SRAVIL · Verify the system. Verify the claim.

A result can look right.
But can you trust it?

The systems we depend on are becoming more autonomous, more complex and harder to verify. A dashboard may show success. A sensor may report a convincing position. A compliance report may present a confident number.

But what happens when the underlying evidence tells a different story?

Designed and built in India · प्रणाली को परखें। दावे को परखें।

Two ways in

Who are you buying for?

For defence & government

Armed forces, DRDO, DPSUs and civil aviation

Navigation that keeps working when GPS is spoofed, test campaigns for drone firmware, and GNSS integrity for airlines. Engagements start as a funded trial or development partnership.

For industry & enterprise

Drone makers, shipping, exporters, hospitals and CA firms

Evidence packs and software for filings, claims and machines, rebuilt from your own records. Engagements start as a fixed-fee assessment or a shadow pilot.

That is where SRAVIL comes in

A result is not the same as proof.

We help teams look beyond the final result — to what actually happened, what the evidence supports, and where uncertainty remains.

Whether the challenge is an autonomous system, a navigation signal or a compliance claim, the goal is the same: decisions based on evidence you can stand behind.

We turn that question into practical checks: testing whether navigation can be trusted, examining what machines actually did, and rebuilding important figures from their underlying records.

WHAT THE DASHBOARD SAYS ✓ PASSWithin limits all shift check source WHAT THE EVIDENCE SUPPORTS ⚠ Sensor 3 drifting since 06:40⚠ Log gap 14:02–14:09 — unverifiable⚠ Limit taken from a summary, not the rule→ Partly supported. Here is what's missing.
Illustrative example.
What SRAVIL does

We build software and run independent checks — so you know what to trust.

SRAVIL builds software and carries out independent assessments to establish whether systems, operational records and important claims can be trusted. You can engage us in three ways:

01

Software products

Runs on your system or data — for example Achyux on a drone, or Tax Path at a CA firm.

02

Independent assessments

We examine your records or system and hand back a report, audit or evidence pack — for example a CBAM pack or a fleet GNSS audit.

03

Field verification

Work done on your site — plant energy and steam-system surveys.

Available now = you can commission it today on your own data. Pilot stage = it still needs measuring on your system — the pilot is that measurement. More on how we label offerings →

Representative drone — not a Sravil flight trial
Here's what that looks like in practice

A drone's GPS can be faked. Achyux detects it — and keeps navigation going.

When GPS is spoofed, a drone can report a convincing position that is simply wrong. Achyux checks that position against sensors the drone already carries and, when GPS can't be trusted, keeps it navigating on them — no extra hardware.

So far it has been tested in simulation on real Indian terrain, including flat ground where other methods struggle. Flight trials are the next step, and we say so plainly.

Simulation Explore Achyux →

The same question, elsewhere

Robotics

Did the robot really stay within its limits?

A robot can briefly cross a safety limit between the moments its log records. In real humanoid robot logs we found 951 such hidden excursions — and certified none of them as safe by mistake.

Real-data How we check robot logs →

Compliance

Will your carbon figure survive the EU's checks?

Under CBAM (the EU Carbon Border Adjustment Mechanism), if an Indian exporter can't back its emissions figure, the EU buyer falls back on costlier default values. We rebuild the figure from the plant's own records and show what's missing — before the verifier does.

Real-data How we prepare a carbon-border filing →

Clear findings. Clear limits.

Everything we hand over says what passed, what failed and what is still uncertain — and how far each result has actually been proven. We agree the pass/fail criteria with you before we start, and our fee is the same whatever the verdict.

See how we verify →

What do you need to verify?

Tell us about the system, record or claim you need to assess. We'll help you work out what can be checked, what evidence it needs and what a useful first step looks like.

Discuss a verification need
← SRAVIL
Aviation

Know when navigation is lying.

Your aircraft can report a confident position even when GPS is being spoofed. SRAVIL helps you test whether that position can be trusted, using independent evidence the aircraft already carries — and gives you a record a regulator, insurer or flight-safety board can read.

Available now = you can commission it today on your own data. Pilot stage = it still needs measuring on your system — the pilot is that measurement. More on how we label offerings →

Airbus A320 flight deck — representative, not a Sravil product
1,951
GNSS interference cases reported in India, Nov 2023–Nov 2025
Context · Civil Aviation Ministry, Dec 2025
77.5 s
our RF monitor's alarm time on a real recorded spoof (TEXBAT ds4)
Real-data
0 / 160
false spoof accusations by Achyux across terrain-lane runs
Simulation
0.42 m
median position error, camera-fusion SITL re-fly
Simulation
Why this matters now

GNSS interference is now routine — and the receiver can't tell you

Spoofing and jamming have moved from conflict zones onto everyday routes. A receiver reports a confident position either way, so the only way to know is to check it against something else the aircraft already carries.

10 min

DGCA's crew-reporting window for GNSS (satellite navigation, such as GPS) interference since November 2025 — crews now have to say what happened, fast.

1,951

GNSS interference cases reported in India over two years — up from 465 near the western border a year earlier (Civil Aviation Ministry).

2026

the year EASA authorities begin reviewing Part-IS (EASA's information-security rule for aviation) compliance — including how an operator knows its GNSS integrity function works.

What changes for you

Evidence before the audit

Hand the regulator, insurer or flight-safety board a measured record of what your systems detect — not a vendor datasheet.

No new hardware

Checks run on sensors you already carry: IRS (inertial reference system), camera, IMU, radar altimeter. Weeks to a pilot, not a re-fit.

Test before you sign

Replay your own logs on a sealed verifier and read the verdicts before any contract — no source exposed.

Incidents you can explain

When an incident turns on what a receiver did, you hold a signed, reproducible analysis instead of an opinion.

How the check works
Reported GNSS positionInertial reference / IRSTerrain · RF · AIS witnessesCONSISTENCY CHECKfloors statedConsistent → trustDisagrees → alert / flagCan't decide → fail-passive
The receiver is never asked to grade itself — the check compares it with references the vehicle already carries.
A scenario · illustrative

An airliner crosses a region where GPS interference is common. Its receiver keeps reporting a smooth, confident position — but for several minutes that position is being pushed off course by a fake signal. The crew has ten minutes to report it. Afterwards, the airline needs to know what the receiver actually did, and whether its own checks would have caught it.

Who commissions this
Airlines

Head of Flight Safety and FOQA/FDM managers dealing with spoofed flights and the DGCA crew-reporting SOP.

Drone OEMs & operators

Specific-category operators who owe SORA (the drone-operations risk assessment) / ASTM F3269 (the run-time assurance standard for uncrewed aircraft) evidence per vehicle and per firmware release.

Avionics & autopilot integrators

Teams who want an independent integrity layer, or verification of the one they ship.

For airlines

An airline needs two things: a warning when the aircraft's position can't be trusted, and evidence of what actually happened afterwards — for its own safety team and for the auditor.

Airways · Marut

Airliner GPS-integrity annunciation

Real-data · core on recorded RF · QAR-replay pilot next Assessment Available now

Tells an airline's crew and safety team when the aircraft's GPS position can't be trusted — and, after an incident, what the spoofing actually did.

The problem. Airliners are being spoofed at cruise, and the receiver cannot tell. Crews need to know when GPS is lying, and airlines need to know afterwards what an attack actually did inside their receivers.

If it goes unresolved. Crews act on a position that may be false, and after the flight nobody can say what the receiver did — or show the regulator what was checked.

What we do. An advisory monitor that judges GPS against the inertial reference system the aircraft already carries, plus an RF-observable layer that catches the coherent spoof the inertial check cannot. The same engine runs as forensics on an airline's own incident logs. Fail-passive by construction, with every detection floor stated.

Next step. Send the QAR (quick-access recorder flight data)/FDR and GNSS logs from one spoofed flight. Start here →

You getIncident anatomy (what moved, when, whether the receiver clock was captured, whether it recovered) and a verdict on which downstream systems were corrupted
LimitationsAdvisory only, never flight-critical. One recorded spoof scenario so far; the airliner cruise figures are simulation until the QAR-replay pilot.
Inputs, standards & evidence
Standard / hookDGCA 10-minute crew-reporting SOP; advisory (EFB-class), never a flight-critical box
You sendQAR/FDR and GNSS logs from a spoofed flight — about 20 affected tails for a pilot
EvidenceReal TEXBAT ds4: RF layer fires at 77.5 s; airliner simulation: 0 false alarms over 40 cruise-hours; 2 / 1 / 0.5 m/s carry-offs caught in 27 / 50 / 84 s
EngagementFixed-fee incident forensics → validation pilot with pre-registered pass criteria → advisory licence per tail per year
Aviation · EASA Part-IS

GNSS integrity assessment for Part-IS

Real-data · one recorded spoof scenario Assessment Available now

An independent test of whether your aircraft's GPS-integrity function really detects spoofing, written up as the record auditors now ask for.

