Security

Both AI models run directly on your resources. Your infrastructure data stays on your infrastructure. Only billing metadata leaves for usage tracking.

Local AI Execution

Each agent runs two AI models directly on your resource: TernaryPhysics-7B for conversational investigation and the TNN™ (Ternary Neural Network) for anomaly detection. Both run on CPU — no GPU required. Your infrastructure data never leaves the resource. Only billing metadata (GB processed) is sent to our servers.

How We Keep You Secure

Local AI Execution

  • Both AI models run on your resource
  • No GPU required — runs on CPU
  • TNN™ anomaly detector: sub-millisecond
  • TernaryPhysics-7B: real-time on CPU

Your Data Stays Local

  • Infrastructure data never leaves your resource
  • Only billing metadata sent (GB count)
  • Credentials never leave your machine
  • Logs and metrics stay on-premise

Minimal External Dependency

  • Model downloads once per resource
  • No cloud AI APIs — fully local inference
  • No persistent connection required
  • Export audit logs to your SIEM

Human-in-the-Loop

  • Reads autonomously, writes require approval
  • Dangerous commands need explicit "yes"
  • All commands logged locally
  • You control what agents can access

Agent Security Model

Least Privilege Access

Agents request only the minimum permissions required for their function. A PostgreSQL agent only needs read access to system tables—it never requests write permissions unless explicitly enabled for remediation.

Approval Workflows

Any action that could modify your infrastructure requires explicit approval. Agents categorize commands as safe (read-only) or dangerous (mutations), and dangerous commands are blocked until you approve them.

Credential Handling

Credentials are read from your local environment variables or config files. They're never written to disk by our tools, never logged, and never transmitted anywhere.

Open Source Agents

Every agent's code is available for inspection. You can see exactly what commands an agent can run, what data it accesses, and how it processes information.

What We Never Do

  • ✕We never send your infrastructure data off-resource
  • ✕We never store or log your credentials
  • ✕We never use your data to train AI models
  • ✕We never execute write commands without your approval
  • ✕We never proxy your queries through cloud APIs

TNN Mesh™ Security

The TNN™ (Ternary Neural Network) is our proprietary technology that handles mesh communication security. Every packet sent between agents is cryptographically signed using our Patent Pending TNN™ signature scheme.

  • No PKI or certificate management required
  • Sub-millisecond signature computation
  • Secure agent authentication
  • Mesh communication stays within your network

TNN™ and TNN Mesh™ are Patent Pending technologies of TernaryPhysics LLC.

Vulnerability Reporting

Found a security issue? Please report it responsibly by emailing us directly.

ops@ternaryphysics.com