Controlled Digital Engineering Program
Persistent clean energy from space, delivered through controlled orbital infrastructure.
Shine Harvest is a space-based solar power (SBSP) system architecture designed to collect solar energy in orbit, transmit it as a directed beam to terrestrial receiving stations, and deliver electricity to energy markets through secure, evidence-governed coordination.
This GitHub organization is the private digital engineering backbone of the program. It is not a public showcase. It follows Tier-1 aerospace configuration-control practices: baselined requirements, controlled interfaces, traceable verification evidence, and explicit state semantics across every subsystem boundary.
The architecture distinguishes five layers of physical truth and three cross-cutting governance functions, each managed in a dedicated repository with explicit ownership, interface contracts, and verification linkage.
Design principle: Each layer publishes its own truth. Downstream layers consume that truth — they do not invent it or silently widen its meaning.
These repositories define meaning, control, evidence, and trust before any operational system is built.
| Repository | Domain | Role | Criticality |
|---|---|---|---|
sh-architecture |
Systems Engineering | Mission architecture, ConOps, system requirements, state dictionary, ICDs, trade studies, risk register, roadmap, program handbook | Critical |
sh-simulations |
Modeling & Analysis | Orbital mechanics, transmission efficiency, reliability, economics scenario models, controlled evidence output | Critical |
sh-verification |
V&V | Requirements traceability matrix, cross-repo verification cases (XRV), evidence index, milestone gate assessments, review records | Critical |
sh-security |
Security Assurance | System threat model, trust boundary map, control integrity rules, hardening baseline, access/incident/secrets policies | Critical |
These repositories own the upstream physical state of the system: what power is generated and what platform context surrounds it.
| Repository | Domain | Role | Criticality |
|---|---|---|---|
sh-solar-generation |
Power Production | Solar collection architecture, 9-state generation model, 5-category output baseline, sunlight/eclipse behavior, degradation logic | High |
sh-orbital-platform |
Spacecraft Operations | Platform state model, subsystem health aggregation, energy availability computation, constellation coordination | High |
These repositories implement transmission, reception, and coordination — all consuming upstream physical truth.
| Repository | Domain | Role | Criticality |
|---|---|---|---|
sh-beam-control |
Transmission & Safety | Phased-array steering, 8-state control model, safety interlock hierarchy, mode selection, beam authorization logic | Safety-Critical |
sh-ground-segment |
Reception & Grid | 7-state site readiness model, telemetry baseline, operator workflows, grid integration interface | Critical |
sh-autonomy |
Coordination & Scheduling | 7-state coordination model, anomaly handling policy, scheduling baseline, cross-system state synchronization | High |
| Repository | Domain | Role | Criticality |
|---|---|---|---|
sh-market-layer |
Energy Markets | 8-state dispatch model, delivery accounting, settlement baseline, demand signaling interface | High |
The program maintains 35 controlled interfaces (SH-IF-001 through SH-IF-035) across 5 interface types. The full matrix is governed in sh-architecture/icd/cross-repo-interface-dependency-matrix-v0.2.md.
Interface priority after the solar-generation split:
| Priority | Interfaces | Path | Rationale |
|---|---|---|---|
| P1 | SH-IF-008, 009, 020, 021 | BMC ↔ GND + SEC | Primary safety and operational delivery path |
| P2 | SH-IF-003, 006, 011, 012 | SOL → ORB → AUT/BMC | Upstream physical-truth chain: generation drives platform, which drives beam and autonomy |
| P3 | SH-IF-014, 015, 016, 019 | SOL/ORB/BMC → SIM → VNV | Architecture trade questions become reviewed evidence |
| P4 | SH-IF-025, 026, 027, 028, 029 | Operations → MKT | Market logic remains downstream of real system truth |
Non-negotiable rules:
- A producer repo defines what it publishes. Consumer repos must not silently widen that meaning.
- If SOL says output is eclipsed, degraded, or constrained — downstream repos must not treat it as normal.
