Connected
Image the host, enroll with a one-time bootstrap, pull the current signed pack, register in the Protection console. Dual-rail receipts begin when both rails accept the first health event.
Deploy · documentation
The brief we will actually send.
Public docs describe the AEGIS-Q shape: accountless one-time TRELYAN activation, signed packs, Algorand nullifier + QRL Merkle receipts. Operator runbooks go to people on the waitlist. A protection agent should not be a drive-by download.
Shapes
Three ways a host is born.
Air-gap
Ferry a signed pack on approved media. Enroll against a local console or a delayed sync point. Evidence queues. Anti-rollback still applies. SATCOM is optional.
Break-glass rebuild
After a kill-switch or a suspected implant, rebuild from a known image and a known pack digest. The previous host identity is retired, not reused. Rails record the retirement.
Request runbooks