Mesh.

Collective intelligence, trained on the network it defends. Every validator is a sensor. The brain learns from all of them - when one validator is probed, every validator gains the protection.

Every Mesh-connected validator runs IBSR locally. Behavioural baselines form on real packets, not synthetic data. Counterfactual evidence accumulates per validator.

Mesh aggregates judgments across the cohort. A probe seen by one validator becomes evidence for all. Drift, novelty, and consensus all measured.

Authority is granted in stages, scoped to abuse classes. Operators decide. Evidence justifies. Cohort policy may extend authority across nodes.

Guard enforces in kernel-space. XDP/eBPF drops, sub-5µs decision-to-action, only on authorised classes. Drop-in compatible with existing firewalls.

What Mesh
can and cannot do.

Each authority is scoped to an abuse class, granted by the operator, revocable at any time, and logged in a public ledger. Counterfactual evidence is always retained.

scope:    recon.fingerprint
class:    abuse.network.discovery
grant:    operator.cohort=42
issued:   2026-04-12T14:02:11Z
expires:  2026-07-12T14:02:11Z
revoke:   immediate · operator
evidence: required · shadow.threshold≥0.92
ledger:   public · zk-attested
guard:    xdp.drop