Atlas Service — Multi-Cloud Discovery & Blueprint Compiler
Bottom line: `prlx-atlas-svc` continuously ingests asset graphs across Azure, AWS, GCP, Entra, and on-prem clusters over federated OIDC—normalizing state into zero-PII `C11` schemas and compiling decision-gated `C14` deployment blueprints.
Estate Normalizer Service
Real-time gRPC collectors normalize Azure, AWS, GCP, and hybrid virtualization state with automatic entity pseudonymization.
Blueprint Synthesizer
Evaluates discovered posture against 22 architectural pillars and emits right-sized target-state manifests (`C14`).
Telemetry Calibration
Ingests post-deployment capacity telemetry and DR drill timings to refine sizing priors automatically.
https://atlas.internal.goparallax.app/v2/ingest
Last full estate snapshot: 4m ago · 0 raw tenant IDs persisted
Forge Service — Zero-Touch Multicloud & Edge Provisioning
Bottom line: `prlx-forge-svc` compiles validated `C14` blueprints into signed Bicep, Terraform, Kubernetes, and Graph-as-Code rollouts—enforcing pre-flight FinOps budget caps and automated blue/green rollback.
Cloudflare Zero Trust
goparallax.dev and goparallax.app locked with Strict TLS, SPF -all, DMARC p=reject, and Access rules.
Multicloud Stamp Engine
Ready to provision ephemeral compute pools, Key Vault HSM brokers, and cross-cloud WORM vaults on approval.
Hardened Operator Profile
Deploys locked-down Intune compliance and conditional access policies for privileged operator sessions.
Swarm Service — 14 Autonomous Domain Specialists
Bottom line: `prlx-swarm-svc` orchestrates 14 isolated specialist containers across your cloud, identity, endpoint, edge, and ITSM planes—correlating drift and queuing cryptographically locked remediation plans.
PLN-2026-1111-01
Intune Specialist: Retire 3 orphaned sandbox session host records (avdlz-sh-01..03)
Graph & Ledger Service — Blast-Radius Closure & Cloud Arbitrage
Bottom line: `prlx-graph-svc` computes transitive dependency closures in under 5ms to prove that queued changes cannot impact active users or Tier-0 roles, while optimizing multi-cloud workload placement.
$14.82 of $150.00 Cap
Unified real-time metering across Azure, AWS, GCP, and AI Foundry/Anthropic/OpenAI token consumption.
Placement Optimizer
Routes burst compute and batch inference to the lowest-cost regional SKU and active free-tier grant pool.
p82 Maturity Composite
Continuous percentile scoring across Reliability (p85), Security (p90), and Cost Optimization (p78).
Ward Service — Canary Tripwire Mesh & Prompt Firewall
Bottom line: `prlx-ward-svc` maintains zero-standing-cost identity and cloud canary tripwires across Entra, AWS, and GitHub while inspecting 100% of external control-plane strings for prompt-injection payloads.
Decoy Principals Armed
Tracked honeytoken break-glass accounts and decoy app credentials monitored via sub-second SIEM streaming.
Ingress Stream Sanitizer
Deterministic inspection of untrusted display names, resource tags, WAF URI logs, and ITSM ticket bodies.
Circuit-Breaker Gate
Instantly halts Angle B execution tokens and triggers a WORM forensic seal if any canary tripwire fires.
Bunker Service — Immutable WORM Vault & 4-Stage Reconstitution
Bottom line: `prlx-bunker-svc` seals encrypted, chunked state snapshots into dual-verified WORM storage and orchestrates automated 4-stage Continuity of Government (COG) reconstitution across clouds.
WORM LKG Vault
Independent verifier confirmed SHA-256 integrity across 14 estate state chunks.
Lifeboat DNS & ID
Pre-seeded Lifeboat zone and directory object-ID translation table ready.
Cleanbench Rebuild
Signed git bundles and isolated operator workstation manifests verified.
Workload Restore
Cross-tenant recovery drill completed in 18m 40s with zero left-running compute.
WORM-2026-1111-LKG
2-of-N Quorum Guard Active · Pilot-Light Heartbeat Normal