Single source of truth
One canonical record per aircraft tail, person, flight, route, ticket, MEL item, defect, duty, slot, ASA. References everywhere else. Direct DB access fails the build.
One canonical record per real-world entity. Compartmentalised access at the data layer. Regulation, CBAs and FRMS encoded as data, not code. CRM, TEM and Human Factors as first-class design constraints — baked into the kernel, not bolted on.
Today's airline runs ten or twelve systems that don't agree on anything: dispatch, crew, maintenance, safety, finance, comms, slots, traffic rights. Each carries its own copy of the truth. Each disagrees in subtle, billable ways. AXIOM replaces the patchwork with one canonical record per real-world entity, accessed only through compartmentalised, audited interfaces — and a regulatory engine in which every CBA, FTL rule and FRMS deviation is data, not code.
One canonical record per aircraft tail, person, flight, route, ticket, MEL item, defect, duty, slot, ASA. References everywhere else. Direct DB access fails the build.
Row- and column-level security at the data layer. Cross-department reads through published interfaces. Every cross-compartment query logged immutably.
EASA, FAA, TCCA, CASA, CAAS, ANAC, GACA, GCAA — plus every CBA, every FRMS deviation — encoded as time-bounded rule rows with provenance, not embedded in code.
Append-only, hash-chained, externally anchored to RFC 3161. Any past flight cycle reproducible end-to-end in under ten minutes by a junior auditor.
if operator == "MERIDIAN" in production code is a defect. Same binary deploys at any airline; configuration determines behaviour.
€16–19M gross to v1.0 (~€10–13M net of SIFIDE II), 36 months, phased deployable increments every 6 months. Funded €8–25M non-dilutive.
Every subsystem spec, every schema, every UI rule, every procurement decision must trace back to one of these. The Design Doctrine is the constitution of AXIOM.
Every operationally significant data point has ≥2 independent sources plus an arbitration mechanism. Disagreement is surfaced, never silently resolved. Single-source operation runs only as a degraded mode, with a persistent banner.
Before any code, three artefacts are required for every workflow: threat catalogue → trap/detection → recovery procedure. No feature ships without all three. The catalogue is versioned alongside the code.
Build for the operator at the bottom of the performance curve, not the top. High-consequence actions never single-tap. Critical information persistent and pre-attentive. Multi-modal state — colour and icon and text. Bilingual UI (EN/PT min); ICAO phraseology canonical and un-translated.
Every operational, regulatory, financial, HR or training problem lives in the issue ledger. Spreadsheet, email, paper workarounds carry mandatory closure dates. Workarounds without closure dates are uncommitted technical debt and are rejected.
Single source of truth + schema-on-write + role and attribute access. Each department owns, generates and consumes inside its compartment. Cross-department reads through published interfaces only. Row- and column-level security at the data layer, not the UI.
No hardcoded reference to any operator, fleet, base, jurisdiction, language, currency or CBA. Operator behaviour is data-driven via configuration entities and the regulatory rule engine. The same binary, every airline.
A platform spine of 10 services (P01–P10), 24 operational and governance modules (M01–M24), an ATC/ANSP integration family (M73–M84) and two AXIOM-IQ analytics extensions (P19, P20). All on the same event-sourced canonical store; all reachable only through audited interfaces.
OIDC + SAML SSO · SCIM · FIDO2/WebAuthn · ABAC · MFA · break-glass · dual-auth.
Canonical UTC · multi-source arbitration · σ tracking · leap-second smear · UTC↔local projections.
Canonical entity store · schema-on-write · versioned schemas · projections · MDM.
Kafka or NATS JetStream · CDC · idempotent writes · exactly-once semantics.
Append-only · hash-chained · RFC 3161 anchored · query log · compliance exports.
Versioned regulatory + contractual rule library · evaluation engine · effective-date tracking.
Document control · IDs · revisions · supersession · e-signatures · ARINC 858.
Design Spec v2.1 · component library · WCAG 2.2 AA (AAA on safety-critical) · fatigue-aware densities.
Distributed tracing · structured logs · metrics per SLO · OCC/MCC/NCC/SOC dashboards · RUM.
Read-only projection of P03 · data warehouse · BI · ML/forecast services.
Long-range planning, slots strategy, network shape.
Yield, fare construction, RBD, group pricing.
NDC + GDS + direct, agency, interline.
