Mission software built entirely inside your boundary.

For firmware, FPGA and software teams on closed programmes. Policy, models and records stay on your network.

Standards: MIL-STD-882E · ECSS-E-ST-40C · DO-254
Firmware tools: Arm GCC, Arm Compiler 6, IAR, OpenOCD, J-Link
FPGA tools: Verilator, GHDL, Yosys; Vivado, Quartus, Libero, Radiant
Models: Served inside your network
Deployment: Self-hosted, your cloud or air-gapped

What your team gets

Separate programmes, disconnected networks, named people.

Govern features are in use today. Domain modules are pre-release; their state is listed under Tools and formats.

Fully disconnectedGovern is designed to need no internet at runtime, installed from an offline bundle with models you host. Prove it on a host with no route out before you rely on it.

Programme separationEach programme can be its own organisation, with its own members, policy and audit chain, kept apart by the database itself.

Agents under your rulesAllow, ask and deny rules for commands, files, network, pushes and models. The firmware and FPGA templates keep device programming and bitstreams with a person.

Signed, offline policyPolicy reaches each machine signed, keeps working offline for the grace period you set, and can be revoked for one person or the whole organisation.

Named accountabilityEvery action is tied to a person. A requester can never approve their own request, and signing an approval needs re-authentication.

Records your auditor can checkThe audit log and its signed exports are verified offline with a standalone tool, without access to your systems.

Who uses it

For the engineers on the programme and the people who answer for it.

Embedded software engineersBuild, test, flash and debug mission firmware with your compilers and probes.

FPGA engineersWrite, simulate and synthesise RTL, with timing and utilisation beside the code.

Programme security officersSet agent policy, approved models and emergency suspension for each programme.

Safety and quality engineersApprove controlled changes and export the audit record for reviews.

Tools and formats

What the modules handle, and how far each is verified.

The Embedded and HDL modules drive the toolchains your programme already uses, inside your network.

Firmware projectsKeil, IAR and STM32CubeIDE projects imported into CMake; builds of a CMake preset with a Flash and RAM report; host unit tests. Built and tested on recorded tool output; not yet run against IAR or Keil.Arm GCC · Arm Compiler 6 · IAR · CMake · Ninja · CTest · Unity · .uvprojx · .ewp · .cproject

Flash and debugFlashing after a confirmation; debugging with peripheral registers from the SVD, RTOS awareness, fault decoding and a serial monitor. Running an image in QEMU is verified against QEMU 9.1.1; nothing has been run on a board.OpenOCD · SEGGER J-Link · ST-LINK (STM32CubeProgrammer) · GDB · QEMU · SVD · FreeRTOS · Zephyr · ThreadX

Static analysisCppcheck findings, including MISRA C:2012, in the Problems view. Built and tested on recorded tool output.Cppcheck · MISRA C:2012

FPGA, open flowLint, simulation, cocotb testbenches, formal verification, waveforms, synthesis and place and route. Verified on Linux. Programming a board is not yet run.Verilator · Icarus Verilog · GHDL · cocotb · SymbiYosys · Yosys · nextpnr · openFPGALoader · VCD · FST

FPGA, vendor flowsThe vendor tools driven in batch mode, with their messages and timing and utilisation reports in the same views. Kit shipped or modelled: not yet run against the vendor tools.AMD Vivado · Intel Quartus · Microchip Libero SoC · Lattice Radiant

Embedded LinuxIn early development behind a setting, not ready for use: Yocto Project and Wind River Linux builds on your Linux build server over SSH. Modelled on Linux only; not yet run on Windows, a real build server, Wind River Linux or a board.Yocto Project · Wind River Linux · BitBake · kas

Domain modules are pre-release. Nothing is verified by a customer yet, and nothing is verified on Windows. Do not rely on a capability for production work until it is verified for your tools, versions and operating system. Product names belong to their owners.

How a change moves

A person decides before anything leaves the desk.

Propose
An engineer or agent drafts a change to mission software.
Verify
Your qualified tools build, check and test it.
Approve
A push to the programme's release branch waits for a named approver.
Record
Change, results and approval kept together in the audit record.

Standards

Evidence for your safety case. The certification is yours.

MIL-STD-882EEvidence toward MIL-STD-882E: changes to safety-related software with their approver and reason. Hazard analysis stays in your safety process.

ECSS-E-ST-40CEvidence toward ECSS-E-ST-40C: change records, test results and approvals for your software reviews.

DO-254Evidence toward DO-254: each implementation run kept with the commit it came from, and each RTL change with its review and approval.

Neural Inverse provides evidence toward these standards. Certification stays with your organisation and assessor.

Rules you work under

What they ask, and what Neural Inverse gives you toward them.

We produce records your assessors and regulators can use. We never say a product makes you compliant; that stays with your organisation.

Standards

[Draft: to be approved by legal counsel before publication]

ITAR and the EARWhat it asksControlled technical data and designs stay with authorised people and inside licensed boundaries. Showing controlled technology or source code to a foreign person, even inside the United States, can count as an export.What Neural Inverse gives youSelf-hosted and air-gapped deployments keep controlled designs inside your boundary, and each programme can be its own organisation with its own members, policy and audit chain. Our hosted service is not offered for ITAR-controlled data.

DFARS 252.204-7012What it asksContractors protect “covered defense information” under NIST SP 800-171, report cyber incidents to the Defense Department within 72 hours of discovery, and keep images of affected systems for at least 90 days after the report.What Neural Inverse gives youSingle sign-on and access control, approvals by named people and a tamper-evident audit log you can search and export when you report. Your auditor verifies the log and its signed exports offline.

CMMCWhat it asksDefence suppliers show they protect federal contract information and controlled unclassified information. Self-assessments have been in Defense Department contracts since 10 November 2025. The third-party Level 2 assessments planned from 10 November 2026 (phase 2) were suspended on 13 July 2026, and contracting officers were told to remove them by a class deviation in September 2026; no new date has been set.What Neural Inverse gives youSingle sign-on and access control, approvals by named people, records of every change and a tamper-evident audit log, as evidence for your assessment.

Questions

What defence and space teams ask us first.

All questions

Can it run with no internet access?

Yes. Govern is designed to need no internet at runtime and installs from an offline bundle with models you host. Prove it on a host with no route out before you rely on it.

Can we use your hosted service for ITAR-controlled work?

No. Our hosted service is not offered for ITAR-controlled data. Self-hosted and air-gapped deployments keep controlled designs inside your boundary; whether a deployment meets your obligations is for your export compliance officer to decide.

Can we keep programmes apart?

Yes. Each programme can be its own organisation, with its own members, policy and audit chain, kept apart by the database itself.

Does it work with our existing toolchains?

Yes. The Embedded and HDL modules drive the compilers, probes and FPGA tools your programme already uses, inside your network. The modules are pre-release, and each capability states what it has and has not been run against.

Is Neural Inverse CMMC certified or qualified to our standards?

No. We do not claim CMMC certification. Govern gives evidence toward MIL-STD-882E, ECSS-E-ST-40C and DO-254 and keeps records for your assessor; tool qualification, certification and assessment stay with you and your assessor.

Products used

Neural Inverse Build →

Editor, Agents and CLI with the domain tools your engineers need.

Neural Inverse Govern →

Policy, approvals and audit for every AI tool your teams use.

Product names belong to their owners.

Talk to our team.

Neural Inverse is available by request. We work with your engineering, security and procurement teams from the first conversation.

Request access Contact us