STEP 01 OF 04

Mission Configuration & Envelope

Define physical target altitude and safety boundary thresholds for the Bitcraze Crazyflie 2

Mission Presets:
Nominal setpoint height above ground
Allowable steady-state deviation corridor
Time budget for flight trial
200 steps (dt = 0.002s / 500 Hz)
Calculated discrete simulation iterations
STEP 02 OF 04

AI Flight Controller Synthesis

Generate real-time control algorithms using Vultr Serverless Inference (zero host execution)

GLM 5.3 Flash DEFAULT

Rapid time-to-first-token with strict JSON action schema adherence.

• Latency: ~2.1s • Minimal reasoning
Qwen 3.8 Flash Next

Superior mathematical reasoning for aerodynamic disturbances.

• Latency: ~2.4s • Deep state analysis
DeepSeek V4.1 Flash

Specialized code synthesis with compact, scoped Python logic.

• Latency: ~1.8s • Tight variable scope
Minimal (fastest token generation, minimal reasoning depth)

All controller synthesis requests are processed via Vultr Serverless Inference at api.vultrinference.com/v1. Zero credentials are sent to the client.

Python 3.12 (observe(obs) contract) AST Verified sha256: none
Action Bounds: 0.00 to 0.35 N
STEP 03 OF 04

MicroVM Sandbox Cage & Parameters

Verify hardware-level microVM containment and configure simulation parameters

Hardware Virtualization AMD EPYC nested KVM (/dev/kvm) hardware microVM isolation
Default-Deny Network Zero published ports, zero host mounts, egress dropped by policy
Watchdog Hard Ceiling 0.50s monotonic wall-clock timeout terminates runaway controllers
MuJoCo 3.3.7 Plant Bitcraze Crazyflie 2 physics owned strictly by the trusted host

Trial Initial State & Perturbation

Physical starting height above floor
Constant vertical force injection
Deterministic PRNG seed
Async Background Queue
Sync streams results immediately

Untrusted controller runs exclusively inside a disposable guest microVM. Simulator physics advance on the host at 500 Hz.

STEP 04 OF 04

Live Flight Telemetry & Deterministic Adjudication

Real-time MuJoCo physics observations, bit-for-bit replay verification, and cryptographic Court Record

State Machine Status: Ready to Launch
Created
Spec Approved
Controller Validated
Queued
Running
Completed

Altitude Trajectory (z) vs. Time (t)

Green corridor: Allowed Envelope | Red dashed: Target Altitude (0.10m)

MuJoCo dt = 0.002s 500 Hz Closed Loop
Completed Steps 0
Final Altitude 0.000 m
Altitude Error 0.000 m
Min Altitude 0.000 m
Max Altitude 0.000 m

Deterministic Physical Adjudication

Multi-dimensional findings verified by independent host re-simulation

Replay Divergence: 0.00e+00 m MATCHED (≤ 1.00e-12 m)
Flight Stability
NOT RUN

Awaiting simulation execution.

Containment Perimeter
PASS

MicroVM guest isolated; zero host secrets or socket leaks.

Asset Provenance
Hash Locked

SHA-256 digests match model XML and controller AST.

Terminal Cleanup
SUCCEEDED

MicroVM destroyed; 100% resources reclaimed.

! MANDATORY ADJUDICATION DISCLOSURE

This trial evaluated AI control code inside a synthetic MuJoCo 3.3.7 simulation environment. A verdict of Not Falsified confirms that no safety constraints were breached under the simulated conditions, but remains INCONCLUSIVE regarding universal safety or physical Crazyflie 2 airworthiness. Actuator dynamics are uncalibrated research approximations.

Court Record Package (Schema v1.0) Cryptographically signed JSON ledger containing actions, trajectory vectors, and event hash chain

Independent Court Record Verifier

Verify cryptographic SHA-256 asset hashes, chained host events, and bit-for-bit physical replay without re-executing controller code

Drag and drop a court-record-*.json file here, or click to browse

OR PASTE JSON PAYLOAD
BLAST RADIUS ZERO PROOF

MicroVM Isolation & Containment Suite

Host-enforced adversarial containment verification in dedicated Microsandbox microVMs.

