Technical Architecture
The System
Seven integrated layers. One objective: your estate answers to you — not to a data center in another country, not to a vendor’s uptime SLA, not to a government with a subpoena.
ACL
Access Control Layer
Biometric-anchored perimeter
Multi-factor biometric authentication — fingerprint, facial recognition, encrypted NFC
Zone-based access tiers — staff, family, restricted areas governed by separate credential sets
Physical override terminals independent of digital control layer
Tamper-logged entry attempts with local-only audit trail
AIL
Automation Logic Layer
Adaptive estate intelligence
AI decision engine processes behavioral routines and threat patterns locally — no remote inference
Learns estate-specific patterns: occupancy, movement, schedule — adapts without cloud synchronization
Threat escalation logic: graduated response tiers from passive alert to active lockdown
Islamic compliance mode: prayer schedule integration, modesty zone automation, ethical data boundaries
CCL
Communications Layer
Encrypted, isolated infrastructure
Wired and wireless LAN with full VLAN segmentation — IoT devices isolated from personal network
Zigbee/Z-Wave/MQTT local mesh — zero internet dependency for intra-device communication
Faraday shielding available for server rooms requiring EMF isolation
All command payloads encrypted at rest and in transit — locally
SRV
Surveillance Layer
Full perimeter awareness
IP camera grid: night vision, thermal, 360° rotating coverage with local recording only
Motion, vibration, glass-break, infrared, CO₂, and door/window sensor matrix
Autonomous drone patrol integration (Gold tier) — scheduled perimeter sweeps, alert-triggered deployment
Alert logic: local notification via encrypted tablet/panel — no push notification dependency
CCU
Core Control Unit Layer
Hardened local command infrastructure
Custom Sentinel OS on stripped-down hardened Linux kernel — no telemetry, no OTA without manual authorization
Redundant SSD configuration with encrypted volumes — survivable under physical compromise
UPS integration and EM shielding on server cabinet
Armored physical housing with tamper detection and thermal management
ENR
Energy Layer
Grid-independent resilience
Solar integration with local battery management — estate remains operational during grid failure
UPS cascade: uninterrupted power for all control systems during transition
Energy use analytics processed locally — consumption visibility without external reporting
Manual failover switches in each zone for hardwired override of any digital control
Non-Negotiable Principles
No Telemetry
The system never initiates outbound data transfer. No usage metrics, no diagnostic pings, no silent updates.
Manual Authority
Every automation can be overridden physically. No scenario exists where the digital layer takes precedence over the physical one.
Owner-Exclusive
No third party — not Sentinel Haus, not the installer, not the manufacturer — can access your system without physical presence.
Survivable
The system is designed for internet outage, power failure, and physical compromise. It degrades gracefully. It never fails silently.
Core Technology Stack
Automation Platform
Home Assistant (hardened, air-gapped)
Logic Layer
Node-RED / YAML / Python
Device Protocol
Zigbee · Z-Wave · MQTT
Network Security
Firewall · VLAN Segmentation
Local AI Voice
Open-source LLM — local inference only
Control Hardware
Raspberry Pi · Intel NUC · Custom Nodes
Emergency Override
Hardwired failover per zone
Access Security
VPN · Local-only — no cloud tunnel
Next Step
Capability without context is engineering.
Capability matched to your estate is Sentinel Haus.
The system above is a foundation. Every deployment is scoped, surveyed, and engineered for the specific property, threat model, and operational requirements of the client.