BIODEFENSE OS

BIODEFENSE OS is an AI-native national biosurveillance and biosecurity command layer.

Problem This Solves

Biological threats are hard to monitor because signals are fragmented across epidemiology feeds, lab activity, synthesis/procurement indicators, and operational incident channels. Teams often react late, without a unified real-time picture or a trustworthy workflow for supervised AI actions.

BIODEFENSE OS closes that gap by continuously detecting, correlating, simulating, escalating, and supervising response actions in one command system.

Positioning: Wiz for Biology

What Wiz did for cloud security visibility and risk context, BIODEFENSE OS does for biology:

• Comprehensive visibility into biosurveillance signals, threats, incidents, and command events
• Context-rich risk prioritization with graph-linked evidence and simulation outputs
• Real-time operational monitoring with supervised autonomous agents and safety gates

Core Capabilities

• Always-on command runtime with scheduled worker loops (worker + worker-beat)
• Realtime websocket event stream for live operational updates
• Dedicated command cockpit and AI-agent Kanban supervision board
• Comprehensive biosurveillance workspace with:
  • Live signal/event timeline
  • Threat and incident context panels
  • Tenant-scoped AI chat with grounded citations
• Human-in-the-loop approvals and immutable command audit trail

Architecture

• Web: Next.js + TypeScript (apps/web)
• API: FastAPI + SQLAlchemy (apps/api)
• Workers: Celery + Redis (apps/worker)
• Database: PostgreSQL + pgvector
• Realtime: FastAPI WebSocket route + command event broadcaster
• Deployment: Docker Compose (local) + Kubernetes manifests (infra/k8s)

Monorepo Layout

• apps/web - command UX, realtime biosurveillance workspace, AI supervision board
• apps/api - command-plane APIs, typed data APIs, AI orchestration, realtime routes
• apps/worker - continuous loops and autonomous state transitions
• db - schema migrations and seed support
• infra - Docker Compose and Kubernetes deployment manifests
• docs - product, security, and deployment documentation
• tests - backend and e2e verification suites

Quickstart (Local)

cp .env.example .env
docker compose --env-file ".env" -f infra/docker-compose.yml up -d --build

Access

• Web: http://localhost:${WEB_PORT} (default local mapping used in this repo: http://localhost:13000)
• API: http://localhost:${APP_PORT} (default local mapping used in this repo: http://localhost:18000)
• OpenAPI: http://localhost:${APP_PORT}/docs

Runtime Verification

docker compose --env-file ".env" -f infra/docker-compose.yml ps
curl http://localhost:${APP_PORT}/system-health

Realtime and Biosurveillance Checks

• Realtime socket: ws://localhost:${APP_PORT}/realtime/ws?token=<jwt>
• Biosurveillance workspace: http://localhost:${WEB_PORT}/biosurveillance
• AI agents board: http://localhost:${WEB_PORT}/ai-agents

Security and Governance

• Tenant isolation on operational data paths
• Role-gated high-consequence actions (SuperAdmin/TenantAdmin/NationalCommander)
• Safety-aware AI orchestration and supervised execution controls
• Command audit chain for reviewability and accountability