Research that ships.

Inbound mail can be scored from observable, reproducible signals without a probabilistic classifier deciding the verdict — an extension of the deterministic-algorithmic engine that powers OrangePeel.

Weighted signal decomposition (header canonicalization, identity drift, link-target verification, body cadence) into a single reproducible score. Same inputs always produce the same score; every decision is auditable.

Held-out validation at 91.4% accuracy, FPR 0.7% on a 50k-message set. Triaging the false-positive class.

A user’s gaze following a moving fixation target produces a reproducible signature distinguishable from a photo, video replay, or generated face.

Capture eye-target delta over a short rotational pattern. Threshold against an RMS error budget. Designed to slot into MyMeridi’s MFA as a low-friction step-up, not a primary auth.

99.2% reject rate on synthetic-face dataset v2. False-rejection of real users at 1.4%. Pilot approved for MyMeridi MFA in week 21.

Insider misuse can be flagged with deterministic rules grounded in observed operator behavior — without a behavioral model that becomes a second source of opacity.

A rule lexicon built per tenant: admin tokens used off-hours, bulk exports above a threshold, new device + privileged op within minutes. Each rule explainable on its own.

Cold start. 12 deterministic rules in the lexicon; targeting 30 by end of phase 1. First batch of consenting-tenant data ingested 2026-04-22.

A single bug in application code should not leak data across tenants. The guarantee should hold at the database layer, not the application layer.

Schema-level row policies plus an adversarial fuzz harness that generates queries designed to escape tenant scope. Every query passes through the harness before reaching production.

4.0M adversarial queries generated. Zero cross-tenant returns. Schema coverage at 100%. Extending into derived views next.

Cross-product signing keys can move from application memory into a hardware enclave without breaking the latency budget for cross-product handoffs.

Bench an enclave-backed signer against the current in-memory implementation. Target: p99 below 1ms per signing operation.

Initial bench at p99 = 3.92ms — well above the 1ms budget. Track paused pending alternative enclave hardware.