Deterministic Knowledge Graph Construction
Builds graphs from validated structured sources with deduplication, normalization, schema enforcement, and conflict resolution — deterministic algorithms only, IndexMap iteration order where HashMap would leak.
Entity Resolution Engine
Exact ID equality, composite keys, Levenshtein and Jaro-Winkler fuzzy matching, HNSW HDC candidate generation, and KAOS Fellegi-Sunter fallback — all gated by deterministic merge before anything persists.
Connection Analyzer
Dijkstra, A*, BFS, DFS all-paths, Tarjan SCC, Kruskal MST, Brandes betweenness, closeness, eigenvector centrality, PageRank, Louvain, label propagation, Jaccard and cosine similarity — 44+ algorithms in one in-process library.
Deterministic Query Engine
Cost-based planner translating Athena query language into geomDB SQL, Cypher, OQL, and SPARQL with deterministic execution order. Cross-modality routing via Q6 TripleBoom at p99 ≤50ms.
OWL 2 EL Ontology Management
Pure-Rust Description Logic reasoner — TBox subsumption, ABox consistency, role chains, disjointness axioms. Ontology persisted via geomDB M9; closure cached in M8 semantic cache with dependency-tracked invalidation.
Mandatory Provenance on Every Relationship
Direct, Inferred, Merged, Transformed provenance enum on every relationship. Verified facts at confidence 1.0 via MUKR verify_claim workflow. No relationship exists without recorded origin.
Quadtemporal Knowledge Tracking
Bi-temporal baseline plus relationship valid-time and system-time axes. Domain-specific temporal dimensions (calibration validity, campaign run time, verification revision, observed-at) declared per consumer table.
Hybrid Deterministic-Heuristic Queries
Fuses Athena verified facts with fullSET heuristic inferences in a single result set. Confidence-weighted ranking with monotonic combiner — adding evidence never decreases confidence of an existing verified fact.
Embedded Sub-Millisecond Runtime
athena-engine crate compiled in-process via Arc<AthenaEngine> — p99 entity lookup ≤800µs at 100M entities. PTHash MPH index, concurrent hot cache, flat snapshot read path. Primary mode for Lynceus observability hot path.
Full Server Runtime Protocol Suite
mTLS-terminated HTTPS, WebSocket subscriptions, REST, GraphQL, and gRPC/protobuf — matching Timeline-X, KAOS, and Moira reference peer set. Server entity lookup p99 ≤5ms at ≥50K QPS.
Knowledge Indexer
Graph adjacency indices via geomDB native indexing plus tantivy full-text layer for property values. Lock-free reads against Searcher snapshots; parallel cross-index writes.
Property Graph Schema Management
Entity types, relationship taxonomy, property constraints, and validation rules enforced at ingestion. Schema evolution preserves identity via geomDB __geomdb_anchor_id anchors across version chains.
Multi-Tenant Isolation by Construction
Tenant identity from CRTL identity chain — no internal tenant table. Per-tenant semaphores, geomDB per-modality isolation, namespace grammar tenant_<scope>__athena__<capability>. Shared SaaS uses leading partition keys for RLS-as-pruning.
Seven Deployment Class Support
self_hosted, BYOC, managed_dedicated, shared_saas, hybrid, airgapped, edge_constrained — each with explicit per-class rules for storage posture, networking, schema design, and allowed features. No v1 scope-down.
ARGUS-Gated Privileged Mutations
Ontology axiom edits, merge decisions, entity deletions, and ownership record changes require ARGUS approval classes — self_approved, dual_approved, or recovery_critical. Every mutation emits immutable audit entries.
Graceful Query Resolution
Athena never returns query impossible — resolves to the safest viable interpretation, explains the delta, and allows override. Pedagogical error messages with progressive disclosure across SDK levels.
Cross-Product Integration Manifests
Section-27-compliant subset declarations per consumer — DXP eight API operations across sixteen call sites, MUKR six-method AthenaClient trait, Lynceus five integration structs, MAXACOR inverted ownership fact store.
SDK Coverage with CRTL Bootstrap
Rust, Python, Java, Go, and TypeScript SDKs. Server mode initializes via POST /crtl/client/bootstrap — signed endpoint bundles, no hard-coded URLs. Embedded mode uses direct Arc<AthenaEngine> references.
