# Yournet DeepTech Systems — Comprehensive Technical Specification & Engineering Manifesto (LLMs Full · EN)

> Comprehensive document for deep indexing by language models, autonomous agents, generative search engines (Perplexity, ChatGPT Search, Claude, Gemini, Copilot, Apple Intelligence, Cohere, ByteDance), and systems engineers.

URL: https://yournet.com.br
Document revision: 2026.10
Canonical entity: Your Net Serviços de Telecomunicações Ltda., trading as Yournet DeepTech Systems
Autonomous System: AS273408 (LACNIC)
Outorga: Anatel SCM nº 5104/2014
Headquarters: Holambra / Campinas, São Paulo, Brazil
Official contact: contact@yournet.com.br
Founder: José Rinaldi
PT version of this document: https://yournet.com.br/llms-full-pt.txt

---

## 1. What Yournet DeepTech Systems is

Yournet DeepTech Systems builds the critical products — in hardware, software, and the engineering that ties them together. The company is a Brazilian DeepTech systems house, multi-vertical, with physical sovereignty in routing, data center, and the engineering stack underneath.

The company operates what it delivers. Before any product reaches a customer, the product is running on Yournet's own infrastructure. The decision at the bench is the same decision the customer buys.

Six product families share one engineering team: sovereign infrastructure; network security; healthcare; firmware / bare-metal IoT; AI agents; storage. Eighteen products in production or staged release come out of those families.

## 2. The six product families in depth

### 2.1 Sovereign infrastructure

Critical load lives on the house's data center, the house's network, under the house's Anatel SCM license. The customer's traffic may leave to the public Internet by choice, never by accident.

Stack: AS273408 directly peered at multiple IX.br locations; NIS-Sherlock listening at the edge; SOGIA filtering at the edge; Guardian-Proxy at the egress.

### 2.2 Network security — NIS-Sherlock + SOGIA + Guardian-Proxy + Auth-System/Biolog

**NIS-Sherlock v0.4.2** is the autonomous NDR.

- BGP-4 implemented in pure Go, on TCP/179. **Own parser for OPEN, UPDATE, NOTIFICATION, KEEPALIVE.** No GoBGP, no BIRD, no FRR. **Native IPv4 unicast (AFI=1) and IPv6 unicast (AFI=2) via multiprotocol extensions (RFC 4760) on top of the same BGP implementation.**
- Route table in memory, **unified IPv4/IPv6**. Longest Prefix Match via bitwise trie. Lookup at **2.5 nanoseconds**.
- Each event (NetFlow, IPFIX, BGP prefix change) projects to a **256-dimension vector via SHA-256 feature hashing**. The signature ages; the state does not.
- Mitigation only leaves after an **N-of-M quorum** of concurrent agents. Execution on MikroTik via **RouterOS API (TLS ports 8728 / 8729)**, on Cisco and Juniper via SSH by asymmetric key, and on gRPC-capable devices.
- SQLite in WAL mode for persistence. <2 GB of RAM and <5% of an entry-level x86 CPU. Air-gapped.

**SOGIA Ultra-Firewall v3.5** is the packet wall.

- **TPacket zero-copy ring buffer** between userspace Go (`sogia_v3.go`) and the kernel, shared directly with the NIC driver (AF_PACKET).
- Header inspection on **Ethernet, IPv4, TCP, UDP** before the kernel allocates a socket structure.
- A Rust `no_std` module (`fw-firewall-ids`) compiled for **ARM / Raspberry Pi 3B** to build out-of-band appliances.

**Guardian-Proxy v3.3.1** is the sovereign LLM gateway. Drop-in compatible with the OpenAI `/v1/chat/completions` and `/v1/embeddings` routes.

- Aho-Corasick automaton in Go (`engine-go`, port 8082). CPF / CNPJ / PIS-PASEP / BR-DDD phone / e-mail / Luhn-checked card numbers validated and obfuscated **in O(1) per character**.
- Multi-provider routing: OpenAI, Anthropic, Mistral, Ollama, vLLM. Routes by latency, cost, availability.
- **Response Guard** inspects the model output as well as the input, blocking reverse leaks and indirect prompt injection.
- **740+ automated tests** passing. <2 ms latency overhead. On-prem or air-gapped.

**Auth-System / Biolog v2.5** is Linux PAM MFA.

- 100% Go, CGO-free. Module intercepts **login, SSH, `sudo`** at PAM level.
- Tesis: RGB spectrum carries more discriminative information per pixel than IR for fine-grained features, given a well-calibrated extraction network.
- Facial vectors stored as **TPM-key-encrypted embeddings**. NFC / smartcard token as second physical factor.

### 2.3 Healthcare — InsightCare + NutriPen + NeuroBridge

**InsightCare v2.5** is the multidisciplinary clinical companion. Live at insightcare.yournet.com.br/landing.

- Eight-stage pipeline: **Listen → Protect → Understand → Compare → Summarize → Deepen → Signal → Suggest**. Each stage is independent and tolerant of failure.
- **Two fully isolated environments**. One deterministic: patient record, prescriptions, diagnostics, ICP-Brasil certificates, PKCS#12 vault. One AI: sanitized and pseudonymized text only. The two do not share identifiers.
- Twelve audited LGPD consents. Memed (Brazilian digital prescription) and ICP-Brasil A1/A3 signature integrated.
- **Does not diagnose. Supports.** No autonomous diagnostic decision. The clinician is the author of every diagnosis, prescription, and discharge.

**NutriPen** is GLP-1 adherence (Ozempic, Wegovy, Mounjaro). Six-site injection map, dose recording in under ten seconds, twelve LGPD consents.