The problem. Part-IS (Reg. (EU) 2023/203 and 2022/1645) makes an information-security management system mandatory for operators, and authorities begin reviewing it during 2026 audits. Spoofing is now a named risk to a safety-critical function — and an auditor asking “how do you know your receiver detects this?” has no good answer today.

If it goes unresolved. The auditor's question — “how do you know your receiver detects this?” — has no evidenced answer in your ISMS.

What we do. We attack the operator's GNSS integrity function with the spoof classes actually seen on its routes, measure whether it detects them, and emit the assessment record Part-IS demands but does not define. Receiver vendors structurally cannot sell this: it measures how badly their own product fails.

Next step. Send your receiver configuration and one route's recorded GNSS data. Start here →

You getAn independent detection assessment record for the ISMS: attacks tried, detected, missed, false alarms, with floors stated
Limitationsn=1 spoof scenario; the false-alarm rate is bounded by six clean arcs, not measured. QAR/FDM ingest is not built yet.
Inputs, standards & evidence
StandardEASA Part-IS — Reg. (EU) 2023/203, 2022/1645
You sendReceiver and integrity-function configuration, route profile, recorded GNSS data
EvidenceReal recorded RF through a real SDR receiver: 4/5 recorded TEXBAT attack records detected, 0/2 clean records false-alarmed; the RF layer alarms at 77.5 s on TEXBAT ds4 — one scenario, quoted as such, never “100%”
EngagementAssessment / forensics engagement; QAR/FDM ingest is the next build

For drones & UAS

A drone has no pilot on board to notice it is being misled. These offerings detect spoofing, keep navigation going, and produce the safety evidence regulators and customers ask for.

Flagship · Drones & UAS

Achyux — GPS-independent navigation resilience

Simulation · bench + PX4 SITL on real terrain

Zero additional hardware. Software that detects GPS spoofing and keeps the drone navigating on the camera, IMU, radar altimeter or lidar it already carries — no new antenna, radio or payload, and no control authority.

Limits. No flight results yet; performance on your airframe is what the pilot measures.

Explore Achyux

False spoof accusations0 / 160 terrain-lane runs (95% upper bound 2.34%)
Flat terrain, where terrain matching fails1.2–2.4 m p95 on real Deccan and Thar elevation data
FootprintOne ROS2 node, <1% compute, 0.31 MiB
Drones & UAS

Fail-passive GNSS integrity for UAS

Simulation · PX4 SITL + recorded RF Software product Pilot stage

Software that stops a drone from silently following a fake GPS position.

The problem. A UAV (uncrewed aerial vehicle) cannot tell a spoofed GNSS fix from a real one, and the autopilot follows whichever it is given. BVLOS (beyond visual line of sight) operations cannot be allowed to silently follow a spoof.

If it goes unresolved. A spoofed drone keeps flying confidently in the wrong place; on a BVLOS mission there is no pilot watching to notice.

What we do. A ranging-versus-terrain cross-check with inertial coast — detector and navigator — plus an RF-observable monitor proven on real recorded spoof captures. The reported position is checked against the ground underneath the aircraft and rejected when the terrain disagrees.

Need continued navigation, not only detection? See Achyux, the full sensor-fusion product.

Next step. Send your airframe's sensor list and a set of flight logs. Start here →

You getAn integrity layer that degrades to fail-passive under detected spoofing, with verdicts per segment
LimitationsNo real flight yet; downward-camera and night conditions are untested.
Inputs, standards & evidence
Standard / hookSORA integrity expectations for BVLOS; ASTM F3269
You sendAirframe sensor suite, autopilot logs, target terrain
EvidenceAchyux camera-fusion SITL re-fly (Hyderabad lane): median error 0.42 m, p95 2.14 m, availability 0.996, terminal error 11× lower than inertial coast; terrain-sensor attack in the real PX4 Gazebo chain met 10/10 pre-registered bars [M-SITL]
Next rungReal downward-camera and night flights
Drones & UAS · certification

SITL certification campaigns

Bench · runner proven on our own campaign Assessment Available now

Simulation test campaigns that give each drone software release the safety evidence regulators and customers ask for.

The problem. Small OEMs need SORA and ASTM F3269 evidence for every firmware release, and most have no test culture to produce it.

If it goes unresolved. Each firmware release ships without the SORA / ASTM F3269 evidence an authority or customer can ask for.

What we do. A campaign per release on a real PX4 (a widely used open-source autopilot) software-in-the-loop runner. Pass/fail bars are locked before the run, and the verdict never moves a bar after the fact.

Next step. Send your next firmware build and mission profile. Start here →

You getA per-release campaign report with pre-registered bars and a verdict per bar
LimitationsSoftware-in-the-loop evidence; it does not replace flight testing or an authority's own assessment.
Inputs, standards & evidence
StandardSORA; ASTM F3269
You sendFirmware build, vehicle parameters, mission profile
EvidenceReplay of our own 2026-08 PX4 campaign: the duplicates bar was met in only 5/6 cells, so the campaign verdict is FAIL — and the runner reports it
EngagementPer campaign, repeated per release
Drones & UAS · runtime assurance

Flight & mission monitors with an evidence recorder

Simulation · PX4 SITL Software product Pilot stage

Safety monitors for drone missions, plus a tamper-evident record of every decision they made.

The problem. Run-time assurance is demanded by ASTM F3269 and SORA but built bespoke per vehicle, and flight logs hold no record of what a monitor decided.

If it goes unresolved. After an event, the logs show what the drone did but not what its safety monitor decided — the record an insurer or authority will ask for.

What we do. Safety monitors validated in PX4 software-in-the-loop before anything touches an airframe, with every gated decision written to a hash-chained evidence record built for EU 2019/947 Art. 19 and the insurer's questions after an event.

Next step. Send your vehicle model and a mission envelope. Start here →

You getMonitors plus a verifiable dossier of monitor decisions, degradations and gated actions
LimitationsSimulation only — no hardware, wind or real-flight runs yet.
Inputs, standards & evidence
StandardASTM F3269; SORA; EU 2019/947 Art. 19
You sendVehicle model, mission envelope, flight logs
EvidencePX4 SITL, 3 seeds (16 Oct 2026): 18/18 scenarios, 0 false CONTAIN over 699 nominal ticks, RETURN at +32–34 s margin on battery drain, geofence held 30 m early. A fresh seed re-run on 31 Oct passed 4/6: the drone returned and landed 0.1 m from home, but the drain-margin bar failed (−12 s) on a slow landing estimate — simulation; no hardware or wind runs yet
EngagementShadow-mode pilot; flight trials by engagement

Additional capabilities

Earlier-stage, specialist or enquiry-only work — available, and labelled honestly.

Drones & UAS · third-party stacks

GNSS & sensor spoof guards

Bench · early Software product By enquiry

Spoof checks added to a drone navigation system you didn't build — switched on only once your own data shows they work.

Spoof and consistency guards fitted to third-party drone navigation, tested against injected faults, and delivered default-off until the evidence on your data says switch them on.

Limits. Early bench work against injected faults, not yet wired into a PX4 stack; each guard needs calibration on your data before it is switched on.

Problem, inputs & evidence

Most fleets fly a navigation stack someone else built, with no integrity check of their own on it.

You sendNavigation stack interface and flight logs
You getGuards calibrated on your data, with the evidence for switching each one on
EvidenceBench-proven against injected faults
EngagementCalibration on your data
Defence · rotorcraft

Radar-altimeter GNSS check

By enquiry

Checks a military rotorcraft's reported position against the terrain profile its radar altimeter already measures, using the DTED already on the airframe.

Limits. Counsel-gated; figures shared under the right agreement. SCOMET review precedes any cross-border sale.

Critical timing

GNSS time-transfer integrity

By enquiry

Proves a timestamp held to its UTC duty (MiFID II RTS 25, IEEE C37.118) during a spoof — for trading venues and grid PMUs.

Limits. Counsel-gated; figures shared under the right agreement. SCOMET review precedes any cross-border sale.

How an engagement runs
01

Replay before you sign

Send recorded flight logs or RINEX. A sealed verification server replays them and returns verdicts — no source exposed, before any contract.