Programme tiers, accrual, redemption, partner equivalencies.
Care, EU 261, irrops accommodation, voucher engine.
Bags, seats, lounges, upgrades, ground product.
Rostering, FTL, currency, training, FRMS.
Tail planning, lease/own, configuration, lifing.
AD/SB compliance, MEL, work packs, defect history.
Hangar floor, line maintenance, parts, ATA Spec 2000.
OFP, fuel, alternates, ETOPS/EDTO, briefings.
NOCC: irrops, recovery, watch-keeping.
Stand, GSE, fueler, de-ice, turnaround.
AWB, ULD, dangerous goods, ONE Record.
Service standards, cabin defects, retail, special handling.
ATC, datalink, ACARS, ops messaging.
Hazard, risk, FDM, voluntary reports — just-culture by architecture.
NCASP, vetting, threat intel, PII firewall.
IOSA, ISAGO, IS-BAO; closed-loop training intelligence.
Competencies, recurrent, examiner calibration.
Code of Employment, payroll integration, mental-health firewall.
Books, IFRS 16 lease, tax, BSP/CASS, IATA SIS.
Vendor lifecycle, hotel/handling/fuel/catering contracts.
Connectivity, devices, EFB fleet, sovereign-cloud topology.
GUFI assignment, eFPL, PFP submission, trial loops, planning-status feedback.
NM B2B P/S · CTOT (-5/+10) · DPI/FUM A-CDM · slot improvement feedback.
Multi-objective: fuel + time + contrail + noise + EU261 + crew + FDM + hedge. Pareto front.
RTC service registry per EUROCAE ED-240B, multi-aerodrome.
State, military, HEMS, eVTOL · iOAT FPL · VPA/DMA · EUROAT.
STCA · MSAW · DAIW · MTCD · MONA · SWIM-native.
E-AMAN/XMAN to 350 NM · TSAT/TTOT A-CDM · ADS-C/EPP downlink.
AIXM 5.1.1/5.2 · FIXM 4.3 · IWXXM v3+ · ASTERIX cat-021/048/062/065.
PSR + SSR Mode S + ADS-B v2 + MLAT/WAM + ADS-C + GNSS interference detection.
EUROCAE ED-240B · multi-aerodrome per EASA Issue 3 · contingency model.
SESAR FOI · GUFI lifecycle · role-scoped views · FF-ICE diff/version. Sits on P04.
ATN-B1/B2 · FANS-1/A · VDL Mode 2 · AeroMACS · SATCOM Iris · PBCS · ED-137 voice.
Counterfactuals over accept/reject decisions and downstream outcomes. Feeds M75 weights and M73 strategy.
Differential-privacy aggregations · MPC for cross-tenant benchmarks · no leakage of competitor intent.
/axiom/v1/flights/{flightId}/loadsheet/final
M13 · dual-auth
user:op_lc_lis_421
role=load_controller; station=LPPT; jurisdiction=PT
dispatch_release_loadsheet_final
01HX...
lpa-lhr-2026-05-04-tp342-final-1
{
"zfw_kg": 138420,
"tow_kg": 174900,
"ldw_kg": 142200,
"cg_pct_mac_zfw": 24.7,
"cg_pct_mac_to": 25.3,
"fuel_block_kg": 36480,
"fuel_taxi_kg": 180,
"fuel_density_kg_per_l": 0.795,
"doc_id": "MG-OPS-LS-0001-v3.4",
"computed_against_afm_rev": "A20N-AFM-2025-09",
"dual_auth_pending": true
}
Every operational module sits on six foundational data services. Each is small, opinionated and uncompromising. The rest of AXIOM inherits their guarantees.
AXM-ARCH-0002 · v0.3
Canonical UTC, ISO 8601 with explicit Z, nanosecond hardware precision (microsecond minimum acceptable). A four-tier source hierarchy with σ uncertainty tracked on every record. Leap-second policy: 24-hour symmetric smear, never a step. Records are immutable; corrections are new records linked to the original.
| Operation class | Tolerance |
|---|---|
| Flight recorder ingest | 1 ms |
| ATC clearance | 100 ms |
| Slot management · OFP filing · FTL boundary · dispatch release | 1 s |
| General state change | 10 s |
| Personal scheduling | 60 s |
| Historical reporting | 5 min |
Quantities, never bare numbers.
