Technical Approach¶
Preliminary, surrogate-based - not government-validated
The pipeline below is exercised end-to-end on the synthetic, unclassified surrogate. Results are preliminary and not government-validated.
ingest → Discovery → CLAR → Migration Planner → Tool Orchestrator → Transformation
→ Validation (behavioral equivalence) → Cyber/cATO overlay → Governance
- Discovery - Roslyn semantic analysis of C# (+ Tree-sitter for JS/SQL, FORGE VB6 grammar): dependency graph, Tarjan SCCs, complexity vectors, business-rule extraction (AST + LLM majority vote → RDF), cryptographic inventory.
- CLAR - Cross-Language Abstract Representation (
clar-spec/): four layers, decouples source parsing from target generation; flags precision-constrained values so coordinate/time-on-target math is emitted withdecimal/checked arithmetic. - Migration Planner - composite risk scoring + spectral clustering → candidate microservice boundaries + a topologically-ordered, risk-scored migration sequence (the Phase II roadmap).
- Tool Orchestrator - routes transform tasks via
@577-industries/model-router; runs offline (deterministic transcript replay - the default), local (sovereign/air-gapped), or cloud. - Transformation - emits modern, testable .NET 8 with secure-by-construction patterns.
- Validation - differential + property-based testing with mission-data-aware oracles (route feasibility, anti-meridian, time-on-target); discrete outputs to exact equality, continuous to bounded relative error; reports a Chernoff confidence bound.
- Cyber/cATO - STIG checks (before/after), NIST 800-53 mapping, CycloneDX SBOM, hashchain
provenance (
@577-industries/hashchain-audit), POA&M. - Governance - human-in-the-loop review gates + tamper-evident audit trail.
For the full repository layout (engine projects, surrogate, language specs, evidence, and results), browse the repository on GitHub.