02

Lock the bars

Pass/fail criteria are written down and agreed before the first run. They never move afterwards.

03

Pilot on your data

Scoped 4–8 weeks on your own aircraft or records, in shadow mode — nothing we run touches your live system.

04

Licence or repeat

Per-tail or per-fleet licence, or a repeat campaign per firmware release — only if the verdict supports it.

Questions buyers ask first
Is any of this flight-critical?

No. The airline line is an advisory, EFB-class annunciator; the drone layers are fail-passive and have no control authority. DO-178C is a design property here, not a certificate we claim.

Do we need new hardware?

No. The checks run on sensors you already carry — IRS, camera, IMU, radar altimeter or lidar.

Which numbers are simulation and which are real?

Every offering carries a maturity label. Recorded-RF results are labelled Real-data; SITL (software-in-the-loop simulation) results are labelled Simulation and never quoted as customer results.

Can we test it before signing anything?

Yes. The sealed verification server lets you replay your own logs and read the verdicts before any contract.

Who can buy the defence lines?

They sell through a counsel-gated channel, with SCOMET review before any cross-border sale.

Bring one spoofed flight or one airframe.

We replay it against our checks before you commit to anything, and tell you plainly what the evidence shows.

Discuss a pilot
← SRAVIL
Marine

Prove where the vessel really was.

A vessel's recorded track can be displaced by spoofing — and navigation, operations and any later investigation can turn on where the ship really was. SRAVIL checks tracks against independent evidence in the logs you already keep, and states what the record can and cannot show.

Available now = you can commission it today on your own data. Pilot stage = it still needs measuring on your system — the pilot is that measurement. More on how we label offerings →

Container ship at sea — representative, not a Sravil client
1,650+
ships affected by GPS jamming in the Middle East Gulf by 7 March 2026
Context · Windward
60/60
2 m/s walk-offs caught on a real AIS day — 200 vessels, 4,443 vessel-hours
Real-data
5/5
walk-offs of 1 m/s or more caught from gyro, log and radar fixes in simulation, 0 false alarms over 40 hours
Simulation
0
new hardware on board — audits run on existing logs
By design
Why this matters now

A ship's track is now evidence — and it can be wrong

Spoofing displaces AIS (the ship position-reporting system) and GNSS records at scale. Before anyone relies on a track — for navigation, operations or a later investigation — someone has to show which track is real.

1,650+

ships affected by GPS jamming in the Middle East Gulf by 7 March 2026, as reported by Windward.

≤0.5 m/s

slow walk-offs can hide below AIS reporting cadence — so every check we run states its own blind spot.

IMCA

(the offshore marine contractors' association) has warned that GNSS interference can take out several position references at once.

What changes for you

No new hardware

Audits run on AIS and position logs you already hold.

Know your blind spots

Every check states the slowest drift it could have missed.

Redundancy you can trust

Find out whether "independent" position references would fail together.

Survey acceptance

Post-mission evidence that an AUV stayed on its line and covered the box.

How the check works
Reported AIS / GNSS trackGyro + log dead reckoningNeighbouring ships' tracksPLAUSIBILITY CHECKkinematics · co-displacementGenuine trackWalk-off / spoof flaggedUnresolved → floor stated
Every flag states its detection floor — what the data could not have caught.
Who commissions this
Ship operators & managers

Owners and managers who need to know whether their fleet's recorded tracks were spoofed or drifted.

Offshore & subsea

DP vessel operators and survey contractors accepting AUV missions.

Fleet & navigation integrity

Are your ships' recorded positions trustworthy? Spoofing and drift leave traces in the logs you already keep. These checks find them — and help show where interference is coming from.

Maritime · data-side

Fleet GNSS integrity audit

Real-data · one recorded AIS day Assessment Available now

An audit of your fleet's recorded positions that finds where tracks were spoofed or drifted.

The problem. Fleets already hold the logs that would show a spoof or a walk-off — nobody reads them for it.

If it goes unresolved. Spoofed or drifting tracks sit unnoticed in your records until a dispute, inspection or casualty puts them under scrutiny.

What we do. A spoof and walk-off audit over the logs fleets already keep. No hardware, no RF front-end; fail-passive verdicts with the floor stated.

Next step. Send one fleet-day of AIS or position logs. Start here →

You getFlagged events, a review queue, and the detection floor for your data cadence
LimitationsWalk-offs of 0.5 m/s or less are missed at AIS reporting cadence; validated on one recorded day so far.
Inputs, standards & evidence
You sendAIS or position logs for the fleet and period
EvidenceReal recorded AIS day: 200 vessels, 4,443 vessel-hours — 2 m/s walk-offs caught 60/60 with a 5.5% review queue (unvetted); 1 m/s caught 28/60 and ≤0.5 m/s missed at AIS cadence — a ship's own denser feed is expected to do better, and the engagement measures it
EngagementAudit engagement
Ground & sea

Locating and catching the spoofer

Simulation · ground and sea Software product Pilot stage

Finding where a GPS spoofer is transmitting from — or catching a ship being walked off course — with no new hardware on board.

On the ground, TDOA over fixed timing receivers puts an error ellipse around the spoofer itself. At sea, the same core against gyro, log and radar-fix dead-reckoning catches walk-off with no new hardware on the vessel.

Limits. Both lines are simulation-only. The ground locator needs 4–6 timing-grade receivers and a real capture; the sea line needs a vessel's recorded gyro, log and radar fixes.

Problem, inputs & evidence

Detecting a spoof is half the job; the other half is finding where it comes from, or catching it on a vessel with no new hardware.

You sendTiming-receiver network data (ground) or gyro/log and position records (sea)
You getAn error ellipse around the transmitter, or a walk-off alarm with its floor
EvidenceGround: 5 m median inside the network, in simulation. Sea: walk-off ≥1 m/s caught 5/5 with 0 false alarms over 40 simulated hours
StatusGround line design + simulation, no real capture yet; sea line simulation only; needs a vessel's own gyro, log and radar-fix records
Offshore · IMCA

Dynamic positioning — common-mode GNSS

Bench · provenance audit Assessment Available now

A check of whether a vessel's “redundant” position sensors would all fail together under GPS interference.

We measure whether a given vessel's position-reference redundancy actually survives common-mode GNSS interference, starting with a provenance audit of where each reference really comes from.

Limits. The live monitor needs proprietary rig logs we don't yet have; today's deliverable is the provenance audit.

Problem, inputs & evidence

IMCA (the offshore marine contractors' association) has told the offshore industry in print that GNSS interference can take out several position references at once. A vessel's DP FMEA assumes its redundancy survives that; nobody has tested it.

StandardIMCA guidance (IN 1730)
You sendDP system configuration and position-reference set
You getProvenance audit of reference independence; live monitor once rig logs are available
EvidenceProvenance audit available now; the live monitor needs marine rig logs
EngagementAudit engagement

Underwater operations

The same evidence principle applies below the surface: a mission record, like a vessel track, is only as good as what can be checked behind it. An underwater vehicle works for hours where no one can watch it. Accepting its survey means proving afterwards where it went and what it covered.

Underwater · AUVs

AUV navigation & survey-coverage integrity

Simulation · research prototype Assessment Pilot stage

Evidence, after an underwater survey, that the vehicle stayed on its line, and where its coverage has holes.

A software payload that rides on someone else's vehicle — we don't build AUVs. From the mission log it is designed to check whether the navigation solution stayed inside its declared bounds and where the declared area was not covered, using cooperative acoustic ranging and dead-reckoning drift analysis.

Limits. Simulation, real bathymetry and real sonar images only — no vehicle or wet data yet. A reader for real mission logs is not built yet; terrain-aided navigation was ruled out on real Baltic bathymetry; coverage gaps reaching the survey edge need an independent reference.

Problem, inputs & evidence

An AUV runs 8–40 hours fully untethered with no GPS. Survey acceptance turns on proving, after the fact, that the position solution stayed inside its bounds and the survey box was actually covered — and position truth needs USBL/LBL transponders that can cost more than the survey itself.

WhoSurvey contractors, AUV operators, and clients accepting offshore or cable-route surveys
You sendThe mission log (DVL, IMU, depth, USBL where available), the survey plan and the bathymetry
You getA post-mission navigation-integrity and coverage report, with enclosed coverage holes named
EvidenceResearch prototype [M-sim]: terrain-aided navigation found not viable on real GMRT bathymetry (Bornholm Basin); sonar false-alarm model calibrated on 447 real sidescan images; no vehicle or wet data yet
EngagementBring-a-dive-log pilot once the log reader is built — your first real mission is the validation
Underwater · by enquiry

Underwater surveillance & mine-countermeasure evidence

By enquiry

Barrier transit detection over real bathymetry with cross-confirmation between vehicles, and coverage evidence for mine-countermeasure clearance.