SI canonical with ICAO Annex 5 exceptions (ft, kt, NM, °C). Fuel mass canonical post-uplift; volume only at uplift, with both density and temperature recorded. Role-scoped display: active value bold + adjacent conversion in regular weight, identical font size. Colour-blind safety encoded by weight, not hue.
axiom.core.units.*{
"magnitude_SI": 0.795,
"unit_id": "kg/L",
"canonical": "density_kg_per_litre",
"module": "M13",
"source": "FUELER:UPLIFT-7724",
"captured_at": "2026-05-04T05:32:11.082Z",
"provenance": "sample, certified, op_fuel_lis_19"
}
MG-AXIOM-AIRPORT-001 · ~6 weeks for one engineer · < €100/mo recurring
OurAirports nightly (~83k rows), augmented by World Bank GDP, UN DESA bilateral migrant stock (diaspora), UNWTO tourism, ACI traffic (optional), host-state AIPs (slots, curfew, customs). Canonical PK is ICAO 4-letter; IATA is secondary.
has_scheduled_service (~4.5k) · has_iata_code (~9k) · has_published_iaips_or_pans_ops_procairport_master_history. Active-flight protection: schedule blocks if a tag flips, mandatory human approval to overrule.527 aircraft · 37 operators · 431 verified MSN (82%)
Canonical PK is MSN — manufacturer's serial number — never registration, which re-allocates on sale. OpenSky Network (~580k records) plus national CAA registers (FAA, EASA, CAA UK, Transport Canada, ANAC, CASA, GCAA, ANAC PT, DGAC, LBA, ENAC, AESA, CAAS, CAAC). Optional: ch-aviation, Cirium.
aoc_holder_icao is separate from brand_iata.reg_history[] array, not just current_reg. Audit trail on lease-end return.MG-AXIOM-ATC-001 · M73–M84 · P19–P20
The trajectory itself is a canonical entity. GUFI (Globally Unique Flight Identifier, ICAO Doc 9965 §3.9.1) is assigned by the eFPL originator and shared by every message in the flight's life: eFPL, FPU, FC, PFP, TRQ, FDR, departure, arrival.
The M83 Flight Object Manager sits on the platform spine (P04). It exposes role-scoped views — operator-cost, ANSP-capacity, Network Manager, aircraft datalink — with version/diff per FF-ICE.
Operational reference · IATA WSG · EU 95/93 · ICAO Doc 9626 / 9587
Three coordination levels. The 80/20 use-it-or-lose-it rule: a series operated ≥80% grandfathers into the next equivalent season. 50% new-entrant pool per season. SCR/SAL/SHL/SMA messages are auto-generated and validated against IATA SSIM Ch. 6 schema before submission — never hand-typed.
No schedule publishes without both gates green. Gate 1: slot allocation. Gate 2: traffic rights — ASA + designation + foreign carrier permit + ownership/control thresholds.
Coordinator allocation valid · 80/20 healthy · series within capacity declaration · seasonal validity OK
ASA exists & permits route · designation valid · foreign carrier permit current · ownership/control thresholds met
Every roster, every pay statement, every currency check passes through the same evaluator. The binding rule cites itself on the line.
Hard ceilings from CAAs. Cannot exceed except via Layer 3.
Per-AOC, per-crew-group. Stored as structured data, not PDFs. May only be more restrictive than Layer 1.
Operator-approved Fatigue Risk Management System with safety case. Bounded deviations from Layer 1 limits, only with regulator approval, only for specific operations.
AUTHORISED
14 CFR §117.21 · max 10h FDP, 2 pilots, 0500 acclimOKCBA-UPA23-DUTYRIG-DAY · min 10h actual rest before reduced restOKnot invoked—line check 2026-04-12 · valid through 2026-10-12OKClass 1 valid through 2026-12-03 · >30 days marginOKDon't dilute existing safety SARPs. Don't push AXIOM-specific formats over recognised standards. Don't pick public fights with chart vendors before the renderer is at parity. Don't claim regulator-grade data until externally audited. Influence accrues from running the fleet, publishing structured data, and proving outcomes.
Every AXIOM tenant exports FIXM, AIXM 5.1, IWXXM, SWIM-compliant flight plans, dispatch releases, OFPs, fuel performance, FOQA summaries, de-identified SMS reports, turnaround events, slot utilisation and environmental telemetry.
