Skip to main content

The trajectory

Pre-ATO today. On track for H2 2026.

The compliance posture is sequenced with the Tradewinds OTA timeline. FedRAMP Moderate, CMMC 2.0 Level 2, and ATO inheritance via Second Front Systems' Game Warden, in that order.

01 / 02

The sequence

Each milestone has a date and a dependency.

No milestone is claimed before it is earned. The status on every row is honest as of today: pre-ATO now, the FedRAMP and CMMC work on track for H2 2026, the operational milestones projected against the Game Warden inheritance path.

REG-01 / COMPLIANCE MILESTONES DATE · STATUS · DEPENDENCY
  1. TODAYAs of June 2026

    Pre-ATO

    Current state

    Hypha runs in the air-gap-capable envelope. The compliance work is sequenced around the OTA opportunity, not vice versa.

  2. H2 2026Target window

    FedRAMP Moderate

    On track

    DEPENDENCY: Game Warden inheritance

  3. H2 2026Target window

    CMMC 2.0 Level 2

    On track

    DEPENDENCY: Game Warden inheritance

  4. SEP 2026Projected

    ATO via Game Warden inheritance path

    Projected

    DEPENDENCY: FedRAMP and CMMC complete

  5. DEC 2026Projected

    Sustained mission operations with a Department of War customer

    Projected · TRL 9

    DEPENDENCY: ATO granted

Inheritance

The path is inherited, not rebuilt. FedRAMP Moderate, CMMC 2.0 Level 2, and the ATO are reached through Second Front Systems' Game Warden, which carries the accreditation envelope so Hypha does not re-litigate controls already authorized.

02 / 02

The controls

The controls that matter, written down.

Four controls hold the line while the accreditation work runs. They are in force today, not on the roadmap.

  • CTL-01

    Air-gap capable

    No commercial cloud LLM. No API key. No network egress at runtime. The runtime is the room.

  • CTL-02

    Auditable provenance

    Every output cites the data and the model card that produced it.

  • CTL-03

    JWT-gated authentication

    Admin and operator surfaces both gated. CORS allowlist enforced.

  • CTL-04

    Honest evaluation in the UI

    The platform refuses to deploy models that fail the holdout. The verdict is visible to the operator.

Bring the compliance posture to your program office.