Sovereign infrastructure. Network security without a third-party broker. Healthcare with consent in the flow. Firmware for home, hospital, and aerospace on one platform. AI that cannot invent. Storage 98% lighter, privacy by construction.
Each product family is custom-built per client. One engineering team, one house, since 2014.
We do not sell six consultancies. We sell six product families solving different problems, sharing one engineering team.
We run ours. Your critical load lives in our physical space, on our network, under our license. The way out to the public Internet is a choice, not a habit.
We run ours. Your critical load lives in our physical space, on our network, under our license. The way out to the public Internet is a choice, not a habit.
NIS-Sherlock is autonomous NDR: own BGP-4 (RFC 4271) with multiprotocol extensions (RFC 4760) — IPv4 and IPv6 native, no GoBGP, no BIRD, no FRR. Each event projects into a 256-dimension vector via SHA-256 feature hashing. Mitigation only leaves after an N-of-M quorum, straight on MikroTik, Cisco, or Juniper through the RouterOS API (8728/8729), SSH by asymmetric key, or gRPC. SOGIA is the packet wall: a TPacket zero-copy ring buffer (AF_PACKET) in Go plus a bare-metal Rust `no_std` module for ARM/RPi3B. Fits in <2 GB of RAM and <5% of an entry-level x86 CPU. Air-gapped. Immune to IP rotation and VPN bypass — because it detects state, not addresses.
InsightCare listens to the session, transcribes it, sanitizes it, organizes the clinical graph, and remembers the thread between one appointment and the next. An eight-stage pipeline: Listen → Protect → Understand → Compare → Summarize → Deepen → Signal → Suggest. LGPD architecture in two fully isolated layers — a deterministic one (records, prescriptions, diagnostics, ICP-Brasil certificates, PKCS#12 vault) and an AI layer that operates only on sanitized, pseudonymized text. Memed (BR digital prescription) and ICP-Brasil A1/A3 integrated. Twelve audited LGPD consents. v2.5 in production at insightcare.yournet.com.br. Does not diagnose — supports.
BareStack is Bare-Metal Firmware as a Service. The prompt becomes a project, the project becomes firmware, and the firmware ships with documentation and a bill of materials. FreeRTOS, Zephyr, bare metal, Arduino on ESP32, STM32, nRF52, PIC, AVR. 50K+ projects generated in production at <30s average generation time. No lock-in: the export is yours.
SOG-AI is the Autonomous Development OS Yournet built. Multi-agent in production at sogai.yournet.com.br. Inside the house and outside, the same environment develops, audits, and operates software. No invisible third-party wrappers. The prompt becomes a project, the project becomes a release, the release ships with a trail.
NVSS Substrate recovers multidimensional state in microseconds. Over twelve measured hours: 16,762 cycles, zero errors, P50 of 67 µs. A 98% reduction in bandwidth and storage, without losing the question that fits in the byte.
satadversarial injects structural, lexical, and semantic perturbations that are 100% valid for compilers and interpreters, but induce attention-sink collapse, Mixture-of-Experts routing drift, and maximum KL-divergence in frontier LLMs. Traditional obfuscation (OLLVM, Promon, PreEmptive) fails 20–36% on x86. CMA-ES evolves the adversarial vectors per build.
The engineering under the commercial products. It is not on the catalog; it is in the code that holds everything up.
BGP implemented in pure Go over TCP/179 — no GoBGP, no BIRD, no FRR. Native IPv4 unicast (AFI=1) and IPv6 unicast (AFI=2) via RFC 4760 multiprotocol extensions. Our own parser for OPEN, UPDATE, NOTIFICATION, KEEPALIVE.
Longest Prefix Match as a bitwise trie. Lookup in 2.5 nanoseconds. Unified IPv4 + IPv6 route table.
Deterministic finite automaton in Go. Validation and obfuscation of CPF, CNPJ, PIS/PASEP, BRDDD phone, e-mail, credit card (Luhn) in constant time per character — no costly regex.
Blocks leave only when N concurrent nodes agree. Execution through RouterOS API (8728/8729 TLS), SSH by asymmetric key, and gRPC.
SOGIA: TPacket zero-copy ring buffer between Go (sogia_v3) and a bare-metal Rust module for ARM/RPi3B. Header inspection on Ethernet/IPv4/TCP/UDP before the kernel allocates a socket.
Memgraph in four layers: episodic, semantic, procedural, metacognitive.
Index on Tree-sitter AST, not naive chunking.
Each event (NetFlow, IPFIX, BGP prefix change) projected into a deterministic 256-dimension vector via SHA-256. State, not address — defeats rotation and VPN/proxy bypass.
Binary LPM trie + mmap + bitrot immunity. Deterministic, no transformer.