PARTIAL
Execution Environment: Checking...
Cleanup Guarantee: Checking...
Evidence Source: Checking...
Last Audit Timestamp: Checking...
CAP-HOST-001
PASS

Broker Capability Denial

Host-enforced refusal of unauthorized capability / canary requests. Guest receives explicit DENIED response.

Policy: deny-host-capabilities-v1
Evidence Source: Trusted Host Broker
Host Decision: DENIED (Canary read refused)
MicroVM Cleanup: 100% Confirmed
NET-EGRESS-001
Policy Confirmed

Network Isolation

Default-deny egress and ingress. Zero published ports, zero host mounts, and guest TCP connection failure.

Default Egress: deny
Default Ingress: deny
Ports / Mounts: 0 ports, 0 host mounts
MicroVM Cleanup: 100% Confirmed
RES-TIME-001
PASS

Resource Watchdog Timeout

Wall-clock timeout enforcement on infinite guest loop. Host watchdog terminates unresponsive guest.

Deadline: 0.50 s limit
Elapsed Monotonic: 0.501 s
Evidence Source: Trusted Host Watchdog
MicroVM Cleanup: 100% Confirmed
RES-MEM-001
Observed Exit (Cause Unknown)

Memory & Runtime Exit

Truthful observation: 1 GiB allocation requested under 512 MiB limit. Exited with code -1 without unsupported OOM claims.

Requested Memory: 1,073,741,824 bytes (1 GiB)
Configured Limit: 536,870,912 bytes (512 MiB)
Job Exit State: exited (code -1)
Termination Attribution: Not Attributed (Truthful)
MicroVM Cleanup: 100% Confirmed
CLEANUP-100
PASS

Cleanup Guarantee

100% microVM deletion confirmed via msb list on all normal, timeout, crash, and abort paths. Zero leaked processes.

Teardown Policy: Mandatory context manager exit
Orphaned MicroVMs: 0 (Zero leaked VMs)
Post-Run msb list: Empty guest table
Audit Result: PASS (Deterministic)

Cryptographic Host Event Log Chain

VERIFIED
Event Log File: containment-suite-20261105-final.json.events.jsonl
Chained Events: 18 events
Root / Head SHA-256: 67ff6282bf5943982cc0674c980170240571e52f8ec8f425ddcd6cec53101c80
Integrity Status: All 18 records verified against SHA-256 state chain

Blast Radius Zero Truthful Disclosures

  • Network destination-level denials were confirmed via host policy inspection and guest TCP probe, not observed by an external host gateway.
  • Memory job exit code (-1) was truthfully recorded without unsupported claims of kernel OOM killer attribution.
  • The event chain is local and SHA-256 linked; it has no external RFC 3161 timestamp anchor.

Dómnir Trust Boundaries & Architecture

Vultr Agent Rush Hackathon, Challenge 01: Blast Radius Zero

01
Host Never Runs Untrusted Code

AI-generated flight controllers are restricted to an isolated Microsandbox microVM via /dev/kvm. The host simulation harness is separate.

02
Secret Hygiene

No Vultr Serverless Inference API keys, database credentials, or host secrets are ever passed into the guest execution cage or the frontend.

03
Host-Owned MuJoCo Simulation

Only the trusted harness (Forseti) advances simulation physics, applies actuator bounds, and records truth telemetry. The guest only receives sensor observations.

04
Deterministic Replay Verification

Recorded action vectors are replayed on a pristine MuJoCo instance to prove bit-for-bit physical trajectory reproducibility (<= 1e-12 m difference).

05
Ephemeral Teardown Guarantee

Every sandbox is subject to strict CPU, memory, and wall-clock deadlines. Cleanup and lease termination are enforced on normal and error paths.

06
Truth in Qualification

Finite falsification campaigns identify boundary counterexamples. They are never represented as mathematical safety proofs or real-world airworthiness.

Supported Vultr Serverless Inference Models

Model ID Family Role & Strengths Reasoning Effort
glm-5.3-flash GLM Default model. Rapid inference and structured flight controller generation. Configurable (Minimal, Low, Medium, High)
qwen3.8-flash-next Qwen Deep mathematical reasoning and complex multi-variable state analysis. Configurable (Minimal, Low, Medium, High)
deepseek-v4.1-flash-1017 DeepSeek Specialized code synthesis and compact Python logic generation. Configurable (Minimal, Low, Medium, High)