Pluck Studio / Bureau

RAVEN

Passive RF spectrum chain-of-custody. The substrate every Phase 7+ RF Bureau program rides on. Without it, each wireless program reinvents IQ → canonicalization → Merkle → Rekor.

How RAVEN works

  1. An operator captures IQ samples from any SDR (rtl_sdr, HackRF, USRP) into a cu8 or cf32 file.
  2. pluck bureau raven sweep runs a deterministic 32-bin Welch PSD over the IQ buffer per (geohash × time × band) tile, signs each tile with the receiver's Ed25519 key, and commits the tile-set as a Merkle forest.
  3. The substation operator signs the sweep root and posts the in-toto Statement under predicate https://pluck.run/Raven.Sweep/v1 to the public Sigstore Rekor log.
  4. Downstream programs (STINGRAY / KARMA / CELESTE / COSMOS) layer protocol-specific decoders on top — they share the same Welch digest, the same Merkle leaf shape, and the same predicate URI namespace.
  5. pluck bureau raven anomaly diffs a current sweep against a baseline; tiles whose Welch-distance crosses threshold land as signed https://pluck.run/Raven.Anomaly/v1 markers.

Determinism contract

Same IQ buffer + same sample rate + same window + same segment length + same overlap → byte-identical Welch digest. Tests lock this. Cross-receiver equivocation proofs are the entire substrate value; they are useless if two honest receivers can not produce the same digest from the same RF.

Programs riding the substrate

  • STINGRAY · Cellular
    Equivocation proofs for cell towers — two receivers in the same geohash + band reporting different Welch digests means at least one is lying.
  • KARMA · Wi-Fi
    Evil-twin AP detection by Welch-distance against a known-good monitor in the same geohash + 2.4/5 GHz band.
  • CELESTE · GNSS
    GPS-spoofing detection — operator-declared baseline of expected GNSS bands diffed against current sweeps.
  • COSMOS · LEO satellite
    Discontinuity detection across multi-receiver passes; a re-broadcast / relay attack surfaces as a Welch-distance gap.

Quorum compounds the value

Single-receiver sweeps are tamper-evident records. But all the contradiction proofs above require ≥ 2 distinct receivers in the same band + time window. RAVEN's quorum field (k-of-n) makes that requirement machine-checkable.

Phase 7 alpha vs 7.5

Alpha ships file-input only (cu8 / cf32 IQ files). Live SDR streaming (rtl_tcp, librtlsdr, USRP) defers to Phase 7.5 — same JS-layer-first pattern as TRIPWIRE Phase 2.