Bundles C2operatorbundlehardware

Operator on a Box

The Operator's Manual plus SOC in a Box — the command layer and the hardened machine to run it on. Sovereign by construction: your vault, your gates, your hardware. 18% off buying separately.

The seat that conducts the department, and a machine you hold it on.

The Operator's Manual — C2 Command Layer. One pane that conducts everything: intake from four employee doorways, visible approval gates on every consequential action, one living risk register the board reads from, and observability over every AI channel — volume, cost, injection watch, escalation. Plus the agent layer (OpenClaw, Hermes, Grok- or Claude-based) held to three invariants — one vault, one gate, full observability — and wired to the CISO Marketplace MCP and API feeds.

Pillar 04 Companion — SOC in a Box. The hardware the operator seat can live on: a coreboot machine with the Management Engine disabled and Nitrokey as the root of trust, three disks mapped to three storage tiers, a key ceremony with no cloud equivalent, and a 14-test acceptance suite before a single agent points at it.

Why they pair. The C2 guide's containment guarantee is that the AI layer can be severed in one click with production untouched. That guarantee is a great deal stronger when the vault, the gates and the keys sit on a machine whose firmware you control and whose evidence key has never existed in software. Sovereign by construction rather than by policy.

Hardware available separately through Security Gadgets — Qubes-capable laptops, Linux NUCs and hardware tokens.

What's in this bundle

Security Program Pillars 24 pages

The Operator's Manual — C2 Command Layer

The capstone above all six pillars: one seat that conducts the whole department. Intake from four employee doorways, visible approval gates, one living risk register, and observability into every AI channel — with the agent layer and MCP wiring that runs it.

Security Program Pillars 8 pages

Pillar 04 Companion — SOC in a Box

The Open SOC reference architecture landed on one machine you can hold — a coreboot NUC with the Management Engine disabled, Nitrokey as the root of trust, three disks mapped to three storage tiers, and a 14-test acceptance suite you run before pointing a single agent at it.