It doesn't answer. It testifies.
[01] hero · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
[02] architecture · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
Centennial builds in seven planes, from bounded failure-mode analysis through machine-readable public attestation. Each plane produces its own evidence; no claim crosses a boundary without a receipt.
The stack is local-first by design: policy evaluates on-machine, evidence captures on-machine, and decisions produce receipts on-machine. Disconnected operation is the baseline, not the exception.
Plane
Plane
Plane
Plane
Plane
Plane
Plane
Gate glossary
Review gates sit in the release chain; they do not replace tests.
[03] shipped · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
Products, engines, and infrastructure in active operation. Every entry backed by a public link or receipt.
Local-first investigative evidence intelligence. Content-addressed, hash-chained archives with chain-of-custody export and a standalone verifier. macOS desktop app with a Rust kernel. Runs offline; data never leaves the machine.
Local-first macOS app for governed file cleanup: scan, review, plan, quarantine, receipt, rollback. Nothing is removed without a reversible, receipted plan.
Deterministic, fail-closed AI-code-governance CLI. Git pre-commit and CI-diff gates that emit tamper-evident evidence logs for review. Compliance-support tooling — it does not certify or replace a C3PAO.
Process governance for local AI workloads. Port, GPU, and repository collision prevention with a hash-chained audit log. Local only. Zero configuration.
Release Chain
Scan → lint → test → build → grand jury → receipt → SHIP/NO-SHIP.
Recursive Artifact Engine
Structured evidence synthesis with cycle-based question generation and delta analysis.
Archivist Deep-Search
FTS5 full-text search across 149GB content-addressed corpus. Keyword and semantic retrieval.
Constraint Kernel Gate
9 constraint kernels governing worker behavior, budget, and thermal limits.
Weekday Standard
Quality bar: every claim must survive an uneventful working day with zero human intervention.
Operator Amplifier
Detects operator state and routes work to appropriate lanes.
[04] spatial · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
Dated local-corpus snapshot above; searchable public subset below. Natural-language parsing, typed labels, and evidence-chain posture stay separated from private stores.
photo artifacts
50,807
photo-entity links
243,368
Halt when provenance or quality fails policy. The website reads only committed JSON snapshots and the public-safe demo corpus, not live operator stores.
Public demo · committed subset
This module searches 6 synthetic public-safe records bundled with the site. Snapshot counts above are receipt metrics, not the searchable public subset.
Workflow: Inspect whether a record carries handling and receipt signals.
Parsed filters
keyword
tamper, sample, bag
semantic
none
spatial
none
temporal
none
entity
tamper tape, sample bag
Retrieval posture
Static hybrid facsimile: keyword, semantic aliases, spatial, temporal, and entity fields in committed JSON.
Private-data terms block results. The demo never widens into operator stores.
Low-confidence queries are labeled instead of padded with unrelated records.
Entity graph boundary
The demo explains graph-style signals; it is not a live graph backend or private archive browser.
1 result
snapshot 2026-04-22 · ready
rank 1 · demo-lab-bench
keyword + entity match over committed metadata
quality 94%
A clean bench with tamper tape, labeled sample bags, a ruler, and a printed receipt stub.
Match breakdown
keyword · weight 3
tamper, sample, bag
entity · weight 4
tamper, tape, sample, bag
keyword + entity match over committed metadata. Entity graph limit: derived labels only; no identity proof.
[05] live · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
Verified system state at build time — a dated, sanitized snapshot, not a live telemetry feed. Public reports carry only sanitized verification results; private topology and operational telemetry are not published. /receipts carries the authoritative record.
149GB · content-addressed · spatial demo online
FTS5 full-text search over a content-addressed evidence store. Dated snapshot; /receipts carries the authoritative record.
on-device routing · no cloud
Frontier and open-weight models routed under local policy on Apple Silicon. Inference never leaves the machine.
workload governance active
Port, GPU, and repository collision prevention with a hash-chained audit log across local workloads.
receipt-bearing · reproducible build
Per-section build SHA and timestamp. /receipts and /manifest.json provide machine-readable attestation.
[06] factory · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
The factory is the system behind the systems: routing, local inference, verification, and receipts. Each surface produces its own evidence; nothing ships without passing its gate.
