ZERO-TRUST AUTONOMY · v2.0

SECURENAV
NEXUS

0.00

ANOMALY

01DETECT

02CONTAIN

03ADAPT

04RECOVER

CMD_VEL HZ0

SPEED CAP1.0

E-STOPOFF

PROFILEnominal

FUSION C/L/O.4/.4/.2

Attack lab

IDS status: learning baseline 0/12. Launch a simulated cyber-physical attack and watch detect → contain → adapt → recover.

Mission planner

Natural language → Nav2-style waypoints

Response log

Tamper-evident ledger

Every event is hash-chained (SHA-256) like the server-side signed ledger. Tamper with an entry, then verify.

NEXUS-AI

Agentic copilot with tools: telemetry, threats, RAG, mission planning, attack sim, e-stop (engage only). mode: offline

speak replies

Connect free Groq key

Key from console.groq.com/keys. Stays in this browser only and goes only to api.groq.com. Never commit it.

Threat intel · RAG

In-browser vector search over MITRE ATT&CK for ICS, NIST 800-82, ISO/SAE 21434 and playbooks.

10 integrated layers

01Docker edge orchestration · CUDA / TensorRT

02CNN + ViT perception · ONNX / TRT FP16 INT8

03LangGraph agents · Qdrant RAG · Redis state

04SROS2 zero trust · signed governance · topic ACLs

05ML IDS · IsoForest + autoencoder + eBPF

06Gazebo / Isaac digital twin · fault injection

07FastAPI WebSocket observability hub

08CI/CD · Bandit · MyPy · Trivy

09NEXUS-AI Groq copilot · tool calling

10HSM emulator · Ed25519 + Dilithium3 hybrid

SecureNav-NEXUSv2.0

Master edition: a real, test-covered autonomy-defense platform, not just this console. The browser twin above mirrors its detection and response logic.

Repository Architecture TARA Changelog

What is new in v2

EKF spoof gatingsigned audit ledgerpolicy engine + OPAfleet CRDT revocationsigned ML modelsPrometheus + Grafananexusctl CLIK8s manifestsCodeQL + SBOM

Module map

src/fusion/ekf_fusion.pyEKF sensor fusion with chi-square innovation gating: rejects spoofed GPS, decays trust, re-weights sensors src/common/audit_ledger.pyHash-chained, Ed25519-signed, Merkle-checkpointed audit ledger (served at /api/ledger)src/common/policy_engine.pyGeofence, no-go zones, speed zones; the brain refuses violating missions (+ policy/nexus.rego for OPA)src/fleet/fleet_manager.pyHungarian optimal task allocation, heartbeats, signed revocation gossip as a CRDT, fleet-wide quarantine src/supply_chain/model_signer.pySigned model manifests; vision node refuses tampered weights when NEXUS_REQUIRE_SIGNED=1 src/security/security_ids_node.pyIsoForest + autoencoder + hard rules + eBPF; e-stop before analysis; HSM revocation src/security/hsm_emulator.pyEncrypted vault, Ed25519 + Dilithium3 hybrid signatures, signed revocations src/agents/agentic_brain.pyLangGraph: Security Audit (Qdrant RAG), Self-Healing, Mission Planner + policy gate src/vision/vision_node.pyCNN + ViT perception, ONNX / TensorRT export, backend auto-select; train_vision.py for training src/assistant/groq_assistant.pyGroq tool-calling copilot: reads state, searches RAG, engages (never releases) e-stop src/nexusctl.pyOperator CLI: keygen, sign/verify models, verify ledger, plan + policy check deploy/k8s/nexus.yamlKubernetes: default-deny NetworkPolicy, restricted pod security, PVC for ledger documentation/TARA.mdISO/SAE 21434 style threat analysis: 10 threats, controls, residual risk

Run it

git clone https://github.com/Nikhil-creat/securenav-nexus
cd securenav-nexus
pip install -r requirements/dev.txt
pytest -q
PYTHONPATH=src python -m nexusctl plan "go to (25,4) then north 6 m"
./scripts/setup_sros2.sh && docker compose up --build
docker compose --profile observability up   # Prometheus + Grafana

GitHub LinkedIn Email

0CERTS & SIMS

0PROJECTS

10PLATFORM LAYERS

SECURENAVNEXUS