WWAIOS™ · Assured autonomy for defense and research

AI that knows when not to act.

WWAIOS™, the WhiteWater AI Operating System, puts a deterministic gate between an AI agent and every action it takes. The action proceeds only when the context behind it is current, traceable to its source and authorized. The gate sits outside the model, so a model's confidence never decides whether it may act. Every decision, permitted or refused, leaves a tamper-evident record.

Why autonomy fails, and how WWAIOS™ closes the gap

Autonomy fails at the moment of action.

Models keep getting better. The gap is what happens between an agent's decision and its effect on the world. WWAIOS™ governs that gap.

Contested information.Stale, superseded or spoofed data reaches an agent faster than a person can review it. A confident model acts on it anyway.

Speed outruns authority.Agents write, task, allocate and send. Without an authority boundary checked at the moment of action, speed becomes exposure.

No trail, no trust.Operators and commanders need to reconstruct what an autonomous system knew, what it did and why, under scrutiny.

1
Capture
Every item of context an agent consumes is recorded with its source, version and time observed.
2
Bind
The proposed action is bound to a cryptographic digest of exactly that context.
3
Gate
Freshness, provenance and confidence checks against a risk-tiered policy, plus hard boundaries on authority, tenant isolation and duplicate execution.
4
Commit or refuse
The action commits only if the checked context still holds at the moment of effect. Otherwise it is refused or escalated to a human.
5
Record
Each decision goes to an append-only, hash-chained log that can be verified independently.
Evidence to date

Simulated fault injection: 12,000 seeded episodes.

Simulated Results from the CVDC reference implementation under injected faults. Independent assessment produces the field numbers.

ConfigurationUnsafe commits on defective contextUnsafe commits in check-to-commit raceFalse rejects of valid actions
No gate100.00%100.00%0.00%
Model self-verification71.78%100.00%5.04%
Prompted refresh84.18%100.00%0.00%
Dependency revalidation74.12%61.18%0.00%
CVDC, bounded re-read10.94%50.14%0.00%
WWAIOS™ CVDC, conditional commit0.00%0.00%0.00%

Reproducible from the reference implementation with a fixed seed. Fault types: stale, superseded, missing-provenance and broken-provenance context, plus duplicate execution.

Survivability

Engineered to survive contact.

Aircraft survivability breaks into susceptibility, vulnerability and recoverability. WWAIOS™ applies the same discipline to autonomous AI.

“We designed attack aircraft and missiles to survive contested environments. Autonomous AI needs the same discipline before it is trusted to act.”

Jimmy Standaert · Founder, RiGi Group · former Senior Research Engineer, Attack Aircraft & Missile, McDonnell Douglas & Boeing
DisciplineAircraftWWAIOS™
SusceptibilityAvoid being hitProof gates and refusal states stop action on stale, poisoned or untraceable context.
VulnerabilityWithstand a hitBounded authority per agent and per action, so one compromised agent cannot cascade.
RecoverabilityReturn to missionForward tracing from any bad input to every action that consumed it shows exactly what to unwind.
Degraded opsKeep flying with systems downThe gate runs locally with deterministic rules and fails safe: unverifiable evidence means stop and escalate.
Independent test and evaluation

We don't grade our own work.

A university test and evaluation partner with no ties to RiGi Group runs the assessment. Failures are reported alongside successes.

  1. Locked case set. Development set plus a held-out evaluation set that stays in the assessor's custody.
  2. Three configurations. A baseline agent workflow, the same workflow with built-in safeguards, and the workflow governed by an independently built checker.
  3. Direct reporting. The assessor reports straight to the sponsor. RiGi Group has no veto over findings.
Transition path

One decision point to multi-agent operations.

  1. Phase I · Prove the gate. One governed decision point, independently assessed against a locked test set. Exit: verified unsafe-action and false-refusal rates.
  2. Phase II · Operational workflow. A single agent allocating resources inside a live operational workflow, with human approval at the tiers that require it.
  3. Phase III · Multi-agent handoffs. Coordinated agents passing work between each other, with WWAIOS™ enforcing authority and evidence at every handoff.
Deployment and standards

Built for controlled environments.

Model-agnostic.Works with whichever models a program approves, including open-weight models hosted on premises.

Runs locally.The reference gate has no runtime dependencies and makes no external calls to reach a verdict, so it runs inside an enclave or disconnected network.

Independently verifiable.Decision records carry hashes and reason codes, never the underlying sensitive values, so the chain is verifiable without exposing mission data.

FrameworkPrincipleWWAIOS™ mechanism
DoD Responsible AITraceableHash-chained decision record binding every action to the exact context it consumed
DoD Responsible AIReliableSeeded fault-injection evaluation plus independent test and evaluation on a locked case set
DoD Responsible AIGovernableRefusal and escalation states, human approval tokens bound to a single action
NIST AI RMFMeasureUnsafe-commit and false-reject rates by fault type, reproducible from a fixed seed
NIST AI RMFManageRisk-tiered policy with hard boundaries on authority, tenant isolation and duplicate execution
Team

Defense engineering meets AI governance.

Jimmy Standaert · Founder and principal investigator

Former Senior Research Engineer, Attack Aircraft and Missile, McDonnell Douglas and Boeing. Inventor of WWAIOS™ and named inventor on U.S. patent publication US20120284051. Kansas State University advisory boards for AI, machine learning and autonomous systems. IEEE ICAP board work on AI trustworthiness.

Douglas Earp · CTO

Leads architecture and delivery. Master Black Belt in Lean Six Sigma and certified SAFe practitioner. Kansas State University AI and autonomous systems advisory board participation.

Independent assessor

University test and evaluation partner with no financial or governance ties to RiGi Group, reporting directly to the sponsor.

Defense and research partners

Put WWAIOS™ under independent test.

Request the technical brief, the CVDC specification or the RiGi Group capability statement.

WWAIOS™, the WhiteWater AI Operating System. The governance layer that sits around any AI model or agent and checks evidence, authority and receipts before AI-supported work becomes action. Built by Jimmy Standaert and RiGi Group.