Surface
Surface
Surface
Surface
Surface
[07] ships · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
Published packages and public demos are labeled by attestation state: registry-backed, external-only, internal, or research.
proof-01
Local-first investigative evidence intelligence. Content-addressed, hash-chained archives with chain-of-custody export and a standalone verifier. Built for offline operation on macOS.
PROOF SURFACE
ATTESTATION STATE external-only · public CDS receipt pending
LOCAL EVIDENCE PATH content-addressed segment model
RECEIPT PATH export · local verifier path
GATE PATTERN halt on missing chain / policy breach
Distribution and purchase: archivist.tools
Public CDS receipt pending SBOM/binary attestation.
proof-02
Local-first macOS app for governed file cleanup. Scan, review, plan, quarantine, receipt, rollback — nothing is removed without a reversible, receipted plan. Rust engine; runs offline.
PROOF SURFACE
ATTESTATION STATE external-only · Mac App Store pending
LOCAL EVIDENCE PATH scan · plan · quarantine model
RECEIPT PATH per-action receipt · rollback path
GATE PATTERN ambiguous target → hold (no destructive write)
Distribution: archivist.tools (Mac App Store pending).
proof-03
Process governance for AI workloads on a single machine. Port, GPU, and repository collision prevention with a hash-chained audit log. Local only. Zero configuration.
PROOF SURFACE
ATTESTATION STATE registry-backed
LOCAL EVIDENCE PATH repository · port · GPU bind checks
RECEIPT PATH hash-chained log (on-machine)
GATE PATTERN collision → halt before bind
Published package: fleet-watch (PyPI).
proof-04
Deterministic, fail-closed AI-code-governance CLI. Git pre-commit and CI-diff gates that emit tamper-evident evidence logs for review. Compliance-support tooling — it does not certify or replace a C3PAO.
PROOF SURFACE
ATTESTATION STATE registry-backed
GATE PATTERN git pre-commit · CI diff pass
RECEIPT PATH tamper-evident evidence record
LOCAL EVIDENCE PATH ambiguous change → halt (fail-closed)
Published package: sworncode (PyPI).
Buddy Core — Behavioral regulation runtime. Operator state as a governed input to system safety. Phase 1, internal.
Agent Civilization / P1 — Research-track submission package prepared; not product proof. Demo artifacts stay separate from canonical evidence.
[08] build · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
[09] believe · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
Most software assumes the network is always there. Centennial assumes it is not.
High-consequence work often happens disconnected: shipboard, airborne, forward-deployed — places where cloud policy and opaque remote behavior are liabilities.
Local-first surfaces avoid cloud dependency where stated. Policy is evaluated locally. Evidence is captured locally. Decisions produce receipts. Uncertain states halt.
Development follows the same rule: no wishful availability, no unverifiable authority.
Receipts prove what happened under policy; they do not replace it.
[10] who · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
CJ Chanhnourack is the founder of Centennial Defense Systems and the principal engineer–operator behind its governed local-first work.
Pattern: technical publishing, self-hosted stacks, multi-machine local inference, and disciplined supply-chain-style release habits applied to software that must preserve state, evidence, and policy under pressure.
Centennial formalizes that pattern as evidence-gated engineering: models assist under receipts; policy and release authority stay with the operator.
Writing: The Internal OS on Substack — cjchanh.substack.com
Code: github.com/cjchanh
[11] engagements · sha:d5281a6d8de1 · build:2026-06-21T03:55:58.418Z
Four paths, depending on what you need:
Explore — Public docs and machine-readable evidence. No contact needed. Start at the Trust Center, walk the capability demo, or browse the architecture above.
Pilot — Evidence brief pilot for white-label, traceable client deliverables. Scoped engagement with public-safe outputs. See pilot scope.
Product — Archivist direct purchase at archivist.tools. Fleet Watch: pip install fleet-watch. Sworn: pip install sworncode.
Engage — Custom work, R&D partnership, or technical advisory. contact@centennialdefense.systems for principal review.
No intake form. No automated scheduler. Each engagement path leads to a real person and verifiable evidence.
Sample output · synthetic
A before/after of what Archivist turns scattered evidence into — a structured, cited, chain-of-custody case package. Built on synthetic data; not a customer engagement.
View the sample brief →