Limits. Counsel-gated; figures shared under the right agreement. SCOMET review precedes any cross-border sale.

How an engagement runs
01

Send one fleet day

AIS or position logs for one fleet and period — read access only.

02

Lock the bars

Detection floors and pass/fail criteria agreed in writing before the run.

03

Audit

Flagged events, a review queue and the detection floor for your data.

04

Repeat on schedule

Per fleet or per reporting period.

Questions buyers ask first
Do we need to fit anything to the ship?

No. The fleet audit runs on recorded AIS and position data; the sea-going spoof check uses the gyro and log the ship already has.

What is the smallest drift you can catch?

At AIS reporting rates, walk-offs of 0.5 m/s or less can be missed; a ship's own denser position feed restores the full set of checks. Every report states that floor.

Bring one fleet day.

We audit it against our checks before you commit to anything.

Discuss a pilot
← SRAVIL
Robotics & Infrastructure

Evidence for machines that move — and structures that must not.

A robot's log can say it stayed within limits when it didn't — samples miss what happens between them. If that record backs a safety case or a regulatory file, the gap is yours to explain. SRAVIL proves what the machine actually did, from the records it already produces, without touching its control.

Available now = you can commission it today on your own data. Pilot stage = it still needs measuring on your system — the pilot is that measurement. More on how we label offerings →

Humanoid robots on public display — representative
20 Jan 2027
EU Machinery Regulation becomes mandatory, with a retained behaviour log for ML-driven machines
Context · Reg. (EU) 2023/1230
951
hidden excursions found in real Unitree G1 humanoid teleoperation logs
Real-data
0
of them falsely certified as safe (HELD)
Real-data
4–8 wks
shadow-mode workcell pilot — nothing touches control
Engagement
Why this matters now

Machines that learn need records that prove

Regulation now asks for evidence of what learned and automated machines actually did, and most records can't provide it: logs are sampled, and monitoring often rests on a single instrument.

20 Jan 2027

EU Machinery Regulation becomes mandatory — machines with ML-driven behaviour must keep a safety-relevant behaviour log for five years or more.

1 interval

is all a learned policy needs to exceed a limit and come back unseen — the most common way a conformance record lies.

1 instrument

— a stuck or drifting piezometer — can hide a developing dam failure or trigger a false alarm.

What changes for you

Proof from logs you already keep

No model access, no ground truth, no new sensors — verdicts come from existing telemetry.

No downtime

Shadow-mode engagements run alongside your line or monitoring and touch nothing.

Know exactly what to fix

Where the record can't prove something, we state the log rate or extra instrument that would.

Ready for the reviewer

Verdict records written for Machinery Regulation and GISTM (the Global Industry Standard on Tailings Management) reviews.

How the envelope proof works
declared limitHELD — no excursion possibleINCONCLUSIVE — could hide oneVIOLATED — sample outside
Dotted cones show the furthest the machine could have moved between two samples, given the slew limit your integrator declares.
Who commissions this
Robot OEMs & integrators

Humanoid and mobile-robot makers who must keep a behaviour log for learned policies under the Machinery Regulation.

Plant automation & reliability

Manufacturers and integrators running machine-tending cells with failed cycles and operator interventions.

Mine & dam owners

Owners and engineers of record working to GISTM.

Robots & automated equipment

Robots run learned or automated behaviour, and their logs record only snapshots. If a log misses what happened between snapshots, the safety record has a gap you would have to explain — to a regulator, a customer, or after an incident.

Humanoids · learned policies

Learned-policy envelope evidence

Real-data · Unitree G1 teleoperation logs Assessment Available now

Proof, from a robot's own log, that it stayed inside its safety limits — including between the moments the log recorded.

The problem. A humanoid or mobile robot runs a learned policy. Did it stay inside the envelope (its declared safe operating limits) its integrator declared — and can you prove it from the log alone? A log is sampled: a policy can go past a limit and come back inside one sampling interval, so checking samples and reporting “held” is the most common way a conformance record lies. ISO 10218:2025 now covers humanoids but explicitly excludes mobility hazards; ISO/CD 25785-1 is still a draft.

If it goes unresolved. Your conformance record says “held” for moments it cannot actually account for — a gap you would have to explain under the Machinery Regulation or after an incident.

What we do. Every interval in the log gets one of three answers: VIOLATED (a sample is outside the bound), HELD (no excursion was possible between the samples — a proof from a declared slew limit, not an assumption), or INCONCLUSIVE (an excursion was possible and would not have been seen). When it cannot prove, it states the log rate that would have made the interval provable.

Next step. Send one robot log and the limits your integrator declares. Start here →

You getA per-interval verdict record and the required log rate wherever the answer is INCONCLUSIVE
LimitationsProofs rest on the slew limits your integrator declares — wrong limits give wrong proofs. A conformance number for your policy needs your logs.
Inputs, standards & evidence
Standard / dutyEU Machinery Regulation 2023/1230 — mandatory 20 Jan 2027; retained log ≥5 years for ML-driven behaviour
You sendRobot logs and the envelope and slew limits your integrator declares — no model access, no ground truth needed
Evidence951 hidden excursions in real Unitree G1 teleoperation logs (not a learned-policy rollout), zero falsely certified HELD; also zero false HELD on public ALOHA and Unitree Z1 arm logs; 20 unit tests. A conformance number for your policy needs your logs.
EngagementBring-your-logs pilot
Industrial cells

Workcell reliability

Simulation · engine fixed 2026-09-22 Software product Pilot stage

Software that catches a robot cell's likely failures before the action, so fewer cycles fail and fewer operators have to step in.

The problem. Machine-tending cells lose output to failed cycles and operator interventions, and nobody can say in advance which action was going to fail.

If it goes unresolved. Failed cycles and operator interventions keep eating output, and nobody can say in advance which action is about to fail.

What we do. Runtime assurance for physical action: before a consequential action, the engine determines whether it is executable and safe enough — otherwise it re-observes, defers or abstains, and records why. It runs in shadow mode (running alongside your system without controlling it) against your own line before anything is claimed.

Next step. Send one cell's telemetry and intervention records. Start here →

You getA shadow-mode report: which failures would have been prevented, and at what cost in holds
LimitationsSimulation-validated; no real cell data yet.
Inputs, standards & evidence
You sendCell telemetry and cycle/intervention records
EvidenceEngine fixed 2026-09-22; 5/5 hazard families detected on re-run — simulation-validated, one real cell is the next step
EngagementShadow-mode pilot, 4–8 weeks; nothing touches control

Infrastructure & structural monitoring

The same problem exists beyond robots. In critical infrastructure, decisions about safety and structural integrity also depend on whether the instruments providing the evidence can be trusted. Dams and other structures are judged on what their instruments say. One faulty instrument can hide a developing problem — or trigger a false alarm that stops operations.

Tailings & water dams

Dam instrument integrity under GISTM

Simulation · synthetic bench Software product By enquiry

Spots a faulty dam sensor before it hides a real problem or triggers a false alarm.

A stuck or drifting instrument that alone explains the anomaly is excluded and named. The phreatic surface and factor of safety (the margin before a slope fails) are recomputed without it, and the TARP (trigger-action response plan) trigger is raised on the corrected picture. A fault resting on one instrument stays a WATCH with the reason stated — and the engine says which extra instrument would resolve it.

Limits. Synthetic bench only; not yet connected to any facility's data, and no data-logger connectors yet. Coarse Dupuit section with an infinite-slope factor of safety; internal erosion with no pore-pressure precursor is outside what any instrumented monitor can promise.

Problem, inputs & evidence

A stuck or drifting piezometer can either hide a developing failure or trigger an alarm that isn't real — and the TARP trigger is usually raised on raw readings.

StandardGISTM; TARP trigger at factor of safety 1.3
You sendPiezometer, seepage-weir, pond-level and rainfall records, plus the section geometry
You getPer reading: verdict, hypothesis and magnitude, corrected heads, factor of safety, excluded instruments, time to TARP trigger (p10/p90) and the false-alarm rate
EvidenceSynthetic bench, 240-day wet season: 11/12 faults called (the 12th correctly held at WATCH), correct hypothesis top-1/top-3 91%/100%, median lead 86 days, 0 false alarms over four healthy seasons, stuck/drifting piezometers excluded 100%
Honest limitsCoarse Dupuit section with infinite-slope factor of safety; internal erosion with no pore-pressure precursor is outside what any instrumented monitor can promise
How an engagement runs
01

Send the logs

Robot telemetry, cell records or instrument history — read access only.

02

Declare the envelope

Your integrator declares the limits; we never fit them from the data. Bars are fixed before the run.

03

Shadow mode

4–8 weeks alongside your line or your monitoring, touching nothing.

04

Evidence record

A written verdict with what was proved, what was not, and what log rate or instrument would close the gap.

Questions buyers ask first
Do you need access to our model or controller?

No. Envelope evidence works from the log alone, against limits your integrator declares.

Will this stop our line?

No. Workcell and dam engagements run in shadow mode; nothing we run touches control.

What does the Machinery Regulation actually require?

For machines with self-evolving behaviour based on machine learning, a retained log of safety-relevant behaviour — five years or more — from 20 January 2027.

Bring one robot log or one cell.

We bench it before you commit, and say what the record can and cannot prove.

Discuss a pilot
← SRAVIL
Compliance & Assurance

Will your filing, claim or calculation hold up?

A filing built on a paraphrase of the rule can cost you a default markup, an unpriced carbon shortfall, an unappealed deduction or a tax election locked in for years. SRAVIL rebuilds the figure from your records and the published rule, and hands back a pack a verifier, payer or chartered accountant can check line by line.

Available now = you can commission it today on your own data. Pilot stage = it still needs measuring on your system — the pilot is that measurement. More on how we label offerings →

Steel coils — the export goods CBAM prices by embedded emissions
30 Sep 2027
CBAM certificates payable — definitive phase binding since 1 Jan 2026
Context · EU CBAM
4 weeks
from data request to a verification-prepared CBAM pack
Engagement
124/124
seeded errors caught and priced exactly on constructed CCTS plants, against notified BEE factors
Bench
37/37
AB PM-JAY citations confirmed in the payer ruleset
Bench
Why this matters now

Every filing on this page has a deadline and a price

Each of these obligations costs money when the figure is wrong or missing — through a default markup, an unpriced carbon shortfall, an unappealed deduction or an election locked in for years. And each is usually prepared from a paraphrase of the rule rather than the rule itself.

Default markup

what the EU importer applies when an exporter can't show a verified CBAM (the EU Carbon Border Adjustment Mechanism) emissions figure — paid by the exporter either way.

10–20%

of hospital claim value commonly deducted by payers, and rarely appealed.

1 Apr 2026

the Income-tax Act 2025 renumbered every section — drafts quoting the 1961 Act are quoting repealed law.

What changes for you

Save weeks — then save the next period

A four-week CBAM pack instead of an open-ended consulting project, plus record changes that make next period a re-run.

Keep money you're owed

Avoid default markups, see your CCTS (India's Carbon Credit Trading Scheme) exposure in rupees before the verifier does, and recover deductions the payer's own rules don't allow.

Every line defensible

Each figure is recomputed from your records and cited to the regulation, rulebook or statute — quick for a verifier, payer or CA to check.

Fixed fee, plain verdict

Quoted per engagement and owed whatever the result; the gap list comes first, so there are no surprises.

How a filing is checked
Your recordsPublished rule / statuteRECOMPUTEline by lineGap list — firstCited pack — every line sourced
Where a rule allows a default, it is used and labelled as a default — never silently.
Regulatory Clock

Dates that create the filing

EU CBAMIndia CCTS (BEE)AB PM-JAYDoH Abu Dhabi V2025.1Income-tax Act 2025SORAASTM F3269EU Machinery Reg 2027GISTMDGCA GNSS SOP
1 JAN 2026 TODAY 30 SEP 2027 CBAM definitive phase binding CCTS year + DoH schedule running CBAM certificates payable
LIVE NOWCBAM definitive phase binding since 1 Jan 2026certificates payable 30 Sep 2027
LIVE NOWIndia CCTS compliance year running~490 obligated entities
STANDINGDoH Abu Dhabi V2025.1 adjudication schedule37/37 citations confirmed
Who commissions this
Shipowners, P&I & adjusters

Owners facing EU ETS charges, and P&I (protection & indemnity) correspondents and adjusters whose claims turn on a disputed track.

Exporters to the EU

Iron, steel and aluminium producers whose EU customers already ask for emissions data.

CCTS obligated entities

~490 entities across nine sectors, and the consultants who prepare their submissions.

Hospital finance desks

Revenue-cycle teams facing payer deductions they rarely have time to appeal.

CA firms & tax teams

Practitioners signing multi-year regime elections under the new Income-tax Act.

Emissions & carbon compliance

Exporters, large plants and shipowners now have to back their emissions figures with evidence. We prepare and check that evidence before a verifier, a buyer or a regulator does.

EU CBAM · exporters

Carbon border filings

Real-data · 120 US EPA GHGRP plant records, Annex I defaults Assessment Available now

Prepares an Indian steel or aluminium exporter's EU carbon filing, so the EU buyer doesn't fall back on costlier default values.

The problem. Without a verified emissions figure, the EU importer applies CBAM's default markup — a cost the exporter pays either way, through price or lost orders.

If it goes unresolved. Your EU importer applies CBAM's default markup — and you pay it through price or lost orders.

What we do. We build the installation dataset from your own records, close gaps at source on a plant visit, and run the pack against a verifier's evidence checklist so it survives verification.

Next step. Send one plant's records for one reporting period. Start here →

Illustrative excerpt · fictional plant · format only
LineSource recordTreatmentStatus
Natural gas, reheating furnacePurchase invoices + NCV certificateMetered value usedVerifier-ready
Grid electricityDISCOM bills, Jan–MarMetered kWh × cited emission factorVerifier-ready
Pig iron (precursor)Supplier declaration missingDefault value applied, flaggedGap — request from supplier
Electrodes consumedStores issue registerProcess emissions computedVerifier-ready
You getA verification-prepared evidence pack, the communication workbook, the buyer-facing declaration, and a list of record changes so next period is a re-run, not a project
LimitationsWe prepare for verification; we are not the accredited verifier. Missing supplier precursor data can force default values.
Inputs, standards & evidence
RegulationEU CBAM — definitive phase from 1 Jan 2026; certificates payable 30 Sep 2027; Annex I defaults
You sendMonthly production by product and route; fuel purchases with GCV/NCV certificates; electricity bills, PPAs and captive logs; raw-material and precursor purchases (CN code, origin); process consumables; heat or waste-gas flows; any domestic carbon price paid
ShapeFour weeks: data request → plant visit to close gaps → run and check line by line → hand-over
Best fitEAF/induction steel and aluminium producers, ~₹100–2,000 crore turnover, with EU shipments; then forgings and castings in EU auto supply chains
India CCTS · obligated entities

Carbon credit obligations

Bench · BEE tables verbatim Assessment Available now

Shows an Indian plant its carbon-credit shortfall in tonnes and rupees before the official verifier does.

The problem. The CCTS compliance year is running. An obligated entity needs to know its emissions intensity, its shortfall in tonnes and rupees, and what the verifier will ask for — before the verifier arrives.

If it goes unresolved. The shortfall surfaces at verification, when the only options left are buying credits or explaining the gap.

What we do. A pre-verification desk check: we recompute greenhouse-gas intensity from your fuel, electricity, process and production records the way the scheme's method describes, compare it with your notified target, and state the surplus or shortfall in tCO2e (tonnes of CO2-equivalent) and rupees, with a “what closes the gap” table.

Illustrative · fictional plant

An integrated steel plant achieves 2.1982 tCO2e per tonne against a notified target of 2.13. Shortfall: 219,139 tCO2e — about ₹26.3 crore at a placeholder credit price of ₹1,200/t. That is the number we put in front of you before the verifier does.

Next step. Send one compliance year's fuel, power and production records. Start here →

You getRecomputed intensity, shortfall or surplus in tCO2e and ₹ at a stated price, gap-closing options, and the verifier's likely request list
LimitationsNot accredited verification. Computes CO2 only; CH4 and N2O would add about 0.3–0.5%. IPCC defaults used where plant data is missing are labelled; scheme rules can change.
Inputs, standards & evidence
RegulationCarbon Credit Trading Scheme 2023 (Energy Conservation Act); BEE as administrator; GEI target notifications
You sendFuel quantities and NCVs, grid/captive/exported electricity, process lines, production by product, your notified target
Evidence53 notified BEE fuel factors and 10 materials transcribed; engine defaults equal the notified factors 9/9; 124/124 seeded errors on constructed plants detected and priced exactly, 0 false positives; IPCC 2006 defaults labelled where used
NoteWe prepare and check before the BEE-empanelled verifier arrives — we are not the accredited verifier and never present the work as accredited verification
EU ETS · shipping

Marine emissions exposure

Real-data · 19,467 verified EU MRV ship-year returns Assessment Available now

What your ships will owe under the EU's emissions trading scheme, worked out before the bill arrives.