- If GND is not ready, BMC and MKT must not behave as though valid delivery exists.
- AUT recommendations do not override safety, authorization, or trust-boundary baselines.
| Milestone | Tag | Status | Gate Owner |
|---|---|---|---|
| Org Baseline | ORG-BASELINE-v1 |
PASS | exec-admin |
| System Requirements Review | SRR-v1 |
In Progress | systems-architecture |
| Architecture Baseline | ARCH-BASELINE-v1 |
In Progress | systems-architecture |
| Simulation Baseline | SIM-BASELINE-v1 |
In Progress | simulation-modeling |
| Verification Baseline | VNV-BASELINE-v1 |
In Progress | verification-vnv |
| Security Baseline | SEC-BASELINE-v1 |
In Progress | security-assurance |
| Operations Baseline | OPS-BASELINE-v1 |
Planned | systems-architecture |
| Demo Readiness | DEMO-READY-v1 |
Conditional Pass | verification-vnv |
| Pilot Readiness | PILOT-READY-v1 |
Not Started | exec-admin |
Demo Readiness — Conditional Pass rationale: 22 requirements defined, all critical ICDs drafted, XRV-001 through XRV-007 closed with actions, risk register and threat model in place. Open items: SH-SIM-001 results pending, 9 XRV actions unresolved, branch protection awaiting Team plan upgrade.
Phase A Phase B Phase C Phase D
Foundations Physical Truth Operations Value Realization
───────────────── ───────────────── ───────────────── ─────────────────
ARCH SIM SOL ORB BMC GND AUT MKT
VNV SEC
───────────────── ───────────────── ───────────────── ─────────────────
[ CURRENT ] [ CURRENT ] [ NEXT ] [ PLANNED ]
Phase exit criteria are enforced. No repo may advance to a later phase until its dependencies in the current phase are baselined. This sequencing is non-negotiable.
The system follows a strict top-down state flow. Downstream layers interpret upstream truth — they do not contradict it.
Layer 0 Generation Truth SOL Generation state, output confidence, eclipse
│
Layer 1 Platform Operations ORB Platform health, availability (consuming SOL)
│
Layer 2 Transmission Control BMC Beam state, safety interlocks, mode
│
Layer 3 Reception GND Site readiness, telemetry, grid
│
Layer 4 Coordination AUT Scheduling, anomaly response, dispatch
│
Layer 5 Value MKT Allocation, settlement, delivery evidence
│
Layer 6 Assurance SEC + VNV Trust, evidence, readiness
All state terms are defined in sh-architecture/docs/state-dictionary-v0.1.md. When Layer 2 says the beam is DEGRADED, that word has a specific, controlled meaning — and it is the same meaning for every layer that reads it.
| Metric | Value |
|---|---|
| System requirements defined | 22 |
| Cross-repo verification cases (XRV) | 18 (XRV-001 through XRV-015, XRV-SOL-001 through XRV-SOL-003) |
| XRV cases executed | 7 (XRV-001 through XRV-007, all Closed with Actions) |
| XRV cases planned | 11 |
| Controlled interfaces | 35 (SH-IF-001 through SH-IF-035) |
| ICDs drafted | 7 |
| ICDs in backlog | 3 (SH-ICD-SOL-ORB/BMC/AUT-001) |
| Risks registered | 8 |
| Simulation scenarios defined | 5 (SH-SIM-001 through SH-SIM-005) |
| Open XRV actions | 9 |
| Principle | Meaning |
|---|---|
| Private by default | Public by exception. Release-controlled always. |
| Architecture before code | Controlled baselines before implementation sprawl. |
| Evidence before claims | No milestone language without traceable artifacts. |
| Safety before throughput | Controlled delivery before optimization. |
| Security from day one | Not a compliance afterthought. Threat models in Phase A. |
