Abstract: Disclosed are systems and methods for trusted and secure application deployment via collective signature verification of the application artifacts. The trusted and secure application deployment may include receiving multiple application artifacts, decoding verifications from at least one cryptographic signature associated with each received artifact, comparing the verifications to a first set of requirements specified in an admission control list, comparing the verifications from a first received artifact to a second set of requirements specified in the verifications of a second received artifact, halting the deployment of the artifacts in response to the decoded verifications not satisfying one or more requirements from the first set of requirements or the second set of requirements, and deploying the artifacts to a set of compute nodes in response to the verifications decoded from the received artifacts satisfying the first set of requirements and the second set of requirements.

Abstract: Disclosed are systems and methods for trusted and secure application deployment via collective signature verification of the application artifacts. The trusted and secure application deployment may include receiving multiple application artifacts, decoding verifications from at least one cryptographic signature associated with each received artifact, comparing the verifications to a first set of requirements specified in an admission control list, comparing the verifications from a first received artifact to a second set of requirements specified in the verifications of a second received artifact, halting the deployment of the artifacts in response to the decoded verifications not satisfying one or more requirements from the first set of requirements or the second set of requirements, and deploying the artifacts to a set of compute nodes in response to the verifications decoded from the received artifacts satisfying the first set of requirements and the second set of requirements.

Abstract: A controller is provided to optimize software allocations to shared resources based on a dynamic mapping of resource relationships. The controller may map relationships between resources of nodes in different compute clusters. The controller may receive a request for a particular application, and may determine different sets of the nodes that each include minimum, desired, purchased, or subscribed to set of resources to run the particular application. The controller may determine optimization constraints associated with running the particular application, and may compare the relationships between the resources of each set of nodes to the optimization constraints. The controller may select a particular set of nodes that have resource relationships satisfying more of the optimization constraints than the resource relationships of other selected sets of nodes, and may execute the particular application using the resources of the particular set of nodes.

Abstract: Disclosed are systems and methods that include user interfaces (“UIs”) and a controller for automating the building, management, and distribution of operation systems (“OSes”) with different customizations for different users. A UI may include selectable elements for different OS distributions, and may present a first set of components from a selected particular OS distribution and a second set of components that are not included with the particular OS distribution. The controller may generate a custom OS build based on a first subset of components that are selected from the first set of components, and a second subset of components that are selected from the second set of component using the UI. The controller may provide a repository that is accessed with an identifier and that links to each selected component of the custom OS build, and may distribute the custom OS build from the repository to a node.

Abstract: A controller is provided to construct and run a container from one or more encrypted container images without persisting any decrypted data from the one or more encrypted container images to non-volatile storage at any time. The controller may retrieve a container image with encrypted first data and encrypted second data, and may store the container image to non-volatile storage of a particular node. The controller may construct a container by mounting the container image as part of an encrypted file system of the container. During runtime execution of the container, the encrypted first data may be extracted and decrypted from the file system in response to a file system request for the encrypted first data, and the decrypted first data may be entered into volatile storage of the particular node while the encrypted first data and the encrypted second data are retained on the non-volatile storage.

Abstract: An orchestration system may provide distributed and seamless stateful high performance computing for performance critical workflows and data across geographically distributed compute nodes. The system may receive a task with different jobs that operate on a particular dataset, may determine a set of policies that define execution priorities for the jobs, and may determine a current state of compute nodes that are distributed across different compute sites. The system may distribute the jobs across a selected set of the compute nodes in response to the current state of the set of compute nodes satisfying more of the execution priorities than the current state of other compute nodes. The system may produce task output based on modifications made to the particular database as each compute node of the set of compute nodes executes a different job of the plurality of jobs.

Abstract: A controller is provided to construct and run a container from one or more encrypted container images without persisting any decrypted data from the one or more encrypted container images to non-volatile storage at any time. The controller may retrieve a container image with encrypted first data and encrypted second data, and may store the container image to non-volatile storage of a particular node. The controller may construct a container by mounting the container image as part of an encrypted file system of the container. During runtime execution of the container, the encrypted first data may be extracted and decrypted from the file system in response to a file system request for the encrypted first data, and the decrypted first data may be entered into volatile storage of the particular node while the encrypted first data and the encrypted second data are retained on the non-volatile storage.

Abstract: An orchestration system may provide distributed and seamless stateful high performance computing for performance critical workflows and data across geographically distributed compute nodes. The system may receive a task with different jobs that operate on a particular dataset, may determine a set of policies that define execution priorities for the jobs, and may determine a current state of compute nodes that are distributed across different compute sites. The system may distribute the jobs across a selected set of the compute nodes in response to the current state of the set of compute nodes satisfying more of the execution priorities than the current state of other compute nodes. The system may produce task output based on modifications made to the particular database as each compute node of the set of compute nodes executes a different job of the plurality of jobs.

