https://github.com/aicent-stack/rpki
AI-native Zero-Trust security layer. Parallel tensor watermarking and RPKI-based identity attestation. 300µs quarantine for malicious pulses.
https://github.com/aicent-stack/rpki
ai ai-infra aicent depin embodied-ai gtiot low-latency rpki rttp rust security sovereign-ai zcmk zero-trust zero-trust-ai
Last synced: 2 months ago
JSON representation
AI-native Zero-Trust security layer. Parallel tensor watermarking and RPKI-based identity attestation. 300µs quarantine for malicious pulses.
- Host: GitHub
- URL: https://github.com/aicent-stack/rpki
- Owner: Aicent-Stack
- License: apache-2.0
- Created: 2026-03-26T15:04:36.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2026-04-04T12:35:00.000Z (3 months ago)
- Last Synced: 2026-04-04T13:14:40.273Z (3 months ago)
- Topics: ai, ai-infra, aicent, depin, embodied-ai, gtiot, low-latency, rpki, rttp, rust, security, sovereign-ai, zcmk, zero-trust, zero-trust-ai
- Language: Rust
- Homepage: http://rpki.com
- Size: 105 KB
- Stars: 1
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
[](https://github.com/Aicent-Stack/aicent-stack/actions/workflows/rust-ci.yml)
Aicent Stack • Sovereign AI Nervous System
# 🔴 rpki — The Immune System of Aicent Stack
Parallel Tensor Watermarking & Pathogen Isolation Protocol [RFC-003]
[](https://github.com/Aicent-Stack/manifesto/blob/main/rfcs/RFC-003-RPKI-IMMUNITY.md)
[](#)
[](http://rpki.com)
⚪ AICENT | 💎 RTTP | 🔴 RPKI | 🟢 ZCMK | 🟡 GTIOT | 🟣 AICENT-NET
> *"Security is not a firewall; it is a biological reflex. RPKI doesn't just block; it swallows the pathogen before it reaches the brain."*
`rpki` is the immune system of the **Aicent Stack**. It is a purpose-built, tensor-native security layer designed for a **six-domain biological AI organism**. It treats every [RTTP](https://github.com/Aicent-Stack/rttp) Pulse Frame as a potential antigen, performing full-spectrum verification of identity, provenance, and intent at wire speed with zero added latency to the nervous system.
---
## 🛡️ Eliminating the "Security Tax" (RFC-003)
RPKI provides the **Immune-Infrastructural Interface** for sovereign intelligence, moving the verification pipeline into hardware-accelerated, parallel SIMD lanes.
| Traditional Security Tax | Legacy (TLS/DPI) | **RPKI Countermeasure** | **Measured Gain** |
| :--- | :--- | :--- | :--- |
| **Verification** | Sequential Handshake | Parallel Immune Pipeline | **+0µs Added Latency** |
| **Inspection** | Deep Packet Inspection | **In-band Watermarking** | **300µs End-to-End** |
| **Bottleneck** | Centralized CA/OCSP | Immutable RPKI Merkle DAG | **No Roundtrips** |
| **Reaction** | Post-Breach Revocation | **QUARANTINE_PULSE** | **Isolated in <300µs** |
---
## 🔬 Core Immune Innovations
### 1. In-band Tensor Watermarking
RPKI embeds an **immutable cryptographic watermark** directly into the compute manifold (tensors).
- **ROA-Style Provenance:** Uses signal-to-noise modulation that is mathematically invisible to inference but extractable in constant time.
- **Hijack Detection:** Any downstream modification to a single token in the KV-delta triggers an instant watermark mismatch.
### 2. Parallel SIMD Pipeline: Zero-Latency Defense
The RPKI pipeline leverages **AVX-512/Tensor Cores** to run 4 independent, lock-free lanes simultaneously:
1. **Merkle Audit:** Hash verification against the local RPKI DAG cache.
2. **Watermark Extraction:** Bit-slice extraction from the tensor payload.
3. **Intent Classification:** Metadata entropy scan for MITM patterns.
4. **Sovereign Clearance:** Final attestation of AID fingerprints.
### 3. Swarm Shield (RFC-006 Integration)
In Hive mode, RPKI enables **Collective Immunity**. Nodes perform cross-attestation of watermarks across the [Aicent.net](http://aicent.net) backbone. A pathogen detected by the swarm triggers a global **QUARANTINE_PULSE**, ejecting the node in <100µs.
---
## 🏗️ Technical Heritage & Evolution
While inspired by the foundational principles of **RFC 6480** (Resource Public Key Infrastructure), this protocol evolves routing security into the realm of **nanosecond AI impulse telemetry**.
Legacy RPKI secures the "Dumb Pipe" addresses of BGP; **Aicent RPKI secures the "Data Soul"** of the AI Organism. By implementing **ROA-style attestation** at the packet level, we ensure that every atom of intelligence is verified before it is processed.
---
## 🚀 Quick Start: Testing the Immunity
Experience the sub-ms quarantine reflex and parallel scanning by running the v0.2.0 demo:
```bash
git clone https://github.com/Aicent-Stack/aicent-demo.git
cd aicent-demo
# Run the dedicated Immunity (RPKI) v0.2.0 protocol suite
cargo run --bin rpki-demo
```
---
## 📜 Technical Foundation
Refer to the official [Genesis Manifesto](https://github.com/Aicent-Stack/manifesto) for the complete protocol suite:
- **[RFC-001] Brain:** Sovereign Identity & Orchestration.
- **[RFC-002] Nerves:** Stateful Semantic Multicast.
- **[RFC-003] Immunity:** Parallel Tensor Watermarking.
- **[RFC-004] Blood:** Zero-Commission Settlement.
- **[RFC-005] Body:** Action-Collapse Framework.
- **[RFC-006] Hive:** Global Operational Grid.
---
© 2026 Aicent.com Organization. **SYSTEM STATUS: HOMEOTASIS**
---