Observe
Detect perimeter breaches, movement, unknown faces, responder media, reports, and device signals.
Prototype / Local first
Observation,made accountable.
OBVANT captures security events—from perimeter breaches, movement, and unrecognized faces to responder photos, reports, audio, and device signals—and secures each one in a verifiable chain of evidence.
INPUTLocal observation
OUTPUTSigned evidence
6+Event & evidence types
AES-256-GCMPayload encryption
Ed25519Event signatures
LocalPrototype boundary
01 / System
From signal to evidence—and response.
The gateway receives security events from configured sources, protects them as evidence, evaluates response rules, and preserves every resulting action in the same verifiable history.
Structure
Attach event type, source context, model details, media references, and time.
Protect
Encrypt the payload, link it to the previous event, and sign its digest.
React
Evaluate rules and trigger the configured alarm when event patterns cross a threshold.
Verify
Review the evidence chain, including the alert and every response that followed.
02 / Walkthrough
Watch evidence become action.
Follow a live scenario: distinct security events enter the gateway, become signed links in the evidence chain, and collectively trigger a response that is recorded too.
01 / EVENTS ARRIVE
Perimeter breachGate sensor · North entrance
15:42:08Movement in zoneCamera 04 · Restricted area
15:42:21Unrecognized faceVision model · Confidence 94%
15:42:37Additional evidence sources
Responder photos · reports · audio · device telemetry
Responder photos · reports · audio · device telemetry
02 / SECURED IN THE CHAIN
EVENT #031 · PERIMETER BREACH
ENCRYPTED · SIGNED · PREV 1F8A…90C2
AES-256-GCM / Ed25519EVENT #032 · MOVEMENT DETECTED
ENCRYPTED · SIGNED · PREV 5B72…11AF
AES-256-GCM / Ed25519EVENT #033 · UNKNOWN FACE
ENCRYPTED · SIGNED · PREV 9D14…7CE0
AES-256-GCM / Ed25519EVENT #034 · RESPONSE ALERT
ENCRYPTED · SIGNED · PREV 3AC8…E410
ALARM AND DELIVERY RECORDED03 / RULE EVALUATION
Possible intrusion
3 correlated risk events at the same site within 60 seconds
0 / 3
RESPONSE TRIGGEREDAlert the security team
Priority: high · Site: North entrance
✓ Alert delivery becomes EVENT #034
READYWaiting for security events.EVENT 01Perimeter breach received, encrypted, linked, and signed.EVENT 02Movement detected at the same entrance. Threshold: 2 of 3.EVENT 03Unknown face correlates with the incident. Threshold reached.REACTThe rule triggers a high-priority response alert.RECORDEDThe alert and its delivery join the chain as Event #034.
Prototype interface
Explore four connected views.
The interface below stays close to the working prototype while showing how its event model extends to operational security sources and responses.
Event intake
Connect every security signal.
Configured sources submit structured events and supporting evidence to the gateway.
P
Perimeter sensorsBreach and access events
READYM
Motion detectionRegional camera analysis
READYF
Face analysisRecognized and unknown faces
READYR
Responder evidencePhotos, reports, and audio
READYINCOMING · PERIMETER BREACH
SECURING…North entrance · Gate sensor 02 · 15:42:08
Regional motion
Watch only what matters.
A movable region limits motion detection to the chosen part of the frame.
PerimeterRegional motionFace analysis
DETECTION REGION30% × 30% at 12%, 13%
Event viewer
Verify the chain.
Unlocking checks the complete history before plaintext is shown.
34EVENTS STORED
EVENT #34 · RESPONSE ALERT
High-priority alert delivered to the security team.
15:42:39 · SHA-256 B2E1…99A4EVENT #33 · UNKNOWN FACE
Unrecognized person entered view.
15:42:37 · SHA-256 3AC8…E410EVENT #32 · MOVEMENT DETECTED
Movement detected in the monitored region.
15:42:21 · SHA-256 9D14…7CE0Response rules
Turn patterns into action.
Rules correlate events inside a rolling time window and record every resulting response.
Possible intrusion
3 correlated risk events at the same entrance within 60 seconds
HIGH-PRIORITY ALERTPossible intrusion at the north entrance
Security team notified · Recorded as Event #034
03 / Evidence
Designed to reveal tampering.
Every event receives a fresh encryption key, a cryptographic link to its predecessor, and a signature. A separate signed checkpoint also protects the end of the chain.
01
Private by default
Event payloads are encrypted independently. The viewing password protects access to the private decryption key.
02
Linked in order
Each digest includes the previous event hash, so changing or reordering history breaks verification.
03
Signed at capture
Ed25519 signatures let the viewer check that every stored event came from the gateway identity.
EVENT 021
prev: 8d41…a11c
EVENT 022
prev: c4a1…04b7
EVENT 023
prev: 31f0…a882
EVENT 024
prev: 87b3…d19e
04 / Boundaries
Proof with an honest perimeter.
01OBVANT proves what a configured source submitted, what the gateway recorded, and whether the evidence chain still verifies.
02The working prototype demonstrates regional motion, face-presence events, encrypted storage, chain verification, and simulated alarms.
03The broader event model extends to perimeter devices and responder photos, reports, audio, and other operational records.
04Source integrity still matters: cryptography cannot prove that a camera, sensor, timestamp, or human report was truthful.