All capabilities
Datacenter Security Shared-family mapped

NightSweep

Rogue Hardware Manifest: Differential Metal-Map Sweep

A nightly scan that finds new hidden metal boxes — even inside cabinets.

Readiness Shared-family mapped

Mapped to a shared offline runtime family and usable with a recording or compatible ESP32 CSI stream.

Evidence Frontier Unvalidated concept

An early research proposal with no capability-specific product validation yet.

Runtime family Intrusion event

Entry or unexpected-presence event relative to a learned empty-space baseline.

When no ESP32 is connected

No compatible ESP32 stream is connected. Use the bundled Datacenter recording; it demonstrates the shared Intrusion event runtime, not independent proof of this capability.

Intended capability

Pilot this intended outcome through the shared Intrusion event family, then validate it against site-specific ground truth: Nightly RF 'inventory scan' that detects new concealed metal objects — a rogue mini-server, LTE implant box, skimmer, or unauthorized drive enclosure — appearing anywhere in the reconstructed field since the last baseline, including inside cabinets and above ceiling tiles.

This describes the intended outcome. Readiness is shared-family mapped, evidence is class C, and a catalog mapping or recording is not proof of this outcome at a real site.

Solution blueprint

See the environment before installing it.

This exact kit is one of 191 first-class designs. It includes geometry, objects, nodes, wording, scenarios, installation, limitations, and catalog-bound readiness.

Shared-family mapped

No rendered revision is available yet.

Bundled recording

A related Datacenter scene

This is one recorded vertical scenario. It is not separate validation of every capability in the catalog.

01 The physics

Metal has effectively infinite conductivity: even a paperback-sized metal enclosure is a strong new scatterer that adds a resolvable multipath component and perturbs the reconstructed sigma (conductivity) map; its position is triangulated from delay changes across multiple mesh links.

02 Shared processing path

CIR sparse recovery of new path delays -> RFF/NeRF differential sigma-map reconstruction against golden baseline -> voxel-level change detection -> compartment CUSUM to separate one-time appearance events from drift; localization to rack/ceiling zone.

This is a capability design path. Components may be shared with other catalog entries; it is not presented as a unique algorithm.

03 Validation plan

Own-hardware: place progressively smaller metal enclosures (19in chassis down to Raspberry-Pi-in-tin) at known positions in a live room, measure minimum detectable size vs. range and localization error; no public dataset covers this — this IS the frontier experiment.

04 Commercial hypothesis

Overnight rogue-device sweep for high-security halls — 'if anyone bolted a box into your room, the RF field itself will testify' — sold to the CISO worried about supply-chain and evil-maid hardware implants.