// Decisive LLC · Supported DDF & Alliance Distribution

The BedrockBeneath the Mission.

Substrate is Decisive LLC's hardened, supported distribution of DDF and Alliance — the open-source, standards-based data integration and ISR catalog framework — backed by expert engineering, accreditation support, and long-term sustainment. The open data layer, mission-ready. No vendor lock-in. No abandonment risk.

What's in the Box Talk to Engineering
0
Vendor Lock-In
IL2–6
Impact Levels
FIPS+
Capable Crypto
LGPL
Open-Source Core
DDFAllianceNITF / STANAG 4545STANAG 4609 FMVKLV / MISB 0601OGC CSW / WFS / WCSApache SolrXACML 3.0Federated CatalogMOSA CompliantCloud to EdgeExpert SustainmentZero Lock-In DDFAllianceNITF / STANAG 4545STANAG 4609 FMVKLV / MISB 0601OGC CSW / WFS / WCSApache SolrXACML 3.0Federated CatalogMOSA CompliantCloud to EdgeExpert SustainmentZero Lock-In

Free Software
Isn't Free.

DDF and Alliance are battle-tested, standards-based, and open source. But "free to download" is not "ready to deploy." Running this stack in a classified production environment is a specialist discipline most programs don't staff for.

  • CVE patching, dependency upgrades, and hardening on an OSGi / Karaf stack demand engineers who know the framework internals — not a generalist DevOps team.
  • An ATO doesn't grant itself. Mapping the framework to RMF controls, IL boundaries, and FIPS-capable crypto is months of undocumented, high-risk work.
  • Community open source ships no SLA, no roadmap commitment, and nobody to call at 0200 when ingest stops in theater.
  • Building adapters for your formats and source systems means understanding the Catalog API, transformers, and federation model — a steep, specialized learning curve.
  • The "safe" alternative — a proprietary prime ingest layer — trades the lock-in you were avoiding for a worse one, at many times the cost.
MISSION APPS / ANALYTICS FUSION · TAK · C2 CONSUMERS INTEGRATION LAYER ⚠ UNSUPPORTED · UNHARDENED COMMUNITY FOSS FOUNDATION

// What's in the Distribution

Open Core.
Solid Foundation.

Substrate packages the full DDF and Alliance capability set — the catalog, federation, ingest, and security frameworks — into a hardened, signed, version-stable distribution. The same open standards underneath. None of the operational risk on top.

MISSION APPS / ANALYTICS FUSION · TAK · C2 CONSUMERS CATALOG · FEDERATION · INGEST SUBSTRATE SUPPORTED DDF + ALLIANCE
CAT

Catalog Framework

The core. A metacard-based store, query, and transform engine backed by an Apache Solr provider — with WKT spatial indexing, full-text, XPath, and XML search. Abstracts business logic from the underlying data structures so new sources integrate fast.

FED

Federation

Query the local catalog and remote sources in a single fan-out via OGC CSW, WFS, and WCS federated services. An ESB transforms between query standards so disparate systems interoperate.

ING

Ingest & Transformers

Alliance adds the DoD/IC/NATO payloads: NITF/NSIF 2.1 imagery, STANAG 4609 full-motion video with KLV/MISB 0601 extraction, and MGMP metadata transformation — each parsed into data-rich metacards for discovery and retrieval.

SEC

Security Framework

Authentication, authorization, and auditing built in. Web SSO without modifying the application, an extensible XACML 3.0 policy decision point, WS-Security / WS-Trust, and multi-realm login. A framework to extend, not a black box to fight.

Speaks the
Standards.

Substrate inherits DDF and Alliance's commitment to open standards — the same wire formats your collection systems, coalition partners, and ISR feeds already produce. No proprietary dialect in the middle.

NITF / NSIF
STANAG 4545
Ingest and parse NITF 2.1 imagery, generate thumbnails, and build data-rich metacards for discovery and retrieval.
Full-Motion Video
STANAG 4609 · MISB 0601
Parse MPEG-2 transport streams and extract KLV metadata from the UAS Datalink Local Set for metacard creation.
MGMP v2.0
Metadata Transformation
Ingest MGMP records and extract metadata into the canonical catalog model for cross-source correlation.
OGC Services
CSW · WFS · WCS · KML
Federated Open Geospatial Consortium services for catalog, feature, coverage, and geospatial visualization interoperability.
Apache Solr
Search & Index
WKT spatial awareness, full-text, XPath, and XML indexing across the local and federated catalog.
XACML 3.0
Policy / Authorization
Extensible policy decision point for fine-grained, attribute-based authorization decisions across the platform.
+ Custom Adapters
Decisive-Built
Proprietary, legacy, or emerging formats integrated against the open Catalog API and transformer model — shipped independently of the core.

// Data Pipeline

From Ingest
to Federated Delivery.

Every record traverses a deterministic path through the framework — from raw wire format to policy-enforced, federated delivery — with auditing at each stage.

