One map. Every decisionthat depends on safety.
Shield turns the Guardian network into national infrastructure: a Nigeria-native map engine, a real-time Alert Fabric built in Go, and platform APIs that let estates warn their residents, fleets route around danger, and realtors price safety into property — all from one verified picture of the ground.
< 60 s
Confirmed High alert → first device
774 · 8,809
LGAs and wards on the Nigeria layer pack
< 300 ms
Tile P95 from in-country CDN
100%
Map states replayable from the audit log
From product to infrastructure
Verified ground truth is worth more than an alert. Nearly every institution that moves people, goods, or capital runs on it — one verified map, many consumers.
Shield Map
A Nigeria-native map engine — Google-Maps-grade tiles, geocoding, and routing built for Nigerian geography: 774 LGAs, 8,809 wards, estates, motor parks, corridors, and the live threat overlay no global map has.
Alert Fabric
A Go-powered real-time distribution layer. Any person, place, or moving vehicle subscribes to a geofence; confirmed threats fan out over push, WebSocket, SMS, and USSD in under a minute.
Platform APIs
Verticalised products on one truth: Shield Estates for gated communities, Shield Routes for logistics, Shield Index for real estate and insurance — plus the agency console from v1.
Three verticals, one truth
Gated communities
Shield Estates
Every estate becomes a command post: a multi-tenant console for the security committee, a resident app wired into the national map, and the estate's own guards accredited as Tier-2 Guardians for their perimeter.
- Perimeter map with 5 km of threat context, resident roster, and one-press broadcast — push, SMS, and gate PA
- Resident panic button with silent mode, "I'm safe" check-ins, and visitor pre-clearance codes verified at the gate
- A panic press inside a subscribed estate reaches the console in seconds — and counts toward corroborating the cell
Logistics & mobility
Shield Routes
The safest route is a different algorithm. Every road edge carries a live threat multiplier from the cells it crosses — dispatch software gets the fastest route, the safest route, and what the detour costs.
- Moving geofences: each vehicle ping updates a bubble that warns of trouble ahead on the route, in time to divert
- Departure windows learned from incident history — "leave Kaduna before 06:30 or after the escort convoy"
- Signed route-compliance records give fleets the receipts to negotiate insurance premiums down
Real estate, insurance & credit
Shield Index
Safety, priced into the asset. A Safety Score (0–100) for every ward and cell, computed from the same corroborated history that drives the live map — published with its trend, volatility, and confidence.
- Incident pressure, 90-day trajectory, band volatility, response quality, and coverage confidence in one number
- Quarterly signed Ward Safety Reports fit for a bank credit memo or an investor pack
- Scores places, never people — no demographic inputs, public methodology, confidence intervals always shown
Nine services. One hot path.
Go owns everything between a Guardian's thumb and an operative's phone: goroutines make a million concurrent geofence subscriptions cheap, and static binaries deploy to modest Nigerian data-centre hardware. Python stays where it belongs — AI sidecars for classification and Nigerian-language NLP (Pidgin, Hausa, Igbo, Yoruba), never on the alert path.
- gateway · ingestd · trustd · collated · alertd · routed · tenantd · indexd · auditd
- Redpanda streams: reports.raw → reports.verified → cells.delta → alerts.fired
- PostgreSQL + PostGIS + H3 for scoring; Tile38 for live geofences and fleet tracking
Anything with a location can be warned
A subscription is a geometry plus a channel — filtered by severity floor, quiet hours, and audience class. Four redundant channels: push → WebSocket → SMS → USSD/IVR in local languages.
Home cell
Resident, family circle
Band changes + High alerts for the cell and its ring-1 neighbours
Perimeter polygon
Estate, campus, factory
Any incident inside or within a configurable buffer (default 2 km)
Moving bubble
Truck, bus, executive vehicle
Warns of High cells ahead on the route, not just around the vehicle
Corridor
Traveller, transport union
Advisory state of a named corridor — Abuja–Kaduna, East–West Road — as it changes
Portfolio
Realtor, insurer, lender
Daily digest + threshold webhooks when a ward's Safety Score moves
An incident, end to end
Alerts are actionable or silent — no news-feed noise. Anyone who receives one knows what to do next: avoid, shelter, reroute, or respond.
Raised
A Guardian or citizen report passes the ingest screens — schema, geo-plausibility, duplicates.
Corroborated
Independent confirmation or an official source. Nothing moves the map alone.
Banded
The cell re-scores: severity × decay × verification × trust. Medium updates the map; High escalates immediately.
Dispatched
Geofence match, then per-audience payloads over push, WebSocket, SMS, and USSD.
Resolved
Operatives and estate admins acknowledge; resolution feeds the map back toward Safe.
The map must never become a weapon
The moment routing decisions, property prices, and premiums run on Shield, a manipulated cell is worth money. The v1 immune system carries over intact — with commercial-grade hardening.
Nothing moves uncorroborated
The trust engine gates every signal that reaches a paying consumer, exactly as it gates agency dispatch. No single report escalates or fires.
Guardians stay anonymous
No API, tenant, or partner can ever resolve a report to a human. Identity lives only in the accreditation vault, under two-person control.
Public data stays coarse
Commercial consumers receive banded, