# Black Swan Net — full public program summary Updated 8 August 2026 · Public release v0.4.0 ## Definition Black Swan Net is a secure communications program developing dedicated full-Linux endpoint appliances for direct, mutually authenticated sessions between explicitly authorized devices. It is not a consumer messaging app, VPN service or general-purpose smartphone brand. ## Direct-only operational baseline Both endpoints must be available. They verify authorized identity, required state, current policy and freshness before establishing an encrypted session. If the peer is absent, no message is transmitted or deposited with Black Swan infrastructure. The selected session excludes a Black Swan-operated message server, vendor message queue, cloud message store, identity service, directory, relay, push service and vendor key custody. An encrypted local draft or pending object may remain on the sender under policy, but it is not an infrastructure deposit or delivered message. Parties coordinate synchronized session windows through operating procedure or another approved out-of-band mechanism. Black Swan Net does not guarantee delivery or availability. ## Identity and closed fleets Phone numbers, SIMs, email addresses, vendor accounts, radio association and network reachability do not become the cryptographic identity. Only explicitly authorized endpoint identities with acceptable current state receive bounded authority for a session. Connected is not trusted. Authorized plus verified means trusted for the current session. ## Product family ### Black Swan Direct Direct is the stock Pixel 10a reference track and baseline under active development. The selected production direction is a minimal, immutable and independently controlled full-Linux userspace on the Pixel-derived boot chain. Android and GrapheneOS are historical exploration and hardware-discovery references, not the selected production userspace. The dedicated-device direction removes the ordinary browser, email, app store, consumer backup, ordinary messaging accounts and third-party application environment. It requires controlled provisioning, signed releases, rollback-protection direction, revocation, custody, replacement and depot procedures. ### Black Swan Sovereign Sovereign is a modified RED/GREEN dual-WLAN engineering proposal selected for development but not yet a validated production design. The Pixel internal WLAN is the authenticated trusted-client-facing GREEN domain. A separate Murata Type 2EL WLAN is the hostile access-network-facing RED domain. An STM32MP135F isolation gateway owns RED and presents a narrow authenticated ciphertext-frame boundary to the full-Linux security domain. No ordinary RED-to-GREEN bridge, NAT or general IP routing is intended. Production direction eliminates exposed external USB data. RED is assumed compromised. RED compromise may deny service or expose outer-network metadata, but the design objective is to prevent access to plaintext, endpoint identity private keys, fleet secrets or the full-Linux security domain. That objective still requires implementation, testing and independent evidence. ### Black Swan Gateway Gateway is a product and architecture direction pending implementation and testing. An authenticated trusted workstation connects through GREEN. The intended path exists only through an authorized Black Swan session to an approved peer. The workstation does not receive ordinary Internet access through Black Swan. The public phrase is “A private cable across a hostile network.” ### Black Swan Assurance Assurance is the maintained lifecycle around the endpoint: controlled signed releases, vulnerability response, fleet and policy renewal, incident response, replacement service, secure depot handling, configuration control, security advisories, evidence maintenance, customer-specific spare pools and optional priority response. Secure logistics, replacement coverage, priority response and high-touch support are separately scoped. Public pricing is not stated in release v0.4.0 because available figures remain planning hypotheses rather than approved offers. ## Capture response Replace the endpoint. Preserve the fleet. If an endpoint is lost, captured, opened or tampered with, remove it from operations, permanently revoke its identity, advance applicable fleet state and provision a replacement. The old identity is never restored. Returned hardware enters controlled quarantine, depot analysis, complete reconstitution under an entirely new identity, or destruction according to the assurance policy. ## Hostile-network assumption Hotel Wi-Fi, airport Wi-Fi and compromised routers are hostile. ISPs and the Internet are untrusted transport. The access network does not establish identity or confidentiality. Denial of service, jamming, blocking, correlation and outer-network metadata remain possible. Availability may fail; trust must not fail open. ## Security evidence The public site provides summary evidence. Qualified controlled review may include the architecture boundary, threat model, SBOM, build provenance, cryptographic protocol documentation, release-signing policy, penetration-test results, remediation record, supply-chain documentation, custody procedures, incident and revocation procedures, depot procedures, operating CONOPS and configuration baseline. RMF, ATO, NIST SP 800-171, NIST SP 800-53, FIPS 140-3, NIAP/Common Criteria, CSfC, CNSA, STIG/SRG, SBOM and SSDF are evidence and evaluation references only where applicable to the exact configuration. Mention does not claim validation, listing, certification, approval, compliance or authorization. ## Government boundary Black Swan Net is not represented as government-approved, authorized for CUI or classified information, NSA certified, equivalent to a SCIF or generally authorized for any mission. Component validation, product evaluation, system assessment and customer authorization apply to different boundaries. Government paths may include a paid design study, controlled technical evaluation, unclassified or CUI pilot, integrator engagement or sponsor-defined high-assurance program. The responsible customer authority controls approval of the exact deployment. ## Commercial engagement paths - Private demonstration for principals, family offices, executives, attorneys, investigators and protective teams. - Enterprise pilot, typically scoped for 6–25 endpoints, for executive, board, M&A, R&D, incident, investigations and critical teams. - Government briefing for design study, controlled evaluation, unclassified/CUI pilot or sponsor-defined work. - Integration-partner discussion for defense, government, cybersecurity, secure-mobility and executive-protection organizations. All public inquiries must remain unclassified and non-sensitive. Do not send classified, CUI, export-controlled, privileged, case-specific, credential, vulnerability, source-identity, evidence, customer-confidential or operationally sensitive information. ## Brand and IP boundary Black Swan Net is the selected working name. A reported prior Ohio emergency-network use is only a trademark and SEO diligence lead, not a legal conclusion. Formal USPTO, common-law, domain, category and confusion analysis by trademark counsel remains open. Patent-pending status does not prove product performance, security, claim scope, freedom to operate or trademark rights. Security engineering takes precedence over preserving an earlier provisional-filing architecture. ## Leadership Gene Avakyan is founder and project lead. His background includes three decades of enterprise systems, procurement and contract platforms supporting more than $13 billion in contracts for the City of Los Angeles and the Federal Aviation Administration, law-enforcement technology, aerospace and defense engineering. This is professional background, not an agency endorsement of Black Swan Net. ## Security news Black Swan Net publishes evidence-led analysis of endpoint security, network infrastructure, supply chain, mobile vulnerabilities, government guidance, telecom security, secure communications and hardware assurance. Source facts, commentary and product relevance remain distinct. Articles do not claim a particular organization or device is compromised. - [Your management plane is a master key. CISA says one is being exploited.](https://blackswannet.com/news/2026/08/management-plane-active-exploitation/): On August 3—five days before this analysis—CISA added an N-able N-central authentication-bypass vulnerability to its Known Exploited Vulnerabilities catalog. The confirmed fact is active exploitation. The operational warning is broader: a system authorized to manage an endpoint fleet can concentrate risk across that fleet. - [The router between you and the mission may already belong to someone else](https://blackswannet.com/news/2026/08/router-hygiene-state-targeting/): A July 2026 NSA-led advisory says Russian FSB actors continue to exploit weakly configured and vulnerable routers across communications and other critical sectors. The warning is about more than patching: every shared dependency inside a sensitive conversation belongs in the threat model. ## Canonical public pages Home: https://blackswannet.com/ Product architecture: https://blackswannet.com/secure-communications-appliance/ Government evaluation: https://blackswannet.com/government-evaluation/ FAQ: https://blackswannet.com/faq/ News: https://blackswannet.com/news/ Contact: https://blackswannet.com/contact/