01 // INGEST
Source Adapter
A format-specific input transformer parses raw NITF, FMV, MGMP, or custom payloads and validates them.
02 // CATALOG
Metacard + Solr
Input is normalized to a metacard and indexed in Solr — spatial (WKT), full-text, and XML — for discovery.
03 // FEDERATE
Fan-Out Query
Queries reach the local catalog and remote OGC sources at once; the ESB reconciles query standards.
04 // ENFORCE
XACML PDP
Classification and access policy is evaluated at the policy decision point — with a full audit record.
05 // DELIVER
Output Transformer
Results are transformed to the consumer's requested format and delivered via the appropriate endpoint.

// Deployment Architecture

Cloud to Edge.
One Distribution.

The same modular framework deploys to fit the tier. Karaf's feature model means you run only the capabilities you need — a full federation node in the cloud, a lean catalog at the forward edge. Substrate's signed images keep every tier consistent.

Cloud / Enterprise
Full federation Multi-source catalog Elastic scale IL2–IL5
Tactical Cloud / Data Center
Full pipeline Hardened images OGC federation IL4–IL6
Forward Base
Local catalog Intermittent sync Air-gap capable IL5–IL6
Far Edge / Dismounted
Lean feature set Store-and-forward Disconnected ops IL6

The Software Is Free.
The Expertise Isn't.

Substrate is the distribution. Decisive is the team behind it. We've lived in this codebase — and we wrap it in the engineering, accreditation, and sustainment that turn open source into an operational capability.

// 01 — Distribution

Hardened Builds & LTS

Signed, FIPS-capable, CVE-patched container images with security backports and version stability. You upgrade on a schedule that fits the mission — not whenever upstream cuts a release.

// 02 — Accreditation

RMF & ATO Support

Control mapping, IL boundary design, FIPS-capable crypto configuration, and ATO package artifacts. We've walked the accreditation path before and bring the documentation to shorten yours.

// 03 — Integration

Custom Adapters

Bespoke sources, transformers, and endpoints for your formats and source systems — built against the open Catalog API and delivered independently of the platform core.

// 04 — Sustainment

Deployment & Mission Support

Cloud-to-edge installation, upgrades, monitoring, and responsive engineering support. A real team to call when ingest stops — not a community forum thread.

// 05 — Enablement

Training & Knowledge Transfer

Operator and developer training, runbooks, and architecture enablement so your team can extend and operate the platform with confidence over its full lifecycle.

// 06 — Strategy

Architecture Advisory

Where Substrate fits alongside Keystone, Continuum, and your existing stack. Honest guidance on build-vs-adopt, federation topology, and a path that avoids lock-in.

// Security Architecture

Architected for
Every Level.

DDF and Alliance ship a real security framework — not a bolt-on. Substrate configures and hardens it per Impact Level, mapping each tier to a verified container configuration, cryptographic stack, and policy profile.

IL2
Impact Level
Controlled Unclassified
TLS 1.3 SSO / OIDC Audit Log
IL4
Impact Level
Controlled / Sensitive
FIPS 140-2 CAC / PKI Hardened Image
IL5
Impact Level
CUI / National Security
XACML 3.0 PDP WS-Security Signed SBOM
IL6
Impact Level
SECRET
Multi-Realm Auth Air-Gap Ready Boundary Enforce
AUDIT
Every Query
Authentication, authorization, and access decisions logged at the policy decision point — traceable end to end.

Open Source.
Adult Supervision.

Zero Vendor Lock-In

The core is LGPL open source built on open standards. You are never trapped. If Decisive ever stops earning your business, the framework, your data, and your adapters are yours to keep running. That's the whole point.

Supported, Not Abandoned

Community FOSS has no SLA and no roadmap commitment. Substrate adds the patching, backports, version stability, and responsive engineering that a production mission system requires — and a team accountable for it.

Proven Heritage

DDF was donated to the open-source Codice Foundation from a defense prime and has been hardened in the open for over a decade. Alliance extends it with DoD/IC and NATO standards. This isn't a startup's first commit.

NATO & Coalition Interop

NITF/NSIF imagery, STANAG 4609 FMV, and OGC services come standard. Federate with coalition systems and existing ISR libraries without writing a custom translator for every partner.

Cloud to Edge, One Image

Karaf's modular feature model lets the same signed distribution scale from an enterprise federation node to a lean disconnected edge catalog — no bespoke edge build, no version drift between tiers.

Engineers Who Know It Cold

The differentiator isn't the download — it's the team. Decisive operates inside this codebase, builds adapters against its APIs, and shortens your accreditation path because we've already walked it.

Build on Bedrock.

Whether you're standing up DDF or Alliance for the first time, inheriting an unsupported deployment, or weighing it against a proprietary ingest layer — let's talk about what supported looks like.

General Inquiries info@decisivellc.us
Company Decisive LLC
Website decisivellc.us
Talk to Engineering →