01 · SECURITYfor the CISO
“Did we stop it?”
Stopped cold.
Killed at the driver boundary. Zero bytes left the host.
RISK 84/100 · PROCESS KILLED
Sovereign AI Infrastructure · Kernel-Level GPU Governance · Patent-Pending
Govern every GPU.Prove every decision.
Arca/Sentry watches GPU activity at the NVIDIA driver boundary and enforces your policy on the host → allow, alert, terminate ← recording every decision to a continuous, append-only audit ledger you can export for an auditor. Air-gapped, on-host, no third party in the trust path.
For teams that control the host kernel — owned hardware or dedicated / bare-metal instances (CoreWeave, Lambda, and the like). Not for hosted-API or serverless GPU tenants.
AIR-GAPPEDLINUX + NVIDIAZERO TELEMETRYAPPEND-ONLY LEDGERSOVEREIGN BY DEFAULTHUMANOID-READY · NEXTDEPLOY IN MINUTES
From driver hook to → sealed receipt.
- 01
Hook the driver.
A 26-program eBPF layer (uprobes + ioctl tracepoints) taps the NVIDIA driver boundary; every GPU operation streams into the on-host Sentry — no code changes, no SaaS.
- 02
Score against your persona.
Each event is scored against the persona template you choose — DoD IL5/IL6, HIPAA, Custom. Your threshold decides allow, alert, or terminate the offending process. (Model-driven scoring requires the SLM entitlement build; the default install runs heuristic detection.)
- 03
Record it to the ledger.
Every decision writes to a continuous, append-only audit ledger you can export as a report for your auditor. Nothing phones home.
Mission
Watch GPU activity at the NVIDIA driver boundary and enforce your policy on the host. Record every outcome to a continuous, append-only ledger you can export as a report for a regulator or auditor. One operator persona governs the whole loop — host-native, air-gapped, no third party in the trust path.
Built for the autonomous frontier. Designed for CISOs, infrastructure leads, and sovereign AI operators.
Sentry is the product.
The rest is what it gives you.
The Sentry enforces your policy on the host. The Ledger is what it produces — automatic, tamper-evident proof of every decision. Nexus rolls that proof across many hosts once you outgrow one or two. One kernel-level engine; Linux + NVIDIA, on hardware you control.
Sentry
The kernel-level agent. In-kernel policy, operator-armed enforcement.
Direct Driver Interception
Every device→host transfer of proprietary weights, CUI, or PII is scored against your persona and recorded; your threshold decides allow, alert, or block — before bytes leave the host.
Swappable Compliance Personas
DoD (IL5/IL6) · HIPAA · Custom — via on-host SLM. The persona is the policy: you own the decision, we enforce it.
Policy-Enforced Resource Reclamation
Detects hung GPU processes the moment they start burning your bill; your persona decides whether to alert or, when you've armed enforcement, block.
Where kernel-level matters.
Four fronts. One engine. We deploy where the model is the asset and the records have to hold up for an accrediting official, a board, or a safety review.
◆
FRONT 01 · PRIMARYDefense & National Security
Defense & intel programs · todayRun AI on classified and CUI workloads with a kernel-grade audit ledger your accrediting official can read. Model-weight and CUI transfers are scored at the NVIDIA driver boundary and sealed into the ledger — your policy decides allow, alert, or block. Fully air-gapped, no phone-home. Space and national-security programs included.
FedRAMP HIGHDoD IL5/IL6STIGCMMCCUI
READ THE DEFENSE CASE →ACCREDITED ENCLAVE · AIR-GAPPED
LEDGER SEALED · FEDRAMP · STIG · CMMC
▸ PRESS START
$
FRONT 02Proprietary Weights
AI labs & fintech · todayWhen the model is the IP, the weights are the target. Every oversized ioctl is scored at the driver boundary and sealed into the ledger; your persona threshold decides allow, alert, or block. For AI labs, fintech, and any shop where the model is the business.
