BeachHead
Five federal-grade products on one tamper-evident core.
Federal and defense workflows need auditable, reproducible record-keeping that survives fully offline. BeachHead delivers five operational products over one shared evidence core — no network, no AI, no phone-home — with cryptographic integrity on every record.
$ beachhead p2p demo
✔ PO-40817 · 3-way match (PO ↔ receipt ↔ invoice) OK
✔ amount 1,204,388 cents · exact integer · no float
✔ signed record #233 · ed25519 · chain verified
$ beachhead verify --all
✔ every product emits the same signed primitive
Representative output — not a live instance.
●Five integrated products — a static accessibility scanner (WCAG 2.1 AA subset → VPAT-style report), NIST 800-171 approval workflows, a CMMS with asset hierarchies, cross-domain data integration with field lineage, and FAR three-way-match procure-to-pay.
●Hash-chained signed evidence — every record links to the prior one; tampering breaks verification. Deterministic via an injected clock (no wall-clock reads).
●Exact-integer-cents arithmetic — no floats anywhere in financials; parsing, display and math are panic-free.
●Atomic persistence — write-to-temp-then-rename JSON turns in-memory products into real operational systems with full audit trails, still air-gapped.
●Control-coverage readiness — maps each product's own signed evidence to a subset of Section 508, NIST 800-171 (CMMC L2) and FAR control keys. Technical self-attestation, not a certification.
0
tests, 6 crates — green first pass
0
lines of Rust
0
clippy warnings (enforced)
0
products, one trust model
Rustserdeclapblake3ed25519-dalekLTO release · stripped
ℹ
Readiness, not certification: the control-coverage scoring maps each product's own signed evidence to subsets of 508 / NIST 800-171 (CMMC L2) / FAR — technical self-attestation. Real government use requires an independent assessor (a C3PAO for CMMC, an accessibility auditor for 508). The cryptography is implemented and tested, but not externally audited.
🔒
Architecture and verified results shown. Source and binaries are private — this is a capability showcase, not a distribution.
Building for
air-gapped environments?
I build deterministic, tamper-evident systems that run with no network and prove their own integrity. Tell me the compliance regime.
Start a project →