One Security Platform for Cameras, Doors, Alarms, and Sensors

Every Sentinel alarm partition tracks:

• Identity & status — a name (e.g. "Building A – Floors 1-3"), current status, and arm mode (away / stay / night / disarmed)
• Zone & sensor grouping — the security zones and individual door / window / motion sensors assigned to the partition
• Timing — entry delay (time to disarm after entering), exit delay (time to exit after arming), and siren duration, all configurable per partition
• Chime mode — an audible beep on sensor trip, with quiet hours to suppress it overnight
• Auto-arming — a schedule that arms and disarms automatically on the days and times you choose

Arm modes: away (full perimeter + interior), stay (perimeter only, interior motion bypassed), night (perimeter + selected interior sensors), disarmed. Partition status also tracks the arming / entry-delay countdown, active alarm, and tamper (cover removed or wiring fault) states.

Sensor types: door/window contact, motion (PIR / dual-tech), glass break, smoke, carbon monoxide, flood, temperature, vibration, photoelectric beam, and pressure mat.

What you get:

``` Traditional DSC PowerSeries: → Proprietary keypad (~$200) → Monthly monitoring: $30-50/month → No remote control → No video integration

Sentinel Alarm Panel (via Bridge): → Works with existing DSC/Honeywell panels → OR replaces them entirely (IP-based) → $0 additional hardware (integrates via Bridge serial) → Remote arm/disarm from mobile → Central station dispatch → Triggers camera recording on alarm → Cross-module: dispatches helpdesk ticket ```

The detection space Sentinel covers:

Detection types: person, vehicle, weapon and package detection (Enterprise), animal detection, face detection (Enterprise), and license plate recognition (Enterprise).

Anomaly types: behavior (loitering, running, wrong-direction), occupancy (zone under- or over-capacity), motion pattern (unusual movement paths), access pattern (unusual badge activity), and time anomalies (activity outside normal hours).

Threat levels: low, guarded, elevated, high, severe. Sentinel aggregates multiple signals into a single threat level per event, with every contributing factor surfaced to the operator in plain language (e.g. "person detected after hours," "badge denied") rather than a raw score.

Anomaly results compare live activity against a learned per-zone baseline — expected value vs. actual, how far it deviated, and which metric was affected (average occupancy, access attempts, etc.) — and carry a status you can acknowledge, investigate, or resolve.

Watchlists let you flag a person or vehicle — by reference photo or license plate — for continuous matching against live camera feeds, useful for tracking a terminated employee or a vehicle that shouldn't be back on site. Matches are reviewer-confirmed (true/false positive) to keep the model improving over time.

Behavior analysis examples:

``` Loitering Detection: → Person lingers in a zone past a configurable dwell-time threshold without moving on → Severity: medium → high, escalating the longer it continues → Action: Create AI threat log, notify operators

Tailgating Detection: → One badge swipe, two people entering → Triggered by: door held open, or motion after door closes → Severity: high (security policy violation) → Action: Alert, create incident, log access violation

Wrong Direction: → Person walking against normal traffic flow → Emergency exit triggered at wrong time → Severity: critical → Action: Immediate alert, lock zone

Occupancy Anomaly: → Zone normally has 10-15 people (baseline) → Suddenly 0 people (overnight) → fire evacuation? → Deviation: 100% below baseline → Severity: high → Action: Alert facilities manager ```

Bridge brings hardware-side capabilities to Sentinel. When Bridge discovers a device on your network, it captures the device name, manufacturer, model, and firmware version; the IP address and protocol (ONVIF, RTSP, UPnP, or USB); every available stream with its quality profile, resolution, frame rate, and codec; PTZ capabilities (continuous pan/tilt/zoom, absolute or relative positioning, and number of stored presets); and whether the camera supports audio.

You can run a standard ONVIF scan, a full network sweep, or a targeted RTSP probe — scoped to a subnet range, with a configurable timeout and support for custom RTSP paths on cameras that don't announce themselves cleanly.

What Bridge enables:

``` Without Bridge (browser-only): → ONVIF camera discovery on local subnet → View RTSP streams via HLS transcoding → Basic event detection → Access control commands

With Bridge ($0 — included): → GPU-accelerated AI detection (NVIDIA CUDA) → Face recognition, license plate recognition → Local NVR recording (FFmpeg pipeline → local disk) → Serial alarm panel (DSC PowerSeries, Honeywell Vista) → Wiegand/RFID reader (direct USB, no controller) → Multi-camera sync for playback → Hardware PTZ joystick support

Bridge connection: → Outbound WebSocket only (no inbound ports) → Auto-discovery on local network → Scope-based API key auth → $0 API fees (local network) ```

What an incident record looks like:

Every incident carries a title (e.g. "Unauthorized access attempt — Loading Dock"), a severity (low / medium / high / critical), and a status (new / in progress / resolved / closed).

Evidence chain (immutable — once attached, nothing can be edited or deleted):

• Video clips, linked to the exact recording and time range, stamped with who attached them and when
• Snapshots captured from the live feed
• Notes from guards and officers on scene
• Linked access-log entries (credential, door, and result)

Timeline (built automatically from the evidence as it arrives):

22:14:00 — Motion detected, loading dock 22:14:03 — AI flags a person in frame 22:14:05 — Badge denied at the loading dock door 22:14:12 — Tailgating pattern detected 22:15:00 — Incident created automatically 22:15:30 — Assigned to the on-shift guard 22:16:00 — Loading dock zone locked down

Every incident can automatically open a linked Helpdesk ticket.

Cross-module synergy:

Alarm fires at 10:14 PM ↓ Sentinel creates Incident (immutable) ↓ Cross-module events: → helpdesk: Creates high-priority ticket, assigns to on-call → fleet: Broadcasts "facility_lockdown" alert to drivers → smart-spaces: Elevator control → restricted floor access → notifications: Push + SMS to security director → collab: Creates #security-incident channel, invites responders ↓ Guards join War Room: → Live camera feeds (loading dock, exits) → Playback timeline scrubber → Attach evidence clips → Real-time chat with responders ↓ Resolution: → Suspect apprehended by police → Incident closed with full evidence export → Compliance audit trail: 7 years retention

Each automation rule combines:

• A trigger — an occupancy floor and/or ceiling for the zone, optionally required to hold steady for a set duration before firing
• One or more actions — move a camera to a PTZ preset, send a notification, lock or unlock specific access points, start or stop recording on specific devices, or arm/disarm an alarm partition
• A cooldown — the minimum time between repeat firings, so one sustained condition doesn't spam actions
• An optional auto-revert — automatically undoes the action after a delay (hysteresis protection), so a zone never gets stuck in a triggered state
• A priority — higher-priority rules are evaluated first when more than one rule could fire

Example rules:

``` Rule 1: "Lobby After-Hours Camera Preset" trigger: occupancyMax = 0, sustainedForSeconds = 300 (5 min no one) actions: Set PTZ to wide overview preset cooldown: 600 (10 min)

Rule 2: "Parking Garage Occupancy Alert" trigger: occupancyMax = 200 (over capacity) actions: Notify security, log event cooldown: 60

Rule 3: "Server Room Temperature Alert" trigger: temperature > 75°F actions: Alert facilities, trigger HVAC override, log event autoRevert: delaySeconds = 300 (revert after 5 min) cooldown: 300

Rule 4: "Loading Dock — After Hours Auto-Lock" trigger: time = 18:00 (6 PM) actions: Lock all loading dock doors cooldown: 0 autoRevert: enabled, delaySeconds = 0 (no revert — manual unlock only) ```