Sovereign document intelligence for defence

Every answer cited to its source — or it refuses.

Cortessa answers from your approved document set with every claim traced to a cited source span. It runs offline on a sovereign workstation on your desk. Blind-tested on real, public documents: 0 fabrications passed the gate.

  • Verified / Draft / Refused
  • Offline, air-gap-safe
  • Blind-tested on real documents — 0 fabrications passed the gate

The evidence, with its test context

  • ~97% retrieval with 0 provenance breaches across a 480-question blind evaluation; all 16 fabrication baits gated. Raw artifacts hash-manifested.
  • 12 / 12 out-of-corpus questions refused — 0 fabrications — in an independent, oracle-authored 60-question blind exam on a real physics corpus, fully offline.
  • 1.0 / 1.0 audit recall and precision across four seeded error classes; on a real NASA programme document family, 15 / 15 genuine findings with 0 false positives.
  • 156 real, public NASA documents in the live demonstration corpus — every citation opens a document you can download and check yourself.

Measured blind on real, public corpora (NASA/NTRS and arXiv document sets); raw run artifacts are hash-manifested. Accuracy figures are a floor set by interim development hardware, not a ceiling of the design.

The guarantee is enforced in code, not hoped for

Every output is provenance-gated. The gate is deterministic and never-false-positive: a number or identifier that is not in the source cannot pass as Verified. Cortessa never certifies — the engineer signs off.

Verified

Shown only when a claim is provably a near-verbatim span of a cited source.

Draft

Unprovable claims are shown as Draft — never passed off as fact.

Refused

When the fact is not present, the system refuses rather than guess.

The right revision for the right variant

Supersession is a claim about time — Rev E replaced Rev D. Effectivity is a claim about configuration — Rev D still applies to hulls 1–4, Rev E from hull 5, both current at once. Serving the wrong one to the wrong variant is a safety event, and a search engine cannot tell the difference.

  • Configuration-aware answers. For S1000D technical publications, an answer is bound to the product configuration it applies to — modules for a different variant are withheld and reported, not silently blended in.
  • Undecidable is flagged, never guessed. Where applicability cannot be decided from the data, the answer says so — the same refusal ethos as the provenance gate.
  • Benchmarked. 0 wrong-variant leaks across the committed effectivity benchmark — eight configuration-scoped questions over a disclosed, purpose-authored S1000D corpus.

Three capabilities, one guarantee

Lead capability

Audit

Cross-references your whole corpus and surfaces where documents disagree — numeric conflicts, supersession, broken references, stale content — as a cited findings list for an engineer to adjudicate.

Recall 1.0 and precision 1.0 across four seeded error classes; 15 / 15 genuine findings, 0 false positives, on a real NASA programme document family.

Ask

Natural-language questions answered from your corpus, every sentence cited. It refuses when the fact is not present.

~97% retrieval, 0 provenance breaches, across a 480-question blind evaluation; 12 / 12 out-of-corpus questions refused with 0 fabrications in an independent blind exam.

Author in development

Turns the corpus into a cited, sign-off-ready briefing, where the engineer accepts, revises, or rejects each drafted claim. In development — additional testing underway.

Defence is the proving ground

Sovereignty, provenance, air-gap operation: a product that clears that bar clears it for everyone else. Cortessa runs disconnected, on a dedicated sovereign workstation on the analyst's desk — a single executable; no server, no cloud, no internet dependency. Nothing leaves the machine to answer a question.

The same guarantee travels to civil aerospace, nuclear, energy, rail, pharma, legal and government estates. One product, one guarantee, many document estates.

Explore sectors & use cases →

  • Offline (default) — pure local retrieval; nothing leaves the machine.
  • In-region cloud — optional AI via a UK (London) entry region; opt-in and logged.
  • On-device — optional AI fully on-device; the same gate applies, nothing leaves the machine.

The appliance · in development

The same guarantee, as a sealed unit

The sovereign workstation, taken to its conclusion: Cortessa is being brought to a sealed, self-contained appliance — the whole system in a single unit, running offline inside your boundary. No cloud, no server, nothing leaving the machine.

Cortessa appliance concept, front three-quarter view: a low, near-black unit with a honeycomb intake grille, the cyan Cortessa emblem on a machined badge, and the Cortessa wordmark.
Concept visualisation — industrial design in progress.
Rear of the appliance concept: a honeycomb intake above a recessed I/O panel with power, four USB-C, HDMI, 10GbE and two QSFP ports, each labelled.
Rear I/O
Macro detail of the cyan Cortessa orbital emblem on a machined graphite badge set into the honeycomb.
Emblem detail

This website works the way the product does

No third-party CDNs, no external web fonts, no analytics or trackers that phone home, no external calls at runtime. Every asset is self-hosted. It loads inside an accreditation boundary, disconnected — the same constraint Cortessa is built to.

Cross-checking controlled documents by hand?

There is a scoped, paid pilot worth a conversation — on your hardware, behind your firewall, against success criteria you set.