| Generation truth is explicit | No downstream claim exceeds what SOL can justify. |
| Interfaces before internals | Cross-repo contracts before subsystem logic. |
| Team | Domain | Primary Repo |
|---|---|---|
exec-admin |
Program administration | All (admin) |
systems-architecture |
Architecture, requirements, ICDs | sh-architecture |
solar-generation |
Collection, generation state, output | sh-solar-generation |
orbital-platform |
Spacecraft, constellation, availability | sh-orbital-platform |
beam-control |
Transmission, steering, safety | sh-beam-control |
ground-segment |
Receiving sites, telemetry, grid | sh-ground-segment |
autonomy-ai |
Coordination, anomaly detection, scheduling | sh-autonomy |
market-systems |
Dispatch, accounting, settlement | sh-market-layer |
simulation-modeling |
Scenarios, models, evidence generation | sh-simulations |
verification-vnv |
Traceability, evidence, readiness gates | sh-verification |
security-assurance |
Threat models, trust, hardening | sh-security |
| Team | Access Model |
|---|---|
external-auditors |
Read-only on governance repos (ARCH, SIM, VNV, SEC, SOL) |
vendors-partners |
Per-repo scoped access, granted per engagement |
| Document | Location | Version |
|---|---|---|
| Program Handbook | sh-architecture/docs/program-handbook-v0.2.md |
0.2 |
| State Dictionary | sh-architecture/docs/state-dictionary-v0.1.md |
0.2 |
| Interface Dependency Matrix | sh-architecture/icd/cross-repo-interface-dependency-matrix-v0.2.md |
0.2 |
| System Requirements | sh-architecture/requirements/system-requirements-v0.1.md |
0.1 |
| Concept of Operations | sh-architecture/conops/conops-v0.1.md |
0.1 |
| Risk Register | sh-architecture/risk/risk-register-v0.1.md |
0.1 |
| Document | Location | Version |
|---|---|---|
| Competitive Landscape | sh-architecture/docs/competitive-landscape-v0.1.md |
0.1 |
| Capability Stack | sh-architecture/docs/capability-stack-v0.1.md |
0.1 |
| Strategy Reset | sh-architecture/docs/strategy-reset-v0.1.md |
0.1 |
| Regional Watchlist | sh-architecture/docs/regional-watchlist-v0.1.md |
0.1 |
| Master Document Registry | sh-architecture/docs/master-document-registry-v0.1.md |
0.1 |
| Design Process | sh-architecture/docs/design-process-v0.1.md |
0.1 |
| Updated Roadmap | sh-architecture/roadmap/roadmap-v0.2.md |
0.2 |
| Document | Location | Version |
|---|---|---|
| Q-PAC Architecture | sh-beam-control/docs/q-pac-architecture-v0.1.md |
0.1 |
| AMPB Architecture | sh-beam-control/docs/ampb-architecture-v0.1.md |
0.1 |
| ANASO Architecture | sh-autonomy/docs/anaso-architecture-v0.1.md |
0.1 |
| DSA Architecture | sh-orbital-platform/docs/dsa-architecture-v0.1.md |
0.1 |
| BC-DEM Architecture | sh-market-layer/docs/bc-dem-architecture-v0.1.md |
0.1 |
| QS-C2 Architecture | sh-security/docs/qs-c2-architecture-v0.1.md |
0.1 |
| PV Specifications | sh-solar-generation/docs/pv-specifications-v0.1.md |
0.1 |
| Document | Location | Version |
|---|---|---|
| Verification Plan | sh-verification/verification-plans/vnv-plan-v0.1.md |
0.1 |
| Demo Readiness Gate | sh-verification/milestone-gates/demo-readiness-gate-v0.3.md |
0.3 |
| System Threat Model | sh-security/threat-models/system-threat-model-v0.1.md |
0.1 |
| Generation State Model | sh-solar-generation/docs/generation-state-model-v0.1.md |
0.1 |
| Simulation Parameters | sh-simulations/docs/simulation-parameters-v0.1.md |
0.1 |
| Ground Station Design | sh-ground-segment/docs/ground-station-design-v0.1.md |
0.1 |