Reviewer-oriented entry point

Start here: Hella Shield / SunNAS

Mikronik conducts bounded internal defensive-security research on systems it owns, operates or is explicitly authorized to analyze. Hella Shield studies finite write authority under uncertainty, independent recovery evidence and measurable containment limits.

Current research record

43 checkpointslive iSCSI/ZFS evidencefresh blind failures retainedformal invariants41 hash-verified public artifacts

Measured live claims are kept separate from offline replay, synthetic models and formal state exploration.

Flagship paperFinite authority under uncertainty, experiment arc, measured limits and explicit open questions. Evidence index41 downloadable sanitized evidence artifacts, SHA-256 digests and truth boundaries. Experiment seriesChronological research log with successes, failures and recovery evidence. Defensive-security profileOrganization scope, authorization boundary and intended internal workflows. Five-minute reviewer briefThe shortest path to the central claim, strongest evidence, negative results, final V1 challenge and remaining implementation boundaries.

What the record currently supports

Live disposable iSCSI containment and recovery verification below the endpoint-visible layer.
Recovery-backed finite byte credit and time-bounded fail-closed behavior.
Measured limits of reactive endpoint control under concurrency and larger write requests.
A formal reservation-before-admission invariant for exact finite credit.
Fairness and evidence-loss policies that do not increase authority when confidence degrades.

Negative results are first-class evidence

Policy v1 failed a preregistered fresh challenge. The first real recovery selector was too conservative. Reactive endpoint credit widened under concurrency. These results were retained and used to change the architecture instead of being hidden.

V1 status

V1 frozen for publication. Experiment 043 was preregistered before execution and passed the frozen combined challenge without post-result tuning. The selected evidence, hashes, sanitization and internal links passed the final pre-deploy audit.

Read the flagship paper →