PaleRavenPaleRaven
PR · Slipstream

The mission
continues.

Slipstream is a supervisory survivability layer for uncrewed aircraft. It rides above the autopilot, watching the threat picture and the aircraft's own health. When a declared trigger fires — hostile fire detected by Overwatch, GPS denied, GPS spoofed — it takes control authority, flies the response, and hands the aircraft back to its planned mission.

Fixed-wing, rotorcraft and VTOL airframes, with behaviour matched to the flight regime.

System summary
LayerSupervisory autonomy
AutopilotArduPilot · MAVLink v2
AirframesFixed-wing · rotor · VTOL
TriggersAcoustic · GNSS · declared
CommsSigned · emission-shaped
RecordingFull-mission flight data
01 · Trust

A layer,
not a replacement.

Slipstream never replaces the autopilot and never flies the whole mission. Its authority is scoped to the episode — one trigger, one response, one confirmed hand-back. Two contracts anchor everything it does.

Contract 01

Always release

Every Slipstream episode ends by handing the aircraft back to the autopilot — confirmed by telemetry, with a bounded re-command loop and an explicit alarm if confirmation fails. Slipstream never silently retains authority.

Contract 02

Pilot takeover is absolute

Any indication that a human is flying the aircraft stands Slipstream down at every layer. The supervisor observes; it does not compete with a pilot.

02 · Evasion

Break before the
next round.

An Overwatch shock detection arrives with a direction. The supervisor acquires control, flies a tight break off the threat bearing — manoeuvres matched to the airframe, from break-turns to translation patterns — and rejoins the planned track. On VTOL airframes, evasion is automatically gated to the flight regime that can fly it.

SLIPSTREAM / ACOUSTIC RESPONSE
THE MISSION CONTINUES

Detect. Respond. Rejoin.

ENVELOPE MONITORED
Acoustic event, configured response and route rejoinIllustrative aircraft movement. In the acoustic scenario, a round passes beside the aircraft without hitting it. An event interrupts nominal flight, Slipstream briefly takes control, then returns it to the autopilot. Geometry and timing are not to scale.MISSION ROUTEPASSING ROUNDSHOCK DETECTEDRESPONSE ACTIVEHAND-BACKPLAN VIEW / SCHEMATICPLANNEDFLOWNN
  1. 01On mission
  2. 02Acoustic event
  3. 03Response active
  4. 04Rejoining route
  5. 05Mission resumed
BOUNDED RESPONSE · CONFIRMED HAND-BACKIllustrative route; geometry and timing are not to scale.

This animation illustrates a successful example sequence, not a live system or a guarantee of outcome. The autopilot controls nominal flight. After a declared trigger, Slipstream takes control for a bounded response and returns control once recovery conditions are verified. Pilot takeover always takes priority.

03 · GNSS

Jammed. Spoofed.
Still flying.

Slipstream watches GPS and navigation-filter health continuously. On jamming, an opt-in response holds a safe profile until the signal returns — then verifies the recovered position against the planned route before handing back. On spoofing, multiple independent detectors must concur; recovery navigation is dead-reckoned from a pre-detection anchor, because spoofed telemetry is exactly what cannot be trusted. Spoof detection is validated against real-world battlefield recordings — every confirmed event fired, zero false positives on clean sessions.

SLIPSTREAM / GNSS RESPONSE
THE MISSION CONTINUES

Detect. Verify. Return control.

ENVELOPE MONITORED
GNSS response and return of controlIllustrative aircraft movement. In the acoustic scenario, a round passes beside the aircraft without hitting it. An event interrupts nominal flight, Slipstream briefly takes control, then returns it to the autopilot. Geometry and timing are not to scale.UNTRUSTED GNSSMISSION ROUTECONCURRENCECONFIGURED RESPONSEHAND-BACKPROFILE VIEW / SCHEMATICPLANNEDFLOWN
  1. 01Navigation trusted
  2. 02Detectors concur
  3. 03Response active
  4. 04Recovery verified
  5. 05Control returned
BOUNDED RESPONSE · CONFIRMED HAND-BACKExample response profile; behaviour is operator-configured.

This animation illustrates a successful example sequence, not a live system or a guarantee of outcome. The autopilot controls nominal flight. After a declared trigger, Slipstream takes control for a bounded response and returns control once recovery conditions are verified. Pilot takeover always takes priority.

04 · Envelope

Bounded by design.

Every manoeuvre runs inside a continuously supervised flight envelope, checked twenty times a second. On any breach, the supervisor releases and the autopilot takes over — terminal recovery always belongs to the autopilot.

  • ·Attitude and bank limits
  • ·Altitude floor and ceiling
  • ·Airspeed and stall margin
  • ·Battery and link health
  • ·Regime-aware VTOL gating
  • ·Release-on-breach, always
Linked capability · Overwatch

Slipstream's ears. Overwatch detects the Mach shock of incoming fire and hears helicopters and drones coming — passively, with no emissions — and hands Slipstream the trigger.

See Overwatch →
Talk to usTechnical briefing · partner access