Product Architecture

Six specialized engines.
One unified attribution platform.

Deploy individual modules or the complete suite. Every engine streams events into a tamper-evident audit log.

Core Protection & Attribution Engines

Build-Time & Export Markers
Source Code & Repos

Covenant Code Shield (SCS)

Injects per-seat, non-destructive AST and whitespace markers into source code during export or CI/CD build phases.

  • Supports Python, JS/TS, Go, C++, and Rust
  • Resists minification, variable renaming, and refactoring
  • Zero impact on runtime execution speed
code_shield.py
$ covenant sign-repo --seat dev-42
[+] AST Parsed 142 files
[?] Embedded 32-bit attribution key
Documents & Research

R&D Covenant Vault

Time-locked document vault with Shamir key sharding and per-recipient micro-kerning PDF watermarking.

  • Shamir secret sharing for multi-custodian approval
  • Time-locked automatic decryption triggers
  • Invisible per-download character kerning markers
vault_lock.sh
$ covenant vault lock formula_v3.pdf
Key Shards: 3 of 5 required
[?] AES-256-GCM + Watermark Active

Forensics & Threat Intelligence

Signal Recovery & Active Crawling
Forensic Extraction

AI Covenant Forensics

Multi-scale extraction pipeline using ESRGAN super-resolution and Wiener filtering to extract markers from screen photos.

  • Multi-scale ZWSP & LSB signal recovery
  • Platt-scaled confidence probability scoring
  • Generates cryptographically signed PDF evidence reports
forensics_scan.py
$ covenant trace leak_photo.jpg
CONFIDENCE: 99.4% (Platt Scaled)
RECOVERED: Seat #E-0047
Active Monitoring

DLP Hyper Orchestrator

Continuous sweep orchestrator with real-time SSE & WebSocket event streams, PPO threat honeypots, and SIEM exporter.

  • Real-time threat monitoring stream
  • PPO Reinforcement Learning decoy honeypots
  • CEF & Splunk compatible SIEM audit logs
dlp_stream.ws
CONNECT ws://localhost:8000/stream
[ALERT] Canary File Accessed: seat_12
[?] SIEM Log Dispatched

Workplace Risk & Creator Protection

Consent-Gated & Media Fingerprinting
High-Security Workspaces

Covenant Workplace (CVM)

Consent-gated screen, keystroke, and gaze dynamics monitoring for clean rooms, pharma labs, and trading desks.

  • Keystroke dynamics biometrics & gaze estimation
  • GDPR Article 25 compliant (local processing only)
  • Opt-in consent policy enforcement
cv_monitor.py
Subject: Operator #402
Consent Verified: True
Keystroke Biometric Match: 98.7%
Media & Independent Artists

Covenant Creator Shield

Perceptual hashing (pHash) for audio, video, and digital art with automated DMCA takedown notice generation.

  • Shazam-grade audio & video fingerprinting
  • Revenue loss estimation calculator
  • One-click automated DMCA legal generator
creator_dmca.py
$ covenant scan track_final.wav
[MATCH] Found on 3 platforms
[?] DMCA Notices Generated