Skip to content

The single source of truth
for your entire engineering lifecycle

Your whole certification case in one living model, graded against the live rule, always ready for the authority

Not a pile of disconnected documents

One living model, everything connected

Change one thing and the whole case answers

Evidence always ready to hand over

Everything on one graph

Requirements, hazards, architecture, tests and evidence are one connected model, graded against the live rule and recomputed on every change

CertProveReference airframe / Jet A-1 fuel system / Programme graphCS-25 · 25.1309
Living model · requirement to evidenceone connected graph
SYSTEMHAZARDREQUIREMENTVERIFICATIONEVIDENCECOMP-3COMP-7HC-01HC-04REQ-014REQ-021REQ-042FT-09FT-17TC-61EVID25.1309SEAL
0 nodes · 0 edgesrev 6c5176cgraded against FAA, EASA and UK CAA

Smarter certification, built to be trusted

It cites the rule or abstains, the trace is the structure not a maintained link, and every gate ladders up to one honest verdict

CertProveReference airframe / Jet A-1 fuel system / AssuranceCS-25 · 25.1309
Trust · governor, trace, verdictcite or abstain
The governor cites the rule or abstains
FACT≤ 1×10⁻⁹ per flight hour
COMPUTATION2.1×10⁻¹⁰ · meets target
ABSTAINwithheld, needs a source

Every answer is fact, computation, precedent or abstain, and it refuses to invent a number.

Traceability that cannot rot
REQ-014 → FT-09pass
REQ-021 → no testunverified
FT-17 → nothingorphan
alloc → deleteddangling

Verification truth, reverse orphans and dangling references are found before the authority asks.

One readiness verdict
0%ready

2 objectives open · FT-17 running, TC-61 not started

Readiness recomputes live as evidence lands, always answering can we certify yet.

trace health checkedrev 6c5176c2 objectives open

The machine you must prove

Every failure condition, graded against the rule

Proven, not claimed

Watch the case build itself

One description of a system, graded against the live rule. Hazards, requirements and verification resolve into a single computed verdict, recomputed on every change, never a status someone typed.

CertProveReference airframe/Jet A-1 fuel system/Safety caseCS-25 · 25.1309
Lattice · system to verdictseverity at or above MajorDAL flow-down on auto-recompute
SYSTEM1HAZARD8 conditionsREQUIREMENT8 typedVERIFICATION6 pass · 1 run · 1 openVERDICTJet A-1fuel system01Loss of fuel feed to engineHC-01CATDAL AREQ-014FT-09FTAPASS02Undetected fuel leak, dry bayHC-02CATDAL AREQ-021AN-12ANALYSISPASS03Ignition source within tankHC-03CATDAL AREQ-063AN-31CCAPASS04Fuel starvation, imbalanceHC-04HAZDAL BREQ-042FT-17FTARUN05Misleading fuel quantityHC-05MAJDAL CREQ-035TC-44TESTPASS06Uncommanded fuel transferHC-06MAJDAL CREQ-051AN-23ANALYSISPASS07Tank overpressure, vent blockHC-07MAJDAL CREQ-058TC-61TESTOPEN08Contaminated fuel supplyHC-08MINDAL DREQ-070INS-4INSPECTPASS

Worst-case catastrophic rate

0.0×10−10/ FH

Target at or below 1.0×10⁻⁹ /FH · 25.1309 catastrophic

Meets target
Objectives closed 0 / 8
Catastrophic verified 0 / 3

2 objectives open · FT-17 running, TC-61 not started

LIVE0 nodes · 0 edgesrev 6c5176crecompute ··synchronising
Reference airframe · Jet A-1 fuel system · 8 failure conditions · 3 catastrophicARP4761A · ARP4754B · CS-25 25.1309 · DO-178C DAL A

Watch it catch the mistake as it happens

One failure condition, typed against the live rule. Word it with a cause, or downgrade its severity, and the check fires the moment it happens, cited and computed, never after the review

CertProveReference airframe/Jet A-1 fuel system/Functional Hazard AssessmentCS-25 · 25.1309
FHA-018 · new rowseverity at or above Major checking as you type
FHA-018#1unclassified
FUNCTION
LIVErev 6c5176crecompute 38 msgraded against the live rule

From the first hazard to the sealed case

Six analyses, one linked flow, every verdict graded against the 25.1309 ceiling, catastrophic ≤ 1e-9

  1. 01
    FHA

    Functional Hazard Assessment

    Failure conditions, severities and safety objectives, the source of truth

  2. 02
    FMEA

    Failure Modes & Effects

    Component failure modes derived from the model, with a criticality matrix

  3. 03
    PSSA

    Preliminary System Safety

    Architecture allocated against 25.1309 targets, with DAL and budget checks

  4. 04
    FTA

    Fault Tree Analysis

    Quantitative fault trees, cut sets and single points of failure versus target

  5. 05
    CCA

    Common Cause Analysis

    Common-mode groups and particular risks that verify independence

  6. 06
    SSA

    System Safety Assessment

    Closure, every objective marshalled into one computed verdict

  7. SEAL

    Sealed case

    Tamper-evident, anyone can verify

All the engineering in one place

GRAPH

Programme workspace

Requirements, hazards, analyses and verdicts on one connected graph

SAFETY

ARP4761A safety chain

FHA, FMEA, PSSA, FTA, CCA and SSA as one linked, computed flow

RULE

Live regulatory grounding

Answered against the live rule text, cited or refused, never guessed

TRACE

Deep trace health

Verification truth, orphans, dangling refs and DAL flow-down

SEAL

Evidence integrity

Tamper-evident baselines anyone can verify, no exported files

CREW

The grounded crew

Drafts the next row and gap with its sources attached, or abstains

The depth behind every surface

CITED

Every answer carries its source

The engine cites the rule or it abstains, it will not invent a number, and an unsourced fact becomes an honest gap

WHOLE

Reasoned across the entire aircraft

Systems, structures, powertrain and software, each graded against the live rule rather than a generic checklist

LIVE

A verdict that recomputes itself

Readiness updates the moment evidence lands, computed on every change, never a status someone typed

Every discipline on one graph

Systems, structures, powertrain and software, every team designing and verifying on the same living model, so a change in one ripples to every other

Can we certify yet?

Access is granted on request while the platform is in early release