▸ PRESS START
+
FRONT 03Healthcare AI
Health-AI vendors · todayHealth-AI vendors prove how PHI was handled on every GPU. Each launch and ioctl is scored at the driver boundary and sealed below the application as kernel-grade evidence for HIPAA and FDA SaMD review — the tamper-evident ledger you hand to every hospital customer's auditor.
▸ PRESS START
⊙
FRONT 04 · 2027 · ROADMAPRobotics
Humanoid & drone fleets · 2027Kernel-level policy gates for the specialized AI accelerators inside autonomous fleets, where software lag is a safety risk, not a performance issue. Same Sentry, smaller footprint.
▸ PRESS START
One event.
Three sets of eyes.
The same kernel event, mapped to the question you're paid to answer. CISO, compliance, CFO: pick the lens, read the receipt.
● LIVE11:02:19// THE EVENT — captured on-host
A short-lived process tried to copy 14 GB of model weights off the GPU. Arca scored it and stopped it at the driver — before a byte left the host.
▾ ONE RECEIPT · THREE QUESTIONS ▾
02 · COMPLIANCEfor the auditor
“Can I prove it?”
On the record.
Matched to HIPAA §164.312(e)(1) and signed into a tamper-evident chain.
REGULATOR-READY · CASE #AV-2026-9921
03 · ROIfor the CFO
“What did it save?”
$170,508 a year.
GPU-hours reclaimed and +12% VRAM headroom freed — on a single H100.
$40.46 THIS EVENT · 47 BLOCKED IN MAY
SAMPLE FLEET · 512×H100 · 7D ROLLINGYour GPUs aren’t busy.
Your GPUs aren’t busy.
They’re waiting.
Standard tools report 100% GPU utilization and call it healthy. We time GPU memory-staging at the driver to estimate how much of that time is your fleet waiting on memory rather than computing — often a large share, and much of it reclaimable.
NVIDIA-SMI REPORTSGPU utilization — whether the silicon is busy
100%busy ≠ workingVERDICT · “HEALTHY”
ARCA SENTRY MEASURESactive compute — the nanosecond truth at the driver
0%0% MEMORY-WAIT · WASTEVERDICT · MEMORY-BOUND, RECLAIMABLE
Every dot is a GPU minute.
The bright ones are real work.
We see every kernel launch on every host. The Ledger seals it. Below is one normal week on a sample 24-GPU fleet. The dim stretches are where your CFO is paying for nothing — and where Sentry's zombie policy reclaims VRAM in real time.
GPU minutes observed:5,040
WeekdayActive:749Idle:1,771
09:0010:0011:0012:0013:0014:0015:0016:0017:0018:0019:0020:0021:0022:0023:00
WeekendActive:293Idle:2,227
09:0010:0011:0012:0013:0014:0015:0016:0017:0018:0019:0020:0021:0022:0023:00
From data center
to physical AI.
The Sentry and its Ledger are live and deployed today. Nexus is the fleet hub you add once you run more than a host or two. The same kernel-level engine is next being retargeted at the LLM cores inside humanoids and drones.
OPTIONAL · AT FLEET SCALEAT SCALE
Arca Nexus · THE FLEET HUB
FLEET HUB · OPTIONAL · INSIDE YOUR PERIMETER
For teams operating many Sentries, one hub per perimeter rolls every host’s verdicts into one place: air-gap deployable, inside your environment, no third party in the loop.
LIVE// NEXUS FLEET · SECURED STREAMidentity verified
DELIVERYnever lost
RETRIESde-duped
DEPLOYair-gapped
// TRAJECTORYLIVE
2026 · LIVE
Sentry + Nexus
9 PHASES SHIPPED
VISION
Physical AI
ROBOTS · DRONES · IN DESIGN
Read the spec.
Read a sample
ledger.
White-glove deployed by our engineering team. You don’t install it. We do. Browse the surface first; talk to us when you’re ready.