From local capture to lab-wide audit.
Every component and how it wires together. Click a box to drill in; hover to trace its connections.
click a box for detail · hover to light up its connections · esc to close
Capture
Wrap any subprocess. Record everything.
Analyze
Replay, compare, trace, evaluate.
Trust
Sign, timestamp, verify evidence.
Govern
Policy gates, approvals, compliance.
Serve
Multi-user API, dashboard, topology.
Local Dev
- Solo developer workflow
- SQLite — zero config
- No server required
- nova CLI only
Team Server
- Shared Postgres instance
- Cluster collector daemon
- Web dashboard for audit
- Row-level security isolation
HPC Cluster
- SLURM prolog/epilog hooks
- Node collectors per login node
- Aggregated evidence store
- Cross-job lineage queries
SQLite → Postgres
Local SQLite for solo devs, zero-config. Postgres for teams with RLS isolation. Migration path is a single flag change.
Go collector
Python-based collection had >5% overhead. Go daemon: 295K events/sec, <1ms local latency, crash-safe WAL spool.
DSSE + RFC 3161
DSSE envelope for content signing. RFC 3161 for trusted timestamps. Both are standards-compliant and verifiable without novafabric installed.