--- title: "Node agent: Software | Nexus Observatory" description: "Node agent, inside Software: gitOps, secure update frameworks, device management, firmware resiliency and recovery and more." url: https://observatory.global/software/node-agent/ publisher: Nexus Observatory Inc. updated: 2026-10-27 --- [Nexus Observatory](https://observatory.global/) / [Software](https://observatory.global/software/) / **Node agent** # Enrolment, attestation quotes, signed updates. Node agent, inside Software: gitOps, secure update frameworks, device management, firmware resiliency and recovery and more. Every item is traced to its specification, from OpenGitOps principles to The Update Framework (TUF) specification, and runs on the open Observatory Protocol. [Plan with us](https://observatory.global/contact/) Architecture [The protocol](https://observatory.global/protocol/specification/) **Technologies**: 9 **At the frontier**: 0 **Protocol functions**: 3 of 8 **Industries served**: 3 Reference design, drawn to scale · drag to turn · hover a part **01** What it is ## OTA updates, GitOps and software supply chain. Compute placed where data is produced and decisions are needed: the device, far, near and regional edge tiers, multi-access edge computing, modular edge data centres including the AI tower in a box, servers and accelerators, storage, power and cooling, ruggedisation, fleet orchestration, OTA and GitOps, and the hardware trust that makes remote sites safe to run. How observations move from the edge into stores, catalogues and APIs with their provenance, licence and residency attached, and how they interoperate through open standards and the open Observatory Protocol. Each technology below carries what it is, what we do with it, and the standard it is drawn against. Compute and edge ### GitOps Declared desired state in version control that sites pull and reconcile, giving audit and rollback. We design, integrate and operate. OpenGitOps principles Compute and edge ### Secure update frameworks Signed, role-separated update metadata that resists compromised servers and replay. We design, integrate and operate. The Update Framework (TUF) specification · Uptane Standard (IEEE-ISTO 6100.1) Compute and edge ### Device management Lightweight management of constrained devices and gateways over unreliable links. We design, integrate and operate. OMA LwM2M Compute and edge ### Firmware resiliency and recovery Protecting, detecting and recovering platform firmware at sites no one can visit quickly. We design, operate and maintain. NIST SP 800-193 (platform firmware resiliency) Compute and edge ### Software bills of materials Machine-readable component inventories for every image and firmware build. We design and operate. ISO/IEC 5962 (SPDX) · ECMA-424 (CycloneDX) Compute and edge ### Build provenance Verifiable records of how and from what each artefact was built. We design and operate. SLSA (OpenSSF) · in-toto Compute and edge ### Secure development for industrial components Development lifecycle and component requirements for equipment used in operational technology. We design and support. IEC 62443-4-1 · IEC 62443-4-2 Compute and edge ### Staged rollout and rollback Canary, ring and site-group rollouts with automatic rollback on health signals. We design and operate. OpenGitOps principles Data, software and interoperability ### Node roles and profiles The roles a node can play and the profiles that bundle its capabilities. We design and integrate. Observatory Protocol specification (Nexus Consortium) **02** Architecture ## Where it sits, and what it speaks. Node agent draws on 2 domains and 16 layers of the spectrum; the highlighted layers carry this area. It speaks 3 of the protocol's 8 core functions. Edge tiers and multi-access edge computing 9 Modular edge data centres and the AI tower in a box 8 Servers and accelerators 8 Storage and edge data management 6 Cooling and ruggedisation 10 Kubernetes and fleet orchestration 8 OTA updates, GitOps and software supply chain 8 Confidential computing and hardware trust 8 Ingest and streaming 8 Storage and data lakes 6 Metadata, provenance and catalogues 8 Open standards and interoperability 7 APIs and SDKs 7 Licensing, residency and governance 8 Digital twins and observability 7 Open protocol interfaces and federation 8 01**Join** Identity, attestation quote, signed policy. 