Black Path Labs
Menu

Black Path Core

Deliver digital services with control over access, privacy, and payment.

Black Path Core connects the people, applications and AI agents that use a digital service to the providers that deliver it.

Every connection is an authorized, metered session. Core decides who gets in, measures what they use, and carries the payment between the parties.

Use it for paid live events, video libraries, confidential document exchange, private AI inference, paid data access and phone services.

A cream patch bay on warm paper, with one blue cord plugged into a jack.

How Core works

Black Path Labs platform architecture in five layers. Layer 1, participants: people, apps, AI agents and business systems. Layer 2, builder surface: Builder Kit, Tool Bridge, Event Hooks, Operator Console and Publisher Kit. Layer 3, edge: Edge Portal, Identity Mesh and Policy Gate. Layer 4, Black Path Core, in four groups: discover (Capability Atlas, Intent Compass, Fair Rank), connect (Session Fabric, Live Switch, Relay Grid), trust (Trust Vault, Credential Mint, Revoke Switch) and account (Usage Meter, Receipt Ledger, Payout Router, Signal Watch). Layer 5, partner domains: Domain Bridge and Partner Networks. Beside the layers sits your sovereign zone, with a local access gate, tools and source systems, local credentials and a customer-held key. Business systems reach it over a direct encrypted path, and the Policy Gate grants it approved access.
Requests from people, apps, AI agents and business systems come in through the builder tools and one checked front door. Core finds the right service, runs the session, checks every credential and keeps a receipt of usage. Your sovereign zone keeps your data, tools and key on your side. Partner networks join by agreement. Reference architecture; internals abstracted. Open the diagram at full size

What Core does

  • Access

    Core checks every party before a session opens. A forged, expired or missing credential is refused. Revoking access ends a call or a file transfer already in progress.

  • Payment

    The buyer sees the price and accepts it before anything connects. The buyer can set a spend ceiling. Core refuses use beyond it. Core meters the session and carries the payment from buyer to provider. Each session ends with a signed receipt that either side can check without calling us.

  • Privacy

    Calls are end-to-end encrypted, peer to peer over WebRTC with DTLS-SRTP. Files are encrypted on the sender’s device before upload. Our servers do not hold the key. Usage records say who connected, to what, when and how much. They do not hold the conversation, the file or the prompt.

  • Telephony

    Core’s phone stack speaks SIP and interconnects with internet telephony service providers. Anything that runs over SIP can connect.

  • Video

    Core streams video to the viewers you authorize.

  • Inference

    We connect capabilities, and we run confidential inference inside our own trusted-computing zone.

  • For engineers

    Real-time sessions use SIP over secure WebSockets. Permissions and receipts are Ed25519-signed and can be checked against our published keys.

Where it runs

We operate the broker. Your endpoint can be self-hosted, so the capabilities you publish stay inside your zone.

When work has to happen on your side or in your jurisdiction, an outpost we run there does it on your behalf.

Work with us

Black Path Labs is also a consulting team. We take you from an idea to a running service.

  • Build with us

    We design the service with you and build it on Core.

  • Integrate

    We connect Core to the systems you already run: your phones, your storage, your data and your apps.

  • Run it

    We operate it for you, or hand it to your team.

We also design, build and run AI systems that do not need Core.

Our services

We are looking for first pilot partners.

Our team

We have built and run the systems this work depends on. Every discipline below is in-house, not contracted out.

  • Engineering

    Over two decades writing code for critical infrastructure.

    Carrier networks, a provincial 4G LTE launch, E9-1-1 (emergency calling), number portability, wireless operations, and SCADA. Code that has to stay up, written by people who were on call when it didn’t.

  • Cybersecurity

    Security is part of the design from the first line of code.

    The team has held security leadership at the chief information security officer (CISO) level, and has run SOC 2 readiness, ISO 27001 (the international security standard), and PIPEDA (Canada’s federal privacy law) compliance programs in financial services, agribusiness, and manufacturing.

  • Law

    A trained lawyer reviews our legal products where the law applies.

    Those products, such as IntakeLaw, are shaped by someone who knows how a law practice runs.

  • Data

    Licensing data needs people who have sold it.

    People on this team have made a living licensing and selling data. We know how data is sourced and priced, and what a buyer can and cannot do with it.

Let us earn your trust.

Tell us what you’re working on. We’ll tell you what we can simplify, and prove it on a first project.

Talk to us