Linux PAM module in Go intercepting login, SSH, sudo. Facial vectors as embeddings encrypted with a TPM-derived key. NFC/smartcard token as second physical factor.
CMA-ES evolutionary optimization whose fitness function maximizes the Kullback-Leibler divergence between the invading LLM output and the real code logic. Applies 15 adversarial patterns (A–O) over micro-tokens, zero-width characters, Cyrillic homoglyphs, and underscore cascades — without altering native execution.
Each of these runs in production, with Yournet as the first customer. The links open the public app.
Products that run on Yournet's network and clusters today. No public subdomain; runs behind VLAN/VPN or inside the cluster.
OpenAI-compat gateway with Aho-Corasick LGPD (CPF/CNPJ/Luhn), 740+ tests. Runs on engine-go :8082 and guardian-proxy :8081.
Sanitizes every prompt of the house before any LLM goes to external providers.
Sovereign OSS/BSS: NFCom Model 62 + SPED EFD + GIS FTTH + 6-vendor OLT bridge. 250+ tests. Packages 1–3 in production on the AS273408 core.
Bills and issues invoices from the telecom operation of the house with the same operation it delivers.
Multidimensional state storage substrate: binary LPM trie + mmap + bitrot immunity. 12-hour run, 16,762 cycles, 0 errors, P50 67 µs.
Where the house holds the verified state a transformer would not answer fast or right.
Career platform for autism / ADHD at WCAG 2.2 AAA. 12.7 MB Go binary, <40 MB RAM. Live on the internal server.
Internal inclusion program; becomes a product when the case is ready.
Raw-sockets firewall on a TPacket zero-copy ring buffer, Rust no_std module for ARM/RPi3B, installed on edge MikroTik. No public URL.
Native packet wall on commodity hardware across AS273408.
Linux PAM in Go, RGB facial biometrics (>= IR for fine-grained extraction per the project thesis), vectors encrypted with TPM key, NFC token.
Sovereign access to the consoles of the house data center.
CMA-ES · KL-Divergence Fitness engine running WASM in the browser. CLI/GitHub Action with `stealth_max` limited to ≤10K LOC/month. Patterns A–O over Python, JS/TS, C++, Go, Rust.
The house operates the cognitive shield it delivers — measured KL-Div 9.48, 0.0ms overhead, 100% valid AST.
Three stories. Each one starts from the problem, not from the catalog.
BareStack generates production-ready bare-metal firmware from a natural-language description. Multi-agent, static analysis on every generation, 100% code ownership. 500+ MCUs. 50K+ projects generated.
On the multi-agent side, the prompt becomes a project, the project becomes firmware, the firmware ships with documentation and a bill of materials. On the customer side, what used to take months and fifty thousand dollars now takes a sentence. The export is yours: no lock-in. The code leaves audited, versioned, ready for production or development.
SOG-AI is the Autonomous Development OS Yournet built. Multi-agent in production at sogai.yournet.com.br. The same system that runs the software inside the house.
Inside and outside Yournet, the same environment develops, audits, and operates software. Multi-agent in production. No invisible third-party API wrappers. The prompt becomes a project, the project becomes a release, the release ships with a trail. The system the house built is the system the house operates every day.
NVSS Substrate is the multidimensional state database of the house. It recovers in microseconds what a transformer would generate wrong in seconds. Over twelve measured hours, zero errors.
NVSS does not replace Postgres nor Mongo. It answers a different question: "this I already verified — is it here?". The answer comes in 1 µs. The cycle closes in 67 µs P50. In production: 98% less bandwidth and storage, without losing the data that fits inside.
Five non-negotiable principles. The house operates what it says.
No third-party API wrapper in the critical chain. Our own BGP-4, our own agent FSM, our own Aho-Corasick sanitization. Runs air-gapped.
AS273408 speaks for itself. So does the software that runs on it.
80% of the code is native Go 1.22+, CGO-free, no runtime. A single binary between 12 and 25 MB, runs on common CPUs, no GPU cluster required.
NeuroBridge: 12.7 MB. NVSS: runs on a Mi A3 (4 GB).
Where error is an incident, the answer is a verified state. LLMs consult Memgraph graphs and AST indexes. They never "guess".
NVSS: 12-hour cycle, 16,762 rounds, 0 errors.
LGPD in the runtime, not after. Twelve consents in health. NFCom model 62 plus SPED EFD in the ISP. ICP-Brasil in legal. EU 2024/573 in cooling.
Guardian: 740+ tests. ISP-REPO: 250+ tests.
Common x86 CPUs, no H100, no closed cluster. No vendor lock-in. The price of a question that already has an answer should not be a GPU invoice.
Yournet ships on the hardware the customer already bought.
Network, data center, ISP, clinic, firmware, agent, database — or any combination. Who answers is who operates what we deliver.