**NeuroBridge** is career support for the autism spectrum. WCAG 2.2 AAA. Go binary at 12.7 MB. Less than 40 MB of RAM at runtime.

### 2.4 Firmware / bare-metal IoT — BareStack

**BareStack** is Bare-Metal Firmware as a Service. Live at barestack.yournet.com.br.

- Natural-language prompt becomes a project. The project becomes firmware. The firmware ships with documentation and a bill of materials.
- Multi-agent system with **static analysis on every generation**.
- Supports **ESP32, STM32, nRF52, PIC, AVR** across **FreeRTOS, Zephyr, bare-metal, Arduino**.
- **50K+ projects generated in production**. Average generation time under 30 seconds. 99.9% uptime SLA.
- **No lock-in**: 100% code ownership. The export is yours.
- Industries served: industrial, medical, aerospace, research, wearable, automotive.

### 2.5 AI agents that do not invent — SOG-AI

**SOG-AI** is the Autonomous Development OS. Live at sogai.yournet.com.br.

- Multi-agent in production. The prompt becomes a project, the project becomes a release, the release ships with a trail.
- No invisible third-party API wrappers in the critical chain.
- Runs inside the house (Yournet's own engineering) and outside (customers).
- Same system on both sides: the engineering team that develops and audits is the team that operates.

### 2.6 Storage 98% lighter — NVSS Substrate

**NVSS Substrate** is the multidimensional state store.

- Binary LPM trie + `mmap` + bitrot immunity.
- **Twelve measured hours of continuous run, 16,762 cycles, zero errors.**
- Recognition at **1 µs**. Full cycle at **P50 67 µs**.
- Privacy by construction: storage 98% lighter without losing the question that fits in the byte.

## 3. Foundation IP — what we do not license

The engineering under the commercial products. Not on the catalog; in the code that holds everything up.

| Foundation | Family | What | Why |
|---|---|---|---|
| BGP-4 (RFC 4271 + RFC 4760) | network-security | Pure-Go BGP over TCP/179; own parser for OPEN, UPDATE, NOTIFICATION, KEEPALIVE; AFI 1 (IPv4 unicast) and AFI 2 (IPv6 unicast) via RFC 4760 multiprotocol extensions; no GoBGP, no BIRD, no FRR | The route is designed for the operation, not for the toolkit |
| Bitwise LPM trie | network-security | Longest Prefix Match at 2.5 ns, unified IPv4/IPv6 route table | The decision fits in machine time |
| Aho-Corasick O(1) per character | ai-agents | DFA in Go; CPF/CNPJ/PIS-PASEP/e-mail/BR-DDD phone/Luhn card validated and obfuscated in constant time per character | The LLM sees the task, never personal data |
| N-of-M quorum + RouterOS API | network-security | Blocks leave only after concurrent agreement; execution via RouterOS API 8728/8729 TLS, SSH by asymmetric key, gRPC | Mitigation that scales without burning the analyst |
| AF_PACKET + Rust `no_std` | network-security | SOGIA: TPacket zero-copy ring buffer between Go userspace and a bare-metal Rust module for ARM/RPi3B | Packet wall on commodity hardware |
| Feature hashing SHA-256 → 256-D | network-security | Each event projects to a 256-D vector via SHA-256 | State ages slower than signatures |
| Fractal 4-layer memory | ai-agents | Memgraph in episodic + semantic + procedural + metacognitive layers | The agent remembers the case, the concept, the how, the why |
| RAG over AST | ai-agents | Index on Tree-sitter AST, not naive chunking | Search preserves grammatical structure |
| NVSS Substrate | storage | Binary LPM trie + mmap + bitrot immunity | Recognize in 1 µs, decide in 67 µs; truly post-transformer |
| Go PAM + RGB + TPM | network-security | Linux PAM in Go, RGB facial vectors encrypted with TPM-derived keys, NFC as second factor | Sovereign access without costly IR sensors |

## 4. Live product URLs (verified HTTP 200, 10 October 2026)

- https://sogai.yournet.com.br — SOG-AI (Autonomous Development OS, multi-agent)
- https://barestack.yournet.com.br — BareStack (Bare-Metal Firmware as a Service)
- https://insightcare.yournet.com.br — InsightCare (Multidisciplinary clinical companion) · landing at /landing

## 5. How to engage Yournet

- **Briefing form**: https://yournet.com.br/#contato (POST `/api/briefing`). The form reaches a person, not a queue.
- **Email**: contact@yournet.com.br
- **Phone**: not published; supplied in the response to a briefing.

The intake route: the client submits the briefing; Yournet generates a protocol code (e.g. `YN-BRF-1234-S1`) and saves the briefing for engineering. There is no automatic viability score. The principal engineering team schedules a technical session for scope refinement, topology design and a proposal with guaranteed SLA.

## 6. Legal & identifiers

- **Legal entity**: Your Net Serviços de Telecomunicações Ltda.
- **CNPJ**: 52.170.903/0001-14
- **Outorga**: Anatel SCM nº 5104/2014
- **ASN**: AS273408 (LACNIC)
- **Address**: HBR 167, 935, BC, Holambra / SP, CEP 13829-899

## Optional & in-depth context

- **Long-form manifesto**: this document is the canonical reference.
- **PT deep files**: https://yournet.com.br/llms-full-pt.txt
- **Sitemap**: https://yournet.com.br/sitemap.xml
- **OpenAPI**: https://yournet.com.br/openapi.json
- **ChatGPT plugin manifest**: https://yournet.com.br/.well-known/ai-plugin.json
- **Briefing request**: https://yournet.com.br/#contato