The problem. EU ETS (the EU Emissions Trading System) allowance surrender is mandatory for ships calling EU ports, and the exposure has to be computed voyage by voyage.

If it goes unresolved. The EU ETS surrender bill arrives larger than budgeted, voyage by voyage.

What we do. We compute each vessel's EU ETS exposure from its voyage and fuel records, so owners and managers know what they will have to surrender before the bill arrives.

Next step. Send one vessel's voyage and fuel records for a period. Start here →

You getExposure per vessel and voyage
LimitationsAn exposure estimate — not a verified MRV emissions report.
Inputs, standards & evidence
RegulationEU ETS (maritime)
You sendVoyage logs and bunker delivery notes for the period
EvidenceMatched the verifier-signed ETS figure on all 19,467 EU MRV ship-year returns it could model (2024 and 2025); about 36–39% of returns are refused with a stated reason; 18,563 seeded misstatements detected and priced, 0 false positives
WhoShipowners and managers calling EU ports

Claims & payment disputes

Claims get decided on evidence that rarely gets checked — a payer's deduction, or a ship's disputed track after a spoofing incident. We check each claim against the published rules and the recorded data, and say how sure the answer is.

Claims · hospitals

Hospital claim recovery

Bench · test corpus Assessment Available now

Recovers insurance deductions a hospital was entitled to, using the payer's own published rules.

The problem. Payers deduct 10–20% of claim value, commonly, and most deductions are never appealed because checking them by hand costs more than the deduction.

If it goes unresolved. Deductions the payer's own rules don't allow are written off, claim after claim.

What we do. A hospital sends its claims, the payer's remittance advice and its provider contract. We recompute what the payer was obliged to allow on the payer's own published rules, prove where each deduction was wrong, and emit a cited appeal pack per claim line.

Illustrative arithmetic

On ₹1 crore of claims, a 10–20% deduction rate is ₹10–20 lakh withheld — most of it never appealed.

Next step. Send one batch of claims with the remittance advice. Start here →

You getA cited appeal pack per claim line
LimitationsOnly payers with published rulebooks (Abu Dhabi DoH, AB PM-JAY). Private Indian insurers and TPAs need their contracts first.
Inputs, standards & evidence
RulebooksAbu Dhabi DoH Mandatory Tariff and Claims & Adjudication Rules (V2025.1); India AB PM-JAY package and adjudication rules — including the 15-day payment clock and 0.1%/day penal interest
You sendClaims, remittance advice, provider contract
EvidenceRules shipped verbatim — 25/25 constants and 37/37 citations confirmed for PM-JAY; 0 false positives on the clean test cases (6 per payer); caught two errors in our own rule encoding during validation
Scope notePrivate Indian insurers and TPAs adjudicate on unpublished tariffs — we can serve them once you hand over the contracts
Maritime · claims

Marine claims adjudication

Design · engine real-data · attribution unmeasured Assessment Pilot stage · in build

An evidence-based verdict on whether a disputed vessel track was spoofed, jammed or genuine.

The problem. Windward reported GPS jamming affecting more than 1,650 ships in the Middle East Gulf by 7 March 2026. Every casualty now turns on attribution: vessel-originated spoof, external interference, or a genuine track — the distinction that routes the claim under CL.380 / LMA 5403 (the marine insurance cyber-exclusion clauses).

If it goes unresolved. A claim stalls or goes the wrong way because no one can show whether the track was spoofed, jammed or genuine.

What we do. We adjudicate from the recorded traces — kinematic plausibility and dead-reckoning consistency, with a co-displacement test across neighbouring ships still being built — and return a signed verdict with the uncertainty stated.

Read the Gulf case study →

Next step. Send the casualty file — tracks for the vessel and period. Start here →

You getA signed attribution verdict with stated uncertainty
LimitationsThe three-way attribution is designed but not yet measured on real spoofed tracks; every verdict states its uncertainty.
Inputs, standards & evidence
Standard / hookCL.380 / LMA 5403 attribution
You sendThe casualty file: AIS and bridge-system tracks for the vessel and period
EvidenceFleet engine validated on one real AIS day (200 US-coastline vessels, injected 2 m/s walk-offs caught 60/60); no real spoofed track tested yet; the three-way attribution layer is designed, not yet measured — pilot until calibrated on recorded Hormuz tracks
WhoIndian-flag owners, P&I correspondents, DG Shipping casualty investigators

Tax & regulatory computations

Some calculations lock you in for years. We reproduce them from the source law, so a professional can sign with confidence.

Tax · CA firms

Irrevocable tax elections, proven against the Act

Bench · CA-reviewed Software product Available now

Ranks a company's long-term tax-regime choices under India's new Income-tax Act, every figure cited — for a chartered accountant to sign.

The problem. The Income-tax Act 2025 replaced the 1961 Act from 1 April 2026 and renumbered every section. An AI draft quoting 115BAA is quoting a repealed statute — and the regime elections it gets wrong lock a manufacturer in for years.

If it goes unresolved. An irrevocable regime election, made on a draft that quotes repealed law, locks the company in for years.

What we do. From a short facts sheet, Tax Path builds the graph of elections the law permits this year, prunes the ones you are not eligible for (citing the section that says so), enumerates every admissible multi-year sequence — with depreciation, loss and MAT-credit carry under option lock — and ranks the best three, every rupee cited to the shipped statute text.

Next step. Send one company's facts sheet. Start here →

You getA ranked pack of the best three regime sequences, every figure cited to the Gazette text
LimitationsNot advice or a filing. Covers the Income-tax Act 2025 computations encoded in the engine; a chartered accountant signs.
Inputs, standards & evidence
LawIncome-tax Act 2025 — e.g. s.200 (old 115BAA), s.201 (old 115BAB), s.146 (old 80JJAA), s.33(8), s.205(1)
You sendA facts sheet for the company, firm or individual
What it is notAdvice or a filing — a citable computation for a chartered accountant to sign
EvidenceReviewed by a chartered accountant (29 Sep 2026); 52/52 constants and 161/161 citations checked against the shipped statute text

Additional field services

On-site work, delivered within existing engagements and labelled for what it is.

Field survey · process plants

Plant energy survey

Service Field service Available now

An on-site survey that puts a rupee figure on heat lost through a plant's steam pipes and traps.

Insulation and steam-trap losses surveyed on site and priced from physics, delivered within existing engagements by Sravil Field Services. The report is the deliverable.

Limits. Field camera ingestion is still in build; steam-trap acoustics are parked until labelled recordings exist.

Problem, inputs & evidence

Steam-heavy process plants lose energy through insulation and steam traps that nobody has priced.

MethodASTM C680-style heat-loss physics
You sendSite access and steam-system layout
You getA priced loss report with fixes ranked
EngagementDay rate plus a share of verified savings; never quoted standalone
StatusField camera ingestion in build; steam-trap acoustics need labelled recordings
How an engagement runs
01

Send one filing or record set

One plant, one period, one claim batch or one facts sheet is enough to start.

02

Gap list first

Our first output is the list of what's missing or would be rejected — the agenda, not a surprise at the end.

03

Recompute and pack

We rebuild the figure from the published rule and your records, every line cited.

04

Hand over, then re-run

You get the pack and the record changes that make next period a re-run.

Questions buyers ask first
Are you an accredited verifier?

No. For CCTS and CBAM we prepare and check before the accredited verifier arrives, and say so on every pack.

Is Tax Path tax advice?

No. It is a citable computation for a chartered accountant to sign; the pack says so on every page.

What if our records are incomplete?

The gap list comes first. Where the rule allows a default, it is used and labelled as a default — never silently.

How are fees structured?

Per engagement, quoted after scoping, with the fee owed whatever the verdict. Hospital claim recovery is the one recovery-share line, with terms in the contract.

Send one filing, one claim batch or one facts sheet.

We map it against the original text before you commit to anything.

Discuss a pilot
← Aviation
Flagship · Aviation

Achyux. GPS-independent navigation resilience.

GPS can be manipulated without looking obviously broken — the drone keeps reporting a confident position that is simply wrong. Achyux checks that position against other information the drone already carries, and keeps it navigating when GPS can't be trusted.

