Every move rehearsed. Every real one asked.
Pilot is the application for acting on machines through their twins: simulate, propose, stage, act, calibrate. Policies come from the living worlds; control stays behind the gate.
The machine and its surroundings in a twin, run through what could happen.
SupportedThe next action, with what the twin forecasts will follow.
SupportedA new policy runs in shadow beside the real controller and is compared with it before it has any say.
SupportedUnder a signed policy and on a person's word, with what was asked and what the machine reports side by side.
Test tenantWhat the machine then does is measured, and the twin is corrected against it.
Supported
Tried in a twin before it is tried for real.
Nothing reaches a machine that has not run in the twin first.
A person decides what is allowed.
The policy a machine runs under is set and signed by a person; a command outside it is refused.
Every command leaves a record.
What was sent, under which policy, and what the machine reported back, in a record that cannot be quietly rewritten.
Only inside what the twin has solved.
Outside its band the twin says so and makes no claim.
The machine's own stop comes first.
The advisory stop sits above the machine's emergency stop and safe torque off, and does not replace them.
Purpose, limits and approval.
Pilot works through the physical interface: purposes, approval levels and the command gate.
Request access.
Tell us what you want to run with Pilot. We answer every request ourselves.