Cut 08 · Liminal Custody · Desktop flow prototype

◇ Liminal Custody

◌desktop demo shell

5th Fleet watchfloor 0200 local

Named operator PS1 primary

Maritime watch officer, U.S. 5th Fleet. One vessel goes dark in the chokepoint. A second identity appears nearby. The system preserves custody hypotheses and refuses intent until the evidence chain clears.

Signal sources 4 feeds live

Case queue 1 active

Real-world findings NatSec hackathon · 2026-05-03

Surfaced live during the hackathon demo from real Strait of Hormuz OSINT feeds. No staged data. Same agents as production.

Iranian crude tanker MMSI spoofing. Multiple distinct intel markers chained. Each signal unremarkable alone, suspicious in sequence.

Sanctions-fleet evasion. Routing choices, gray-market destinations, timing patterns connecting commercial behavior to sanctions risk.

Loitering clusters. Pattern-not-anomaly framing. Cluster behavior with contextual markers as intent indicator.

Vessel-identity changes over time. Standalone identity change is administrative; chained with other markers, it becomes an indicator.

Replay beats step 1 of 5

Substrate / Stage viewport / Working panel / Command line

Stage viewport

viewport

Range 14nm Latency 2.3s

original track contested gap emergent identity rule-applied recommendation

Evidence chain traceable receipts

Command line causal trace

custody://

Replay controls Ctrl/Cmd+Shift+R resets