Omega is the decision orchestrator at the heart of every HYVE agent. It runs a deterministic decide() function — same input, same output, every time, under 200 nanoseconds per rule — over a topologically-sorted multi-organ topology. Every verdict is replayable in Observatory.

Coming soon.

A design in a pending patent claim, not a shipped capability: routing work across quantum, classical, and local compute.

Three-dimensional graph of organ nodes on a Fibonacci-sphere distribution, lightning polylines for cell deliveries, color-coded by topic class across at least 8 categories. Every decision, memory write, and bus event is replayable.

iRECKON's design uses ML-KEM-768 post-quantum key exchange, ChaCha20-Poly1305 AEAD, and Ed25519 signatures; it is not yet in the shipped build. Today files in ~/.hyve/ are not encrypted at rest, and device-to-device messaging is still in development.

Eleven static analysis detectors across five languages: secrets, weak_crypto, sql_injection, command_injection, deserialization, insecure_random, unsafe_audit, panic_audit, xss, regex_dos, ssrf.

A design in a pending patent claim: Augur audits its own source on every commit, so the security tool checks itself before anything else.

A tarpit organ that drips fake banners to attackers for hours, a Tor controller organ with pluggable transports (obfs4, meek_lite, snowflake), and a sentinel kill organ for cross-platform process termination — all audit-logged.

Sovereign on-device identity: X25519 master keypair and HKDF-derived scoped tokens. No cloud account required.

Per-chunk Brotli + AES-256-GCM encryption with an Ed25519-signed root hash you can verify offline, plus SQLite-indexed metadata; one vault unlock decrypts every archive. (NOT yet in the shipped build: Reed-Solomon GF(256) parity shards + Particle-Swarm-Optimized layout for partial-corruption survival — the designed next layer.)

Part of iRECKON's device-to-device messaging, which is in development: messages exceeding 387 bytes are split via Shamir K-of-N secret sharing applied per byte position over GF(256). Any K cells reconstruct the original; any K-1 cells reveal nothing.

Unlock verification with length-capped inputs, parallel Argon2id derivations without short-circuit, bitwise-AND combination, and uniform error message on failure — defends against side-channel timing attacks.

Part of iRECKON's device-to-device messaging, which is in development: per-conversation epochs with chain-key rotation via HKDF-SHA256 and zeroized prior keys, designed so that compromising the current state does not expose past traffic.

Peer-to-peer LAN file transfer organ — mDNS discovery, TLS-fingerprint pinning, no relay server, up to 8 GiB per file. Transfers go directly between devices on your local network.

A standalone binary that exposes Omega, Narrator, Augur, Trust, and Leaper as native MCP tools — call iRECKON organs directly from Claude Code, Cursor, Zed, and Continue.dev.

Per-IDE skill manifests (.claude/skills, .cursor/rules, ~/.continue/config.json) so operators invoke iRECKON organs from inside their AI coding harness without leaving the editor.

Six plugin types with manifest-based install on ports 7900–7999 — Studios, organs, themes, recipes, surfaces, agents — all extendable.