Obsidian Sentinel

Obsidian Sentinel is a Rust-native real-time abuse signal clearinghouse prototype that ingests, normalizes, correlates, scores, and routes high-risk telemetry using the Obsidian Lattice™ correlation engine.

Current scope

This first pass includes:

• Axum API (/health, /signals)
• Mock ingestion stream producing live signals
• Obsidian Lattice™ correlation stub and scoring pipeline
• Native Iced desktop console with live feed + heat indicator
• Local development scaffolding (docker-compose.yml, k3s, flake.nix, migrations)

Quick start (MacBook M-series)

cargo run

Expected behavior:

• Desktop console opens and updates in real time
• API serves on 127.0.0.1:3000

Project structure

/obsidian-sentinel
├── Cargo.toml
├── src/
│   ├── main.rs
│   ├── lib.rs
│   ├── ingestion/
│   ├── normalization/
│   ├── lattice/
│   ├── scoring/
│   ├── orchestration/
│   ├── audit/
│   ├── console/
│   └── api/
├── migrations/
├── docker-compose.yml
├── k3s/
├── README.md
├── .env.example
└── flake.nix

Obsidian Lattice™ patented algorithm overview

The Obsidian Lattice™ module is the canonical correlation layer. In this bootstrap implementation it performs:

1. Temporal spike extraction from observation timing
2. Adaptive edge weighting from entity metadata shape
3. Probabilistic soft matching from normalized confidence
4. Composite lattice scoring for downstream suspicion prioritization

All future production correlation improvements should remain centralized in src/lattice/.