Principles

Offline-first

Missions never depend on continuous connectivity.

Sim-first validation

Mission logic is tested in simulation before it flies.

Degraded-mode design

The system is designed for what happens when something fails.

Log-driven verification

Every claim traces back to a flight log.