Security at the core of the system

Digital Partner integrates multilayer protection that filters, analyzes, and validates every interaction before it reaches the AI.

×3 reinforcements T1 · T2 · Kill Switch N4+ · N5 · N6

Security is not a product, it's a property of your system.

🛡️ Integrated double protection — ×3 reinforcements

N5 — Monitoring Council · Cartographer

🛡️ Interaction zone (T1)

This is where your data, commands, and documents arrive. This zone accepts everything, but executes nothing without validation. Like a security airlock, T1 isolates risks before they spread.

Trigger: any incoming data → N5 mapping + syntactic firewall

N5 — Signaler · Recommended route

🧠 Critical observer (T2)

The brain of the system. T2 analyzes every request, distinguishes legitimate data from malicious instructions, enforces governance rules, and only lets through what is safe.

Trigger: T1-validated request → N5 flagging + N6 governance

🔗 Persistent associative memory (N4+)

N5 — Dangerous zone · Coherence map

The GPS-S system learns from every interaction to strengthen or weaken correlations between concepts. This persistent associative memory guarantees that:

  • ✅ Recommendations improve with usage (2x more accurate after 10 cycles)
  • ✅ Validated paths gradually become faster and more reliable
  • ✅ On isolated corruption, the system automatically routes around the failing node
  • ✅ Every correlation is traceable and auditable in the Proof Archive

This Hebbian reinforcement mechanism works without external supervision — it is fully deterministic and verifiable.

🦠 Ransomware resilience

Swarm · Topological invariant · Benchmark #72-73

🔍 Distributed compromise detection

Every Swarm continuously monitors the topological invariant of its memory state. A ransomware encryption attempt is detected in under one second — 10× to 30× faster than market EDR/XDR solutions.

Benchmark: detection in 0.32 s at only 5% file encryption. Cross-swarm alert in 0.18 s. 98.3% global data survival.

Multiswarm · Genomic reconstruction · Benchmark #74

🔄 Automatic reconstruction (Raid Génomique)

If a node is fully encrypted, it can be regenerated from its genomic code — distributed identity, symbolic memory, and topological proofs stored across the multiswarm. No backup restoration required.

Benchmark: 100% tamper detection on critical host files, integrity verified in < 1 ms.

🔄 P2 — Secure feedback loop

P2 · CircuitBreaker · chat_service

⚡ LLM response validation (CircuitBreaker)

Every LLM-generated response is scanned before transmission to the user. The CircuitBreaker detects jailbreak patterns, compromised content, and anomalies in responses. On critical detection, the response is blocked and replaced with a safe message.

Trigger: LLM response → ResponseMonitor → BreakerDecision (SUSPICIOUS/DANGER/CRITICAL)

P2 · T2Conscience · DecisionEngine + FeedbackLoop

🧠 T2 validation integrated into the decision engine

T2Conscience is now active in the Decision Engine and the Feedback Loop. Every user request and every feedback observation is validated before processing. REFUSE and QUARANTINE verdicts automatically block the request with full traceability.

Trigger: user request → T2Conscience.evaluate() → GO/CLARIFY/REFUSE/QUARANTINE

P2 · KillSwitch · api/app.py lifespan

⏹️ KillSwitch active at API startup

The KillSwitch is checked at every API lifecycle step. If the sentinel file /tmp/tosio_kill exists, the system logs the alert and can trigger shutdown. No request is processed without this check.

Activation: touch /tmp/tosio_kill · Deactivation: rm /tmp/tosio_kill

🛡️ Your protections

N5 — Works notice · Area under reorganization

🔒 Anti-injection firewall

A bilingual syntactic firewall (French and English) blocks prompt injection attempts — hidden instructions designed to hijack the AI's behavior. More than 20 detection patterns analyze every request in real time.

Example: if someone asks "ignore all previous instructions," the request is automatically blocked before reaching the model.

Image Sanitizer · LSB Chi-square · p < 0.01

🔍 Steganography detection in images and documents

Digital Partner analyzes every incoming image for hidden instructions in the least significant bits (LSB). The chi-square test compares pixel distributions in pairs (even/odd), catching messages invisible to the naked eye — including QR codes camouflaged by steganography. If the test fails (scipy unavailable), a fallback detector based on ASCII runs takes over.

Performance: F1=0.985, Recall=100%, detects fully steganographed images in ~10 ms

N5 — Risk map · critical_anchor_breach

🚫 Anti-jailbreak

The system detects and prevents any jailbreak attempt — techniques designed to free the AI from its safety constraints. Model responses are analyzed for abnormal behavior.

N5 — Dangerous zone · Immediate stop

⏹️ Emergency stop (Kill Switch)

An immediate-stop button, reachable in one click, cuts all system activity. In doubt, you can stop Digital Partner instantly, without going through the user interface.

N4+ — Lineage Tree · lineage_root_hash

⏪ Rewind

In case of incident, the topological history lets you return to any previously known-good state. Like a time machine, you can undo any problematic action.

N6 — Values Framework · Ethical bridge

⚖️ Ethical governance

A Monitoring Council (N5) and an ethical framework (N6) guarantee that every decision stays aligned with your values. Rules are configurable and adaptable to your context.

Proof Archive · SHA-256 · RFC 3161

📜 Transparency

The security protection code is open and auditable. Every filtering decision is logged and traceable. You can verify for yourself that the system does what it promises.

⭐ Exclusive — The most advanced security model

Reserved for critical infrastructure, this tier activates the full N5/N6/N9 protections with:

N9 — Watchman · Light fork

🔮 Preventive simulation (light fork)

Before every sensitive action, the Watchman (N9) creates a temporary copy of the Swarm to simulate the impact. If the simulation reveals degradation, the action is blocked before execution.

N5 — Retrospective · Lessons learned

📋 Full incident feedback

After every incident, the Council produces a complete retrospective report: affected navigation paths, verdicts, lessons learned, and updates to the Swarm's shared DNA.

N9 — Shield · Major emergency

🛡️ Topological shield

On coordinated attack, the Shield (N9) freezes affected zones and prepares a Swarm restructuring. Actual state (as of 2026-09-21): the freeze and the Proteus restructuring service are implemented and exercised by the test benches, but the automatic N9 → Proteus chain is not wired yet: triggering currently requires human validation. We do not present as automatic what is not yet automatic.

Frequently asked questions

How is Digital Partner protected against injections?

A syntactic firewall analyzes every request before it reaches the model. It detects known injection patterns in French and English, and blocks or asks for clarification when a request is suspicious.

Can I stop the system in an emergency?

Yes. A one-click Kill Switch immediately cuts all activity. It works independently of the user interface — even if the API is compromised, you can stop the system.

Is my data protected?

All data is processed locally on your infrastructure. Digital Partner sends no data to external servers. Communications are encrypted and access is controlled by a robust authentication system.

What happens if the system detects a threat?

The system can: (1) block the request, (2) ask for your confirmation for sensitive actions, or (3) on critical threat, trigger the emergency stop and let you return to a previously known-good state.

Is the security code open?

Yes. The security modules (syntactic firewall, immune filter, circuit breaker) are available in the product itself. You can audit them, modify them, and adapt them to your needs.

Ready to try it?

Download Digital Partner and discover secure, transparent AI under your control.

Download now