CrestView PDS · Decision Records Live

Audit-Grade Decision
Records for
DoD Network Planning.

CrestView PDS produces tamper-evident, cryptographically signed, externally verifiable decision records as the primary deliverable — not a side effect of network operations.

181ms

15K Node Import

5,413

Audit Chain / sec

cATO

Ready

CrestView PDS
Capabilities

Decision Records as the Primary Deliverable

Everything — topology, discovery, proposals, scoring, workflow integration — serves the production of defensible decisions.

Tamper-Evident

Audit Trail

Hash-chained, signed, append-only records. Database-level triggers enforce immutability. Standalone verification tool allows independent verification without system access.

Deterministic

Optimization Engine

Ranked proposals via a deterministic, explainable, multi-objective weighted model — same inputs produce byte-identical output with a full per-factor score breakdown. HiGHS/CP-SAT/GNPy solver integration is on the roadmap.

Vendor-Neutral

Multi-Vendor Support

Vendor-neutral topology model supporting Ciena, Nokia, Cisco, and Infinera equipment in a single deployment. No vendor lock-in.

Disconnected

Air-Gap Ready

Four deployment profiles: standalone, VM-native, OpenShift, RKE2. Node-count licensing via signed artifacts — no phone-home requirement.

Continuous

cATO Ready

Continuous evidence emission via OpenTelemetry. Self-attestation across 8 check types. 42 STIG controls assessed across 4 STIGs. FISMA Moderate baseline.

Human Authority

Human-Only Decisions

AI systems can submit proposals but architecturally cannot commit decisions. Enforced in code, not policy. The human planner always decides.

Performance

DISA-Scale Benchmarked

All metrics measured against a 15,000-node topology matching DISN operational scale. Memory footprint verified at 57 MB.

181

ms

Topology import (15K nodes)

20

μs

Pathfinding (10 hops)

469

μs

Proposal generation

5,413

/sec

Audit chain throughput

Comparison

The Capability Gap Is Structural

CrestView PDS occupies a position no existing tool does: audit-grade decision records with multi-vendor support, deterministic optimization, and air-gap operability.

Capability Vendor NMS Excel + Visio CrestView PDS
Audit-grade decision recordsNoNoYes
Multi-vendor topologySingle vendorManualYes
Deterministic optimizationVendor-specificNoneYes
Air-gap deploymentLimitedN/AYes
cATO readinessVariesNoYes
External verificationNoNoYes
Node-count licensingPer-vendorN/AYes
Built For

Every Role in the Decision Lifecycle

CrestView PDS serves everyone who touches a network planning decision — from the planner who makes it to the auditor who reviews it years later.

Primary

Network Planner

Record decisions once, defend them forever. Deterministic optimization removes second-guessing. Keyboard-first workflows respect your expertise.

Reviewer

CAB Member

Standardized review packages with alternatives evaluated transparently. Spend 10–30 minutes approving, not hours digging for documentation.

Auditor

IG Investigator

Verify any past decision without CrestView access. Standalone verification tool. Cryptographic proof the record hasn't been tampered with.

Executor

Operations Team

Clear implementation instructions with rollback procedures. ServiceNow change-ticket integration (Table API adapter) — enable by pointing it at your in-enclave ServiceNow instance. No ambiguity.

Compliance

Designed for Accreditation

Built for classified enclaves — STIG-mapped controls, cATO evidence, and air-gap deployment. Every cryptographic, access control, and audit requirement is addressed in the architecture, not bolted on after. Accreditation (ATO) is granted by your Authorizing Official.

FISMA Moderate baseline (target)
cATO Ready
FIPS 140-3-capable build
CNSA 1.0 (ECDSA-P384)
PQC / CNSA 2.0 on roadmap
NIST SP 800-53 Rev 5
IPv6 Baseline
STIG self-assessment (52 controls)
PPSM Documented
Architecture

10 Active Subsystems (1 Staged). PostgreSQL the Only Runtime Dependency.

Built in Go for single-binary deployment. PostgreSQL for persistence. No middleware, no message queues, no microservice sprawl.

LanguageGo 1.26+
DatabasePostgreSQL 17 (Iron Bank)
CryptographyECDSA-P384; FIPS 140-3-capable
SecretsVault Enterprise
ObservabilityOpenTelemetry
Container BaseAlpine 3.20 (non-root)
Build PipelinePlatform One Big Bang
AuthenticationPKI / CAC / RADIUS / TACACS+
RBAC Roles12 roles
Network PostureRead-only (never pushes config)

Standalone

systemd unit. Evaluation, pilot, training.

VM-Native

Multi-tier. DISA GMS, mid-sized enterprise.

OpenShift

Platform One environments.

RKE2

Tactical environments.

Get Started

Ready to Make Every Decision Defensible?

Node-count tier licensing. 90-day evaluation at no cost for up to 100 nodes. OTA, GSA Schedule (pending), and direct contract vehicles available.