NEXUSBY CYBERCHAIN TECHNOLOGIES
DEMONSTRATION ENVIRONMENTLAKEVIEW GENERAL HOSPITALSYNTHETIC DATA ONLYNOT FOR PHIFictional hospital · real Nexus governance logic

Alice AI governance

Alice · the authority layer inside Nexus

Integrations

Alice decides; enforcement points enforce. This page says exactly what exists today. Vendor names appear only as examples of an enforcement-point pattern; no partnership, endorsement, or integration is implied by a name.

LIVE

Running in production today.

2 item(s)
SUPPORTED

Implemented and tested in this codebase; not yet in the live request path.

2 item(s)
DEMO

Runs on synthetic data on this site.

2 item(s)
INTEGRATION-READY

Interface defined; needs a counterpart to connect.

0 item(s)
PLANNED

On the roadmap; not built.

3 item(s)
CONCEPTUAL

An idea or pattern; nothing exists.

2 item(s)
ComponentRoleStatusWhat it doesBasis for the label
Nexus Intelligence feedsSIGNALLIVERegulatory, breach, and workforce signals that raise policy proposals.Public terminal is live; the policy-proposal linkage is demonstrated on synthetic policies.
Nexus Readiness assessmentSIGNALLIVECritical gaps that cap autonomy or add review requirements.Scoring engine is live for signed-in organizations; the public linkage uses the synthetic assessment.
Model eligibility evaluatorPDPSUPPORTEDDeterministic model verdicts with reason codes from the governed registry.Implemented and tested in shadow mode; not yet in the live inference path.
Trust Receipt hash chainEVIDENCESUPPORTEDAppend-only, tamper-evident chain and evidence package.Implemented and tested; production persistence is an approval-gated step.
Alice control plane (policy engine + gateway)PDPDEMODefault-deny policy engine (BLOCK > HOLD > ALLOW), agent identity with hashed secrets, config-pinned audit ledger.Exists as a tested Python kernel (v0.2) in this organization's repository; not wired into the Nexus request path. The web decision engine mirrors its rules.
Nexus decision engine (this site)PDPDEMOStructured ALLOW / REVIEW / BLOCK evaluation with checks, reusing the model-eligibility evaluator.Runs over synthetic Lakeview requests; deterministic and tested. Not enforcing live traffic.
Hospital SSO / IAMIDENTITYPLANNEDHuman identity verification for every governed request.Not integrated; the demo uses a synthetic verified identity.
MCP gatewayPEPPLANNEDEnforce tool permissions and envelopes for agent tool calls at the gateway.Design target for the Alice gateway; no gateway is deployed.
API gateway / application proxyPEPPLANNEDRoute model requests through Alice before any provider is called.The residency-governance module exists but is not wired to the provider path.
DLP / DSPM (for example Forcepoint Data Security Cloud)PEPCONCEPTUALData-loss prevention and data-security posture tools could act as enforcement points for Alice decisions on data movement.No Forcepoint or other DLP integration exists. Named as an example of the enforcement-point pattern only; no partnership or endorsement is implied.
Nexus gatewayPEPCONCEPTUALA Nexus-hosted enforcement point combining identity, model routing, and receipts.Roadmap concept.
PDP AND PEPThe pattern is standard access-control architecture: a policy decision point evaluates and answers; policy enforcement points sit in the path and act on the answer. Alice is designed as the decision point; the enforcement points listed as planned or conceptual are the work still required for live enforcement.

Alice on this site runs over the synthetic Lakeview General Hospital environment. Verdicts, checks, and receipts are computed by the Nexus decision engine on synthetic requests; nothing here is a customer, a patient, or a production deployment. Signed-in organizations see their own agents, decisions, and receipts.