir comment les pages sont utilisées, afin d'améliorer le site. Désactivés tant que vous ne les autorisez pas.
Show videos, maps and live data layers from other providers. They receive your IP address and may set their own cookies. Off until you allow it, or load a single item once.Afficher des vidéos, des cartes et des couches de données en direct d'autres fournisseurs. Ceux-ci reçoivent votre adresse IP et peuvent déposer leurs propres témoins. Désactivés tant que vous ne les autorisez pas, ou chargez un seul élément une fois.
Measure campaigns and personalise advertising. We use none today. Off until you allow it, and refused when your browser sends Global Privacy Control.Mesurer les campagnes et personnaliser la publicité. Nous n'en utilisons aucun actuellement. Désactivés tant que vous ne les autorisez pas, et refusés lorsque votre navigateur transmet le signal Global Privacy Control.
Nexus Observatory Inc. keeps a record of each choice as proof: a random consent ID, the time, your region and the rules applied, the choices, the notice shown, the page, a shortened IP address, a one-way code of your browser type and, if you are signed in, your account. Records are kept while your choice applies and for 3 years after, then deleted.Nexus Observatory Inc. conserve un registre de chaque choix à titre de preuve : un identifiant de consentement aléatoire, l'heure, votre région et les règles appliquées, les choix, l'avis affiché, la page, une adresse IP abrégée, un code à sens unique du type de navigateur et, si vous êtes connecté, votre compte. Les registres sont conservés tant que votre choix s'applique et pendant 3 ans par la suite, puis supprimés.