02**Admit** Admitted for a stated scope, nothing wider. 03**Describe** What, where, how and by whom, with calibration. 04**Time** One clock across the grid, with its error bound. 05**Observe** Every value with quality and provenance. 06**Qualify** Tested against the specification, state on record. 07**Federate** Signed exchange across grids and trust domains. 08**Orchestrate** Software and configuration by signed plan. **03** On the grid ## Every site joins one observing grid. The open networks on the grid today, over real relief and the geodesic cells we count them into. A site built here enrols into the same grid. **04** In the field ## Where this runs, sector by sector. 1 deployment scenarios from the sector research that rely on node agent. [Government and public safety Alerting integration with the Common Alerting Protocol and cell broadcastSoftware-heavy: sensor triggers feed an alert origination tool; the alert authority keeps every decision.](https://observatory.global/sectors/public-safety/) **05** Open and enterprise ## Open by default. Enterprise by contract. The open counterpart lives on the main site for anyone to read and run. The enterprise service is designed, deployed and operated with you, under contract. Open, on the main site - Node agent and SDKs (licence pending) - App methods with worked examples Enterprise, on this site - Fleet operations - Supported runtime - Team workspaces - Integration engineering **06** The rest of the line ## Software, area by area. [Software Edge runtimeOne runtime from gateway to rack to tower.](https://observatory.global/software/edge-runtime/) [Software FleetEvery node: its state, its plan, its evidence.](https://observatory.global/software/fleet/) [Software Field appsSurvey, commissioning and maintenance, offline first.](https://observatory.global/software/field-apps/) [Software app workspaceCoverage, power and timing, modelled as a team.](https://observatory.global/software/app-workspace/) [Software IntegrationsSCADA, GIS and data platforms, by typed contract.](https://observatory.global/software/integrations/) ## Bring us the site. Survey, design, deployment and operation for node agent. The form names who receives your details. [Talk to us](https://observatory.global/contact/) [contact@observatory.global](mailto:contact@observatory.global?subject=Software%3A%20Node%20agent) [Nexus Observatory](https://observatory.global/)**Software** . One runtime. Every node. Every state.[Talk to us](https://observatory.global/contact/) Software - [Edge runtime](https://observatory.global/software/edge-runtime/) - [Node agent](https://observatory.global/software/node-agent/) - [Fleet](https://observatory.global/software/fleet/) - [Field apps](https://observatory.global/software/field-apps/) - [app workspace](https://observatory.global/software/studio-workspace/) - [Integrations](https://observatory.global/software/integrations/) Technologies - [Edge tiers and multi-access edge computing](https://observatory.global/technologies/edge/edge-tiers-and-multi-access-edge-computing/) - [Modular edge data centres and the AI tower in a box](https://observatory.global/technologies/edge/modular-edge-data-centres-and-the-ai-tower-in-a-box/) - [Ingest and streaming](https://observatory.global/technologies/data/ingest-and-streaming/) - [Storage and data lakes](https://observatory.global/technologies/data/storage-and-data-lakes/) Industries - [Government](https://observatory.global/industries/) - [Civil resilience](https://observatory.global/industries/) - [Industry](https://observatory.global/industries/) Service platforms - [Observatory Protocol](https://observatory.global/protocol/) - [Protocol & Grid](https://observatory.global/grid-services/) - [Hardware & power](https://observatory.global/hardware/) - [Sensors & instruments](https://observatory.global/sensors/) - [Connectivity](https://observatory.global/connectivity/) - [Edge compute & AI](https://observatory.global/edge-ai/) - [Earth observation & GeoAI](https://observatory.global/earth-observation/) © 2026 Nexus Observatory Inc. [Privacy](https://observatory.global/legal/privacy/) [Terms](https://observatory.global/legal/terms/) [Accessibility](https://observatory.global/legal/accessibility/) [Cookie settings](https://observatory.global/privacy-choices/) [Data credits](https://observatory.global/credits/)