How Aegis works

A decision chain in which design, assessment, approval and operation remain separate, with reviewable evidence at every stage.

ASSURANCE LOOP

Unit of analysisSystem + portfolio

DecisionFIT · FIT WITH CONTROLS · NOT FIT YET · SPECIALIST REVIEW

EvidenceVersioned Assurance Case

ActivationHuman authorisation only

Seven stages to stop speed replacing judgement.

Orbyn bounds process, autonomy, permissions, human control points and failure conditions.

Aegis examines risk, available evidence, hard stops, uncertainty and required controls.

ARIA pressures the exact version and records reproducible findings, not impressions.

A named person accepts, conditions, rejects or refers the case for specialist review.

Vigilance watches drift, incidents, permissions and material changes after deployment.

The system or portfolio returns to the gate when the basis of the decision changes.

The methodological core is an Assurance Case: a precise claim supported by argument, evidence, assumptions and explicit limits.

E0–E1Claim or informal evidence. Not sufficient for material decisions.

E2Documented and traceable evidence, still limited.

E3Reproducible test, independent review or authoritative source.

E4Multiple, independent and consistent evidence for the declared scope.

The decision always includes scope, residual risk, uncertainty, expiry and revalidation triggers.

Each stage produces a decision, an accountable owner and enough evidence for the next stage not to rely on blind trust.

NeedOrbyn→DesignBlueprint→AssessmentAegis→PressureARIA→AuthorisationHuman→ObservationVigilance→RevalidationPortfolio

NEXT DECISION

It is which system you are prepared to authorise, under which limits and with what evidence.