Live STARS engine · AWS RDS
Live Engine
Real output from the STARS engine running on Postgres — produced, isolated, risk-evaluated, access-controlled, and sealed. Not mock data.
snapshot
AWS RDS PostgreSQL 16.14 · us-east-2
Snapshot: Sun, 21 Jun 2026 14:31:02 GMT
Demo data · illustrative only
Framework posture · CMMC Level 2
From the seeded control catalog through v_framework_posture — the proof query. The same query, any framework.
75%
9/12 satisfied
● 9 satisfied● 2 partial● 1 gaps
Frameworks · one engine, every lens
10 compliance frameworks, all computed from the same normalized controls and evidence. Adding a framework is a crosswalk load — no schema change.
CMMC Level 2 · DoD CMMC PMO9/12 · 75%
FAA Part 145 Repair Station · FAA12/14 · 86%
FMVSS / FMCSA Fleet Maintenance · NHTSA / FMCSA9/9 · 100%
FRA Rail Safety · FRA / DOT9/9 · 100%
FTA Transit Safety (PTASP) · FTA / DOT9/9 · 100%
I-CAR Collision Repair · I-CAR / OEM / EPA8/9 · 89%
ISO/IEC 27001:2022 · ISO/IEC9/11 · 82%
OSHA / EPA Hazmat & EHS · OSHA / EPA6/10 · 60%
SOC 2 (Trust Services Criteria) · AICPA7/9 · 78%
USCG / ABS Maritime · USCG / ABS8/9 · 89%
Ingestion → STARS
7 atomic rows written
One brake-inspection event for asset 00000000-0000… was structured into the eight isolated STARS schemas under control AC.L2-3.1.5.
who
what
when
where
why
how
howmany
meta
Evidence Ledger · sealed
DataBOM seal
- link hash
- b6608f0db30450ede3abd5a287bc5e0a9d7538988cc8e6f35caf1010cbdd7c96
- artifact hash
- c9e1ae0225cb8dd1332c50a4c0ba373c8093f54332c9614e7136273fd46e7605
- signature
- c3dL2wP_Na8g5ffosvNrBenyNp03VV2mUtew2w2SLGLGv1OOLLrV15pdsVvUlv1VGAv8mRcyhYg9_wT4TG5JCw
- control
- AC.L2-3.1.5
- signed-by
- kv:aegis-dev-seal/v1
- sealed-at
- 2026-06-21T00:00:00.000Z
Request Interception Layer · live decisions
1 admit · 1 redact · 2 block
| Request | Decision | R / T | Returned | Why |
|---|---|---|---|---|
| Read unit_count | admit | 2 / 10 | [{"unit_count":1}] | admitted |
| Read purity + unit_count | redact | 2 / 10 | [{"unit_count":1}] | restricted aggregation pattern(s): howmany-redact |
| Read gps + purity (aggregation) | block | 1 / 10 | — no SQL run | restricted aggregation pattern(s): gps-purity-block |
| Read unit_count, high frequency | block | 12 / 10 | — no SQL run | risk R=12 (w=4 x c=3) exceeds T=10 |
A blocked request never reaches SQL — the gate decides before any query is built. Redaction drops the field by projection. Every decision is reproducible and machine-readable.
Sealed evidence ledger · ingested
12 hash-chained records
| Evidence | Result | Seal (SHA-256) |
|---|---|---|
| AC.L2-3.1.1 · Quarterly access review | satisfied | 9013e9ff86edc6b96a7eec90… |
| AC.L2-3.1.2 · Transaction authorization audit | satisfied | ae4ff96bb8c88588eaa18be1… |
| AC.L2-3.1.5 · Least-privilege role audit | satisfied | 080fbe3d70485ddcbd6c3dd9… |
| AU.L2-3.3.1 · Audit logging enabled scan | satisfied | 93576d317d0aa05bd573d01e… |
| AU.L2-3.3.5 · Audit correlation review | partial | 84fbb77965e39dfd3459e727… |
| IA.L2-3.5.1 · User identity inventory | satisfied | 024469c60ae0b602a17badf7… |
| IA.L2-3.5.2 · MFA enrollment check | satisfied | 7e0a72002614660e696d6c08… |
| CM.L2-3.4.1 · Baseline config attestation | satisfied | 27fcb0edf6ff56e7bf8c8dce… |
| CM.L2-3.4.6 · Least-functionality scan | not satisfied | 73b7700072078da0a7d07f77… |
| SC.L2-3.13.1 · Boundary firewall review | satisfied | 0c088e5f62170090d70b27f2… |
| SC.L2-3.13.8 · TLS transit scan | partial | 6f3049eeee4c9be499305531… |
| SC.L2-3.13.11 · CUI encryption attestation | satisfied | dc2e5c694d52a33e6b756a35… |
Each row was ingested from a CSV source, structured into STARS, assessed against its control, and Ed25519-sealed into a chain. The same engine, fed by data.