skcot Component Map

One process on the tactical net: listeners, the a-* vs b-* classifier, the situational store, the sovereign CA, and the AI teammate. Derived from the skcot README, SOP system diagram, and docs/ARCHITECTURE.md.

skcot Component Map One process on the tactical net: listeners, the a-* vs b-* classifier, the situational store, the sovereign CA, and the AI teammate. Derived from the skcot README, SOP system diagram, and docs/ARCHITECTURE.md. Device data package · packages/<device>.zip, built once · skcot.pki, sovereign CA on disk Device data package packages/<device>.zip, built once skcot.pki CA · ca.pem / ca.key, RSA-2048 on disk · skcot.pki, sovereign CA on disk · tier T0 skcot.pki CA ca.pem / ca.key, RSA-2048 on disk tier T0 skcapstone · optional: reasoning + memory · Architecture component · optional skcapstone optional: reasoning + memory optional Your own LLM · answers operator GeoChat · Architecture component Your own LLM answers operator GeoChat ATAK / iTAK / WinTAK · enrolled TAK clients · Tactical devices (tailnet or LAN) ATAK / iTAK / WinTAK enrolled TAK clients Mesh SA device · UDP multicast, no server · Tactical devices (tailnet or LAN) Mesh SA device UDP multicast, no server TlsCotStreamServer · :8089 TLS, ssl.CERT_OPTIONAL · skcot.service, one process · weak point TlsCotStreamServer :8089 TLS, ssl.CERT_OPTIONAL weak point CotStreamServer · :8087 plain TCP · skcot.service, one process CotStreamServer :8087 plain TCP UdpMeshListener · 239.2.3.1:6969 + GeoChat group · skcot.service, one process UdpMeshListener 239.2.3.1:6969 + GeoChat group skcot.agent · AI teammate: beacons position, reads GeoChat · skcot.service, one process skcot.agent AI teammate: beacons position, reads GeoChat skcot.codec · is_ephemeral_beacon: a-* vs b-* · skcot.service, one process skcot.codec is_ephemeral_beacon: a-* vs b-* federation_ingest · signed Envelope out, peer CoT injected in · skcot.service, one process federation_ingest signed Envelope out, peer CoT injected in GEO_STORE · in-memory, supersede by uid · skcot.service, one process GEO_STORE in-memory, supersede by uid skcot.geo_http · 127.0.0.1:8091, GET /geo/units · skcot.service, one process skcot.geo_http 127.0.0.1:8091, GET /geo/units skcomms fabric · CoT-capable peer nodes · Architecture component skcomms fabric CoT-capable peer nodes skcomms geo_store · sources live CoT for SkMap · Architecture component skcomms geo_store sources live CoT for SkMap signs imported once on the device verifies optional client certs TLS by IP (PKI cert) or by SNI name unauthenticated / testing CoT XML or TAK protobuf every event a-* short TTL, no ack; b-* signed, retried federate to peers inbox inject to local clients http GET connects as a unit GeoChat reply optional brain skcot.pki, sovereign CA on disk Tactical devices (tailnet or LAN) skcot.service, one process Legend Backend Database Security External