Regulators have never had clean, comparable, structured data across operators at operations speed. AXIOM tenants supplying it become the dataset of record.
AXIOM-LITE configuration packs for sub-50-aircraft carriers in capacity-constrained CAA jurisdictions. SMS, FDM, dispatch, AIM ingest, CORSIA reporting.
Small operators run spreadsheets, paper or expensive legacy. Their CAAs lack oversight tools. AXIOM becomes operator backbone and CAA visibility tool — natural channel via ICAO No Country Left Behind.
AXIOM continuously computes operator performance against safety, fuel and environmental targets. Where evidence materially exceeds the prescriptive standard, AXIOM produces a regulator-grade equivalence dossier for filing under EASA SPA, FAA OpSpec or national equivalent.
This is how PBR finally happens at scale. Regulators wanted operator equivalence cases for 20 years. The bottleneck was data quality and presentation. AXIOM closes it.
Recommended path: Engines 1 + 3 combined; subsidise Engine 2. Engine 1 yields the data feedstock that makes Engine 3 credible. Engine 2 delivers political cover and seeds revenue.
Map subsystem development into the priorities of EU, national and international research and innovation programs. Layer with tax credits and customer prepayments. Take grant tranches, never the equity tranches.
| Programme | Band | Posture | Notes |
|---|---|---|---|
| Horizon Europe / SESAR3 JU | €1–6M / project | Non-dilutive | FF-ICE, CP1 AF6 momentum is a tailwind |
| Clean Aviation JU | €1–4M | Non-dilutive | Sustainability and emissions tooling |
| EIC Accelerator (grant tranche only) | up to €2.5M | Non-dilutive | Submit only after MVP + ≥3 paying customers · once-only · first viable cut-off 2 Sep 2026 |
| EU Innovation Fund | mid-7 to 8-fig | Non-dilutive | Decarbonisation case |
| PT2030 (PRR-successor) | €2–8M | Non-dilutive | Requires PT consortium anchor (OGMA, TAP M&E, NAV PT, ANA) |
| SIFIDE II R&D tax credit | ~30% of qual. R&D | Non-dilutive | Largest single shelter; bank line possible against receivable |
| Belgian R&D wage exemption | up to ~80% of wage tax | Non-dilutive | Triggered if ≥3 BE engineers expected |
| Irish R&D refundable credit | 25% refundable | Non-dilutive | Pre-profit-friendly |
| Israeli IIA | up to 50% | Royalty-bearing, not equity | Activated if any IL technical capability accessible |
| EDF (defence module carve-out) | 7–8-fig | Optional · FDI-screened | Segregate from civil if used |
| Customer prepayments | low-7-fig | Non-dilutive (commercial) | Attached to Phase-1 design partners |
| SIFIDE-receivable bank line | €0.5–2M bridge | Debt | Cash-flow gap protection |
Total planning cost (±35%): USD 20–36M / €16–19M gross over 4 years, fully loaded. SIFIDE II nets €10–13M.
AXIOM-CORE, IDENTITY, LOG, RULES, UI, DOC, OBSERVE, LINK framework, KMS. Reference data.
Nothing else builds honestly.DISPATCH, CREW, TECH, SMS. Connectors: weather, NOTAM, ATC slots, ACARS/datalink, FDM.
AOC-critical.COMM, CUST, OPS, CABIN. NDC/GDS, DCS, BSP/CASS, baggage, IATA SIS settlement.
Revenue + customer experience.FIN, HR, PROC, LEGAL, QA. Tax engine, IFRS 16 lease accounting, payroll connectors.
Internal back office.SEC (AVSEC), CYBER, ENV, TRAIN, ERP. SOC 2 Type II, NIS2, Annex 17/19 evidence.
Hardening + regulatory.Multi-tenant configuration tooling. Partner programme. Onboarding playbook.
Sellable asset · ≥1 third-party AOC by close.Doctrine, architecture (v0.1, v0.2, v1.0), six substrates, ATC/ANSP integration, slots and traffic rights, training, the CBA encoder, the Meridian Code of Employment, regulatory engagement, non-dilutive funding, hub-site network analysis, and competitive position.
The unifying loop Funding → development → operating scale → structured operational data + compliance evidence → regulatory credibility → working-group seats and PBR equivalence → standards evolution → policy tailwinds → higher funding success → faster maturation → more customer adoption → more regulatory influence.