~/oversight/architecture/

// Architecture

Every deployment follows a three-layer model designed for the reality of maritime operations — intermittent satellite links, no IT crew onboard, and the need for shore teams to see what's happening in real time.

Edge Layer

Rugged hardware installed on the vessel that connects to existing sensors — navigation, engine, weather, position. Stores weeks of telemetry locally during satellite dropouts and syncs automatically when the connection returns.

hardware

Under $800, tamper-resistant, no moving parts

connectivity

Designed for 256 kbps satellite links

storage

Weeks of local buffer during outages

priority

Critical alerts go through immediately

Core Layer

Shore-side processing that aggregates data from all vessels into a single fleet-wide view. Runs threat detection, anomaly correlation, and generates plain-language incident reports.

processing

Real-time ingestion from all edge nodes

detection

GPS spoofing, VSAT intrusion, nav system anomalies

integration

Feeds into your existing SIEM — no rip-and-replace

research

Three peer-reviewed papers back detection rules

Operations Layer

24/7 monitoring with an automated alert pipeline. Incidents are triaged, analysed, and reported in plain language — actionable intelligence for fleet managers, not raw data for security engineers.

monitoring

Continuous fleet-wide visibility

alerts

Automated triage and prioritisation

reporting

Plain-language incident reports

compliance

Audit trail for PSC and insurance evidence

Mesh Network

All layers connect over an encrypted zero-trust mesh network with live topology visibility. Direct connections when available, relayed through the fastest path when not.

security

End-to-end encrypted, zero-trust model

routing

Automatic failover — direct or relayed

visibility

Live topology showing connection quality

reliability

Works through any satellite link

Built for environments where standard IT security models don't apply — maritime vessels, industrial networks, research infrastructure, and distributed operational technology.