Abstract: In one aspect, the present disclosure relates to a method which, in one embodiment, includes: receiving video data for a first video and deconstructing the video data of the first video into a plurality of context windows; performing, on each context window of the plurality of context windows that includes an image frame, a video analytic function on the image frame to identify one or more characteristics of the context window that are associated with image-related content of the first video; performing, on each context window of the plurality of context windows that includes an audio frame, a video analytic function on the audio frame to identify one or more characteristics of the context window that are associated with audio-related content of the first video; generating, for each of the plurality of context windows, a respective local atomic unit comprising attributes derived from the identified one or more characteristics of the respective context window, to form a plurality of local atomic units; and gen

Abstract: In one aspect, the present disclosure relates to a method which, in one embodiment, includes: receiving video data for a first video; deconstructing the video data of the first video into a plurality of context windows; performing, on each context window that includes an image frame, a video analytic function on the image frame to identify one or more characteristics of the context window; performing, on each context window that includes an audio frame, a video analytic function on the audio frame to identify one or more characteristics of the context window; generating, for each context windows, a respective local atomic unit comprising attributes derived from the identified one or more characteristics of the respective context window, to form a plurality of local atomic units; and generating a local graph representation of the first video, comprising a plurality of nodes corresponding to the plurality of local atomic units.

Abstract: A system for creating single and double pane window walls comprising mullions, sills, headers, other framing members and gasketing, is disclosed. The system features window pane framing extrusions which include provisions that allow the extrusions to snap together to create a framing member with a box-type cross-section. Experimentation has shown that the composite box sections have similar structural properties to unitary box sections, i.e. comparable moments of inertia and cross-sectional area and thus comparable ability to carry bending moment, transmit shear and resist buckling.

Abstract: A back pad for use in connection with a safety harness including at least two spaced back straps. The back pad includes a shield covering at least a portion of each of the back straps of the safety harness. The shield extends between the back straps to cover a portion of a user's back when the safety harness is worn. A full body safety harness to be worn by a person includes an upper torso portion and a lower seat portion. The upper torso portion is operatively connected to the lower seat portion by a first connector on a first lateral side and a second connector on a second lateral side thereof. The first connector and the second connector can, for example, enable forward and rearward rotation of the upper torso portion relative to the lower seat portion (for example, without causing a significant increase in tension in the upper torso portion or the lower seat portion). At least one of the first connector and the second connector includes a shaft.

Abstract: A full body safety harness to be worn by a person includes an upper torso portion and a lower seat portion. The upper torso portion is operatively connected to the lower seat portion by a first connector on a first lateral side and a second connector on a second lateral side thereof. The first connector and the second connector enable forward and rearward rotation of the upper torso portion relative to the lower seat portion (as in the case of forward and rearward bending by a user of the harness) without causing a significant increase in tension in the lower seat portion. A safety harness to be worn by a person which includes at least one strap section including a cam buckle in operative connection therewith to adjust a fit of the strap section. A safety harness includes a label pack system including a base having an attachment mechanism to attach the base to a strap of the safety harness and a closure in operative connection with the base.

Abstract: A method and apparatus for improving the surface finish and/or surface integrity of a workpiece formed or shaped with a tool increase the surface hardness of the workpiece during forming or shaping of the workpiece. A method and apparatus for forming or shaping a workpiece also increase the surface hardness of the workpiece during forming or shaping of the workpiece with a tool, as do a method and apparatus for manufacturing a finished part or product from a workpiece. In some embodiments, an expanding jet of cryogen may be jetted to a surface of a workpiece and a tool from a nozzle, wherein the cryogen is at least partially separated into a condensed phase portion and a vapor portion within a downstream portion of the nozzle.

Abstract: A foothold system for attachment to a fall protection device includes at least one foot upon which a user can rest a foot and an attachment member in operative connection with the foot seating. The attachment member is adapted to attach to the fall protection device (for example, a safety harness, a safety belt or a lanyard).

Abstract: An apparatus and a method are disclosed for reducing a thickness of a thermomechanically-affected layer on an as-machined surface of a hard metal workpiece being machined by a hard cutting tool exerting a thermomechanical load on a surface of the workpiece. The method involves reducing the thermomechanical load on the surface of the workpiece, and the apparatus includes a means for reducing the thermomechanical load on the surface of the workpiece.

Abstract: A cryogenic fluid jet is used in an apparatus and a method for remote cooling of a cutting tool engaged in machining a workpiece under high-energy conditions, such as high-speed machining, hard-turning, cutting of difficult to machine materials, and combinations thereof. The apparatus and method use a stabilized, free-expanding cryogenic fluid jet having a pulse cycle time less than or equal to about 10 seconds. The apparatus and method increase the cleanliness of machined parts and chips and machining productivity of hard but brittle tools, including but not limited to tools which should not be cooled with conventional cooling fluids.

Abstract: A container for dispensing a viscous agent. The container includes a lid with an upper planar surface having an opening therein. A prophylactic sheath depends from the opening and has an extendable body, a normally open interior and end opening which defines a mouth region. The mouth region is affixed to the lid in proximity to the border of the lid opening. The user can insert one or more fingers within the end opening to extend the sheath for dispensing a viscous agent from the body of the container during use. The sheath can also be afixed to an insert which is installed within the mouth opening of the container.

Abstract: A shingle removing implement can include a flat blade adapted to be inserted underneath the designated shingle, and an elongated handle extending a substantial distance from the blade to cause the blade to exert a lifting action on the shingle. An arcuate plate is secured to the back surface of the blade, to form a wedge structure that facilitates a prying action of the blade on the shingle.