No extra hardware. It runs as software on the camera, IMU (inertial measurement unit), radar altimeter or lidar already on board — no new antenna, radio or payload, and no change to the autopilot.

Simulation Software product Pilot stage Bench, PX4 (a widely used open-source autopilot) SITL and real terrain/sensor data — nothing on this page is a flight result.

Representative drone platform — not a Sravil product or flight trial

A GPS position can look credible and still be wrong.

When a drone is exposed to GPS spoofing, the reported position may no longer reflect where it actually is. An operator needs to know whether the navigation data can be trusted before relying on it for a mission decision.

Achyux checks GNSS (satellite navigation, such as GPS) against independent onboard sensor evidence, and is designed to support continued navigation when GNSS cannot be trusted — using compatible sensors the drone already carries.

What has been demonstrated so far

Bench and PX4 software-in-the-loop testing on real terrain data gives encouraging evidence for the approach. These are not flight results; performance on your airframe still needs to be measured.

Bring an airframe model and sensor list to scope a pilot →

How it works

Detecting spoofing is not the same as navigating without GNSS

Most anti-spoof tools stop at the alarm. Achyux checks the GNSS fix against independent onboard witnesses, flags the deception, and — when GNSS can't be trusted — keeps producing a navigation estimate from the same sensors.

GNSS fix (untrusted)IMUCamera (optical flow)Radar altimeter / lidarTerrain DEM (onboard) ACHYUX NODEintegrity check +sensor fusion, 10 Hzone ROS2 node Spoof flag + diagnosticsContinued nav estimate Autopilot: unchanged.No control authority.
Inputs are sensors the platform already carries; outputs are advisory. Achyux never commands the vehicle.
What makes it different
Flat terrain

Keeps navigating where terrain matching fails

TERCOM/TERPROM-class navigation needs relief to match against; on flat ground it falls back to inertial coast. Achyux adds the camera as a witness alongside the IMU. On real near-flat elevation data (Deccan, 2.0 m relief; Thar, 0.8 m) it held 1.2–2.4 m p95 with 98–99% availability.

Simulation · real DEM lanes specific to these scenarios, not a universal flat-terrain claim
Formation

Estimates where the spoofer is — not just that one exists

Drones in a formation each estimate a bearing to the emitter; a fusion node combines them, using bearing and signal strength. Median error falls from about 180 m with three drones to about 110 m with eight.

Simulation · exploratory not field-validated geolocation; depends on geometry and propagation
Evidence and limitations

Headline results — and what they don't show

What we measuredResult
Tested attack classes detectedall tested attack classes
False spoof accusations0 / 160 attack-free runs on two real elevation lanes, incl. night-thermal (95% upper bound 2.34%)
Availability, same runs95.5%
Position error, nominal1.2–1.4 m p95
Worst combined case (night, attack, degraded)4.2 m

Where it was measured. Bench Monte Carlo and PX4/Gazebo SITL on four real elevation lanes (Ladakh, Arunachal, Hyderabad/Deccan, Thar) plus one synthetic lane, with real radar-noise measurements. Acceptance criteria were fixed before every run, and runs are reproducible.

What it does not show. No flight results yet. A procurement-style mountain trial on 22 Oct 2026 added three limits: a drag that ends in a hold under 10–12 m is not detected, by design; the mountain guards slow meacon detection to 6.5–8.3 s; and with GNSS and camera both denied over rugged terrain there is no reliable fix. On steep terrain, radar shadow and map error can disable the terrain witness, leaving navigation on the camera; without the mountain guard, honest jamming false-latched 14 of 30 runs (0 of 30 with it). Attack offsets are synthetic, following publicly reported patterns. Formation localisation is exploratory simulation. Performance on your airframe depends on its sensors and is what a pilot measures.

Technical brief on request. Per-attack-class timings, fault and degradation testing, terrain-lane detail and test methodology are shared with technical evaluators under an appropriate agreement.
Request the brief
The wider picture

Why GPS interference is now a planning assumption

1,951

GNSS interference cases reported in India, Nov 2023–Nov 2025 — up from 465 near the western border a year earlier (Civil Aviation Ministry, Dec 2025).

1,100+

vessels hit by navigation interference in a single day around the Strait of Hormuz during the 2026 Iran conflict (Windward). A one-day count; by 7 March 2026 Windward reported more than 1,650 ships affected by GPS jamming in the Gulf.

Since 2022

extensive GPS interference documented near Ukraine, the Baltic and the Black Sea.

£7.64bn

cost of a seven-day national GNSS disruption, per a UK government study.

Integration and engagement

One software node on hardware you already fly

IntegrationMeasured
InterfaceROS2 node, one diagnostics topic
Control authoritynone — verified every live run
Computeunder 1% of budget at 10–50 Hz
Memory0.31 MiB, no heap after start
ARM / aarch64bit-for-bit identical
01

Compatibility check

Your airframe's sensors, rates and compute — what Achyux can use.

02

SITL on your model

Your vehicle in PX4 SITL against the attack suite, bars fixed in advance.

03

Bench / HIL

The node on your target compute, with your recorded sensor data.

04

Flight trial

By agreement — the first rung that would make a figure a flight result.

Achyux is Sravil-owned and sold through a counsel-gated channel; SCOMET review precedes any cross-border sale.

Bring one airframe and its sensor list.

We'll tell you what Achyux can use, and what a pilot would measure.

Discuss a pilot
How We Work

How we verify.

We help you understand whether a system, calculation or operational record can be trusted — and what to do when it cannot.

Working with SRAVIL

What it is like, in plain terms

What do I send?

Whatever already records the thing in question — logs, records, a filing or a facts sheet. Read access is enough; we never need control of your system.

What happens first?

We read what you send and come back with a gap list: what can be checked, what is missing, and what that means for the result.

Will you interfere with my operations?

No. Checks run on copies of your data, or in shadow mode alongside your system. Nothing we run touches live control.

What will I receive?

A written result: what passed, what failed, what remains uncertain and the evidence behind each — with practical next steps.

How do you handle uncertainty?

We state it. Where the evidence can't settle a question, the result says so — and says what extra data would.

What happens afterwards?

You act on the findings yourself, repeat the check on the next release or reporting period, or move to a longer engagement — only if the result supports it.

Know what passes and what doesn't

We check your system or records against agreed requirements and identify errors, inconsistencies and missing evidence.

Find gaps before they get expensive

We show what is missing, what needs correcting and where the evidence may not be enough — before an audit, submission, deployment or operational decision.

Get a result you can act on

A clear report, the supporting evidence, the limitations, and prioritised next steps for the question you need answered.

Make the next check easier

Where practical, we structure the evidence and records so you can repeat the check, track changes and avoid redoing work.

Our approach: agree what needs to be demonstrated, check it against the relevant evidence, explain the result — and state what remains unverified.

Two commitments most firms can't make
Bars locked before the run

Pass/fail criteria agreed in writing first

We never move a bar after seeing the result. The verdict is whatever the evidence says against criteria you signed off.

Fee owed whatever the verdict

Paid for the measurement, not the answer

A failing result costs you the same as a passing one, so you can trust that a pass wasn't bought. (Hospital claim recovery is the one recovery-share line, with terms in the contract.)

What you are buying

Three kinds of offering — and whether you can use it today

Software product

Runs on your system or data — for example Achyux on a drone, or Tax Path at a CA firm.

Assessment

We examine your records or system and hand back a report, audit or evidence pack — for example a CBAM pack or a fleet GNSS audit.

Field service

Work done on your site — plant energy and steam-system surveys.

Available now means you can commission it today on your own data. Pilot stage means it still needs measuring on your system or real operating conditions — the pilot is that measurement.

What our evidence labels mean

Every result says how far it has been proven

Design

Built and specified; not yet measured.

Simulation

Tested in simulation — sometimes on real terrain, sensor-noise or public data.

Bench

Tested on test sets, injected faults or replayed records.

Real-data

Tested on real recorded operational data.

Field-validated

Proven in live operation with a customer. Nothing of ours is here yet — when it is, we'll say so.

By enquiry

Details shared under the right agreement.

Try before you sign

Replay your own data first

For navigation lines, a sealed verification server lets you replay your own flight logs or RINEX and read the verdicts — no source exposed, before any contract.

What you can see, and when
On this site

What each check does, what you provide, what you receive, headline results with their evidence label, and every known limitation.

Sample report or technical brief

An example deliverable, a representative finding, and how pass, fail and unresolved results are reported — on request.

Under agreement

Full test matrices, methodology and implementation detail — shared with technical evaluators for due diligence.

