Abstract: A system includes a security controller located within a central-zone in communication with a provisioned agent operating on an edge-zone device. The security controller may implement controller-blind security control on the edge-zone device by making security authorization determinations using a secure-operation confidence analysis performed by the provisioned agent. The provisioned agent, operating within the edge-zone, may have access to un-sanitized data, which may be unavailable to the security controller in the central-zone. The provisioned agent may access condition-descriptors via a secure-operation confidence assignment matrix. Using the condition-descriptors, the provisioned agent determine feedback, which may include a secure-operation confidence coefficient, based on the un-sanitized data to which the security controller is blind.

Abstract: A system includes a display control prime located within a central-zone in communication with a provisioned agent operating on an edge-zone device. The display control prime may implement prime-blind open-loop pixel-state control on the edge-zone device by executing pixel-state commands via the provisioned agent. The provisioned agent, operating within the edge-zone, may have access to un-sanitized data, which may be unavailable to the display control prime in the central-zone. The display control prime may provide conditional pixel-state commands via a pixel-state control parameter matrix. The provisioned agent may identify an operative pixel-state command from among the conditional pixel-state commands based on the un-sanitized data to which the display control prime is blind.

Abstract: A system includes a security controller located within a central-zone in communication with a provisioned agent operating on an edge-zone device. The security controller may implement controller-blind security control on the edge-zone device by making security authorization determinations using a secure-operation confidence analysis performed by the provisioned agent. The provisioned agent, operating within the edge-zone, may have access to un-sanitized data, which may be unavailable to the security controller in the central-zone. The provisioned agent may access condition-descriptors via a secure-operation confidence assignment matrix. Using the condition-descriptors, the provisioned agent determine feedback, which may include a secure-operation confidence coefficient, based on the un-sanitized data to which the security controller is blind.

Abstract: A system includes a security controller located within a central-zone in communication with a provisioned agent operating on an edge-zone device. The security controller may implement controller-blind security control on the edge-zone device by making security authorization determinations using a secure-operation confidence analysis performed by the provisioned agent. The provisioned agent, operating within the edge-zone, may have access to un-sanitized data, which may be unavailable to the security controller in the central-zone. The security controller may provide condition-descriptors via a secure-operation confidence assignment matrix. Using the condition-descriptors, the provisioned agent determine feedback, which may include a secure-operation confidence coefficient, based on the un-sanitized data to which the security controller is blind.

Abstract: A system includes a display control prime located within a central-zone in communication with a provisioned agent operating on an edge-zone device. The display control prime may implement prime-blind open-loop pixel-state control on the edge-zone device by executing pixel-state commands via the provisioned agent. The provisioned agent, operating within the edge-zone, may have access to un-sanitized data, which may be unavailable to the display control prime in the central-zone. The display control prime may provide conditional pixel-state commands via a pixel-state control parameter matrix. The provisioned agent may identify an operative pixel-state command from among the conditional pixel-state commands based on the un-sanitized data to which the display control prime is blind.

Abstract: A system includes a security controller located within a central-zone in communication with a provisioned agent operating on an edge-zone device. The security controller may implement controller-blind security control on the edge-zone device by making security authorization determinations using a secure-operation confidence analysis performed by the provisioned agent. The provisioned agent, operating within the edge-zone, may have access to un-sanitized data, which may be unavailable to the security controller in the central-zone. The security controller may provide condition-descriptors via a secure-operation confidence assignment matrix. Using the condition-descriptors, the provisioned agent determine feedback, which may include a secure-operation confidence coefficient, based on the un-sanitized data to which the security controller is blind.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for predictive modeling for adjusting initial values are disclosed. In one aspect, a method includes the actions of accessing transaction history data that indicates one or more transaction details associated with the transaction, a predicted value, and a final value. The actions further include determining a difference value between the predicted value and the final value. The actions further include generating a predictive model that is trained to estimate. The actions further include receiving one or more transaction details and a predicted value associated with a subsequently received transaction. The actions further include providing the one or more transaction details as input to the predictive model. The actions further include receiving an adjustment value to apply to the predicted value. The actions further include providing, for output, data indicating the adjustment value.

Abstract: A method for tracking components of equipment. The method includes generating a first record in a component tracking data store of a component tracking system for storing original constituent component identification information that specifies original constituent components of the equipment, and a second record in the component tracking data store of the component tracking system for storing replacement component identification information that specifies a replacement component that replaces a component of the original constituent components of the equipment. The method further includes receiving a request for a current listing of components in the equipment and locating records in the component tracking data store of the component tracking system associated with the equipment.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, employing a permissioned distributed ledger for the promotion of sustainable agriculture. In one aspect, a method includes receiving, from a purchaser of goods, payment data including a targeted payment amount and a product identifier; locating, on a permissioned distributed ledger, an attestation for a delivery of the purchased goods, the permissioned distributed ledger stores verified transactions within a supply chain for the purchased goods; processing the attestation for a delivery from a producer of the purchased goods to determine the producer of the purchased goods; providing payment information including the targeted payment amount to the producer through a producer application; receiving verification, based on biometric authentication, of an identity of the producer from the producer application; and releasing funds for the targeted payment amount to the producer.

Abstract: Techniques are described for using a distributed ledger system (DLS) to manage transactions such as the trading of assets between entities. In some implementations, a platform provides a mechanism in which multiple institutions can participate in a dark pool for trading assets. The platform employs a DLS to support a dark pool that provides data privacy to the participating institutions, anonymity to the trading entities, data security, immutability, and transparency for auditing and regulatory compliance. Through a dark pool supported by a DLS, multiple institutions can benefit from a shared dark pool, thus increasing the number of parties who can participate in the trading activities, increasing the quantity of assets available to be traded, and increasing the likelihood of matching seller(s) to buyer for a particular trade. The DLS ensures that the information in the dark pool is kept secure and confidential, through homomorphic encryption and/or zero knowledge proof.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, employing a permissioned distributed ledger for the promotion of sustainable agriculture. In one aspect, a method includes receiving, from a purchaser of goods, payment data including a targeted payment amount and a product identifier; locating, on a permissioned distributed ledger, an attestation for a delivery of the purchased goods, the permissioned distributed ledger stores verified transactions within a supply chain for the purchased goods; processing the attestation for a delivery from a producer of the purchased goods to determine the producer of the purchased goods; providing payment information including the targeted payment amount to the producer through a producer application; receiving verification, based on biometric authentication, of an identity of the producer from the producer application; and releasing funds for the targeted payment amount to the producer.

Abstract: A method for tracking components of equipment. The method includes generating a first record in a component tracking data store of a component tracking system for storing original constituent component identification information that specifies original constituent components of the equipment, and a second record in the component tracking data store of the component tracking system for storing replacement component identification information that specifies a replacement component that replaces a component of the original constituent components of the equipment. The method further includes receiving a request for a current listing of components in the equipment and locating records in the component tracking data store of the component tracking system associated with the equipment.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for predictive modeling for adjusting initial values are disclosed. In one aspect, a method includes the actions of accessing transaction history data that indicates one or more transaction details associated with the transaction, a predicted value, and a final value. The actions further include determining a difference value between the predicted value and the final value. The actions further include generating a predictive model that is trained to estimate. The actions further include receiving one or more transaction details and a predicted value associated with a subsequently received transaction. The actions further include providing the one or more transaction details as input to the predictive model. The actions further include receiving an adjustment value to apply to the predicted value. The actions further include providing, for output, data indicating the adjustment value.