Documents. Datasheets, model cards, attestations.

Single-page overview of the platform, modules, and deployment shapes.

Lite / S / M / L / Zero specs, eval numbers, deployment matrix on one page.

Mid-tier triage and inline distilled model specs side by side.

11 integrated scanners, enrichment feeds, SBOM formats. One reference per page.

Tool allowlisting, capability scoping, egress guardrails, audit chain-of-custody.

Air-gapped and FedRAMP HIGH-ready architecture, GPU sizing, accreditation alignment.

Why reachability-augmented LLM reasoning outperforms either approach alone. Includes the evaluation methodology and the held-out CVE benchmark setup.

What goes in, what stays out, and why a security-only training corpus shifts the precision/refusal-rate curve materially.

Sliding-window plus landmark attention, security-augmented tokeniser, MoE in the largest tier, structured trace as a first-class output.

How Griffin Zero proposes upstream patches, runs them through maintainer test suites, and drafts the disclosure thread.

Parameters, training data summary, eval results, intended uses, limitations.

Parameters, training data summary, eval results, intended uses, limitations.

Parameters, training data summary, eval results, intended uses, limitations.

Parameters, training data summary, eval results, intended uses, limitations.

Sparse MoE routing details, sovereign deployment notes, full eval suite.

Ranking + clustering head details, taint-path benchmarks, INT8 quantisation notes.

Distillation lineage, on-device latency benchmarks, privacy posture, signed-weights provenance.

Latest annual report. Available under mutual NDA on request.

Control mapping and statement of applicability; certification in progress.

Control narrative mapping for the Digital Operational Resilience Act.

Control narrative mapping for the NIS2 Directive.

Evidence pipeline aligned to NIST SP 800-218 SSDF and Executive Order 14028.

Pre-mapped controls and evidence for CMMC Level 2 and Level 3 assessments.

Mapping for the Digital Personal Data Protection Act, 2023.

Data processing mapping and standard contractual clauses.

Latest release. Signed with sigstore. Updated each release.

Same content, SPDX 2.3 format. For consumers on the SPDX side of the fence.

Signed provenance attestation for each shipping Griffin variant. Includes hash + signature for verification at install.

License, severity, EPSS, KEV, age-of-fix policy templates ready to drop into your repo.

Reference template for engineering teams emitting CycloneDX for the first time.

Worked examples of VEX statements for common CVE scenarios.

Capability-scoping templates for common agent surfaces (Claude Code, Cursor, Cline).