How to buy

Routes for government and for industry

Defence & government

A trial order, a development partnership with a DRDO lab or DPSU, an iDEX challenge, or a response to an RFI or RFP. A one-page capability statement is available for procurement files.

Industry & enterprise

A fixed-fee assessment or a shadow pilot under a short statement of work, with pass/fail criteria written in before work starts. Software is licensed after the pilot.

Registrations such as DPIIT, GeM and vendor empanelment will be listed on the Trust page once granted.

Commercials

How engagements are priced

Scope is public; rates are quoted per engagement after scoping. Machine and navigation lines start as a scoped pilot and repeat per firmware release or per year. A sample anonymised evidence pack is available on request.

← SRAVIL
Solutions

Start from who you are.

Each section names the duty you face, the SRAVIL offerings that answer it, and the usual first step.

For defence & government

Armed forces · DRDO · DPSUs

Drones that keep navigating when GPS is spoofed.

GPS interference is now a planning assumption for uncrewed systems. SRAVIL's navigation line is designed and built in India and runs as software on sensors your airframe already carries.

First step. A funded trial: Achyux rides along on an airframe you already fly, publishing diagnostics only, with pass/fail criteria fixed before the flight.

OfferingsAchyux · Fail-passive GNSS integrity for UAS · SITL certification campaigns · Locating the spoofer · AUV navigation integrity
RoutesTrial order, DPSU or DRDO-lab development partnership, iDEX challenge, or a response to an RFI/RFP

For industry & enterprise

Exporters · steel, aluminium, cement, fertiliser plants

Carbon figures that survive the verifier.

EU CBAM falls back on costlier default values when an exporter can't back its emissions figure, and India's CCTS sets intensity targets per entity.

First step. One installation's CBAM pack, rebuilt from the plant's own records.

Hospitals · revenue cycle desks

Recover deductions payers shouldn't have made.

A share of claim value is deducted by payers and rarely appealed. We check each deduction against the payer's own rules (AB PM-JAY, DoH Abu Dhabi).

First step. One claim batch, checked in shadow mode before any invoice.

Chartered accountant firms

Irrevocable elections, proven against the Act.

Since 1 April 2026 the Income-tax Act 2025 renumbered every section. Tax Path computes the election and cites the current section, for the CA to sign.

First step. Send one client's facts sheet.

OfferingsTax Path (for CA firms only)

Not sure where you fit?

Describe the system, record or filing. We'll tell you which check applies.

Discuss a pilot
← SRAVIL
Regulations we map to

The duty, and the offering that produces evidence for it

SRAVIL produces evidence toward these requirements. It is not a certification under any of them. Filing dates are on the Compliance page.

Rule or dutyWhat it asksSRAVIL offering
DGCA GNSS interference reportingCrew report within 10 minutesAirliner GPS-integrity annunciation
EASA Part-IS (Reg. 2023/203)Information-security management in aviationGNSS integrity assessment
SORA · ASTM F3269Run-time assurance for dronesSITL campaigns, UAS GNSS integrity
EU 2019/947 Art. 19Occurrence records for drone operatorsFlight monitors & evidence recorder
IMCA guidance on DPIndependent position referencesDynamic positioning
EU ETS (shipping)Allowances for voyage emissionsMarine emissions exposure
EU CBAMVerified embedded emissions, or default valuesCarbon border filings
India CCTS (BEE)Emission-intensity targets per obligated entityCarbon credit obligations
AB PM-JAY · DoH Abu DhabiPayer claim rulesHospital claim recovery
Income-tax Act 2025Irrevocable elections, renumbered sectionsTax Path
EU Machinery Regulation 2023/1230Behaviour logs for ML-driven machinesLearned-policy envelope evidence
GISTMTailings-dam monitoring and trigger plansDam instrument integrity
MiFID II RTS 25 · IEEE C37.118Timestamps traceable to UTCGNSS time-transfer integrity
Technical briefs & samples

Ask for the document that answers your question

Achyux

Terrain-integrity brief

A two-page brief and a technical annex: architecture, test matrix and limits. Shared on request; detailed matrices under agreement.

Compliance

Sample CBAM pack

An anonymised example of the evidence pack an exporter hands its EU importer.

Procurement

Capability statement

One page for RFIs and RFPs: what SRAVIL offers, evidence level per offering, and entity details.

Samples are labelled as samples and never presented as customer results. Request a document →

Glossary

Terms used on this site

Spoofing

Broadcasting fake satellite signals so a receiver reports a position or time that is wrong but looks convincing.

Carry-off

A spoof that drags the reported position away slowly enough to pass simple checks.

Fail-passive

When independent sensors disagree, the position is withheld and flagged instead of averaged.

SITL

Software-in-the-loop: the real autopilot software flying in a simulator.

Shadow mode

Running beside your system on the same inputs without controlling anything.

HELD · VIOLATED · INCONCLUSIVE

Proven within limits · a crossing was observed · the record cannot decide, and the report names what would.

Default values (CBAM)

The EU's fallback emission figures, applied when an exporter's own figure can't be verified.

← SRAVIL
Trust & entity

What we touch, what we hold, and what we corrected.

Data handling

Read access only

We work on copies of your records or in shadow mode beside your system; nothing we run controls a vehicle, vessel or plant. Retention and deletion terms are written into each engagement.

Designed and built in India

Indian-origin dual-use IP

GNSS, spoofer-location and underwater lines are SRAVIL-owned, developed in India, and sold through a counsel-gated channel. SCOMET review precedes any cross-border sale.

Entity

Being finalised, and stated when filed

Legal name, CIN, GST and registered office will be listed here before the first contract.

Registrations & certifications

None held yet

SRAVIL holds no DPIIT recognition, GeM registration, vendor empanelment, ISO or AS9100 certification today. Each will be listed here with its number and date once granted.

Corrections we've published

Numbers we changed, and why

When a result doesn't hold up, the site changes.

16 Oct 2026

UAS runtime assurance. "0 false CONTAIN" came from one lucky seed. The scenario generator was fixed and the result now rests on 3 seeds: 18/18 scenarios, 0 false CONTAIN over 699 nominal ticks. A fourth seed re-run on 31 Oct passed 4/6: the drain-margin bar failed on a slow landing estimate, so that bar is not yet stable across seeds.

31 Oct 2026

Airliner GPS integrity. Carry-off detection times updated to the closing measurement: 2 / 1 / 0.5 m/s caught in 27 / 50 / 84 s. An earlier "8 s" figure is withdrawn.

22 Oct 2026

Achyux. A procurement-style mountain trial found three blockers, each closed by a guard package. Its remaining limits are now on the Achyux page.

About

Systems for Robotics & AI Verification, Integrity and Lifecycle.

SRAVIL is the India entity of MASRINT. We are a small team and we say so: engagements start as a scoped pilot with pass/fail criteria written down before any subscription, and a claim we can't substantiate doesn't go on this site.

How we work

Bars locked before the run

Pass/fail criteria are agreed in writing first and never moved afterwards.

Fee owed whatever the verdict

We're paid for the measurement, not for a favourable answer.

Limits stated

Every result carries its maturity level and what it does not show.

Read access only

Nothing we run touches your live system.

Plainly stated

What we have — and haven't — demonstrated

On real recorded data

Spoof detection on recorded GPS signals · a fleet position audit on a real day of ship tracking data · safety-limit proofs on real humanoid robot logs · EU emissions exposure on real ship movement records.

On test sets and rulebooks

India carbon-credit calculations against the official tables · hospital payer rules · tax computations reviewed by a chartered accountant · drone software test campaigns.

Not yet

No product is field-validated in live customer operation, and none of our drone navigation work has been flight-tested. Anything marked Pilot stage still needs measuring on a customer's own system — that is what a pilot does.

Every result on this site carries its evidence label, so you can see exactly which of these it rests on.

Entity

Who you are contracting with

Legal

Legal name, CIN, GST and registered office are being finalised ahead of the first contract and will be stated here once filed. India entity of MASRINT.

Export & dual-use

GNSS, spoof-location and underwater-surveillance lines are Sravil-owned and sell through a counsel-gated channel; SCOMET review precedes any cross-border sale.

Contact

Tell us what you need to verify.

A few lines are enough. We reply with a short scoping note: what can be checked, what evidence it needs, and what a first pilot would look like.

Prefer email? Write to contact@sravil.com.

  1. You describe the question — one system, record set or filing.
  2. We send a scoping note.
  3. We agree pass/fail bars and a pilot scope in writing.

Builds your message to copy into an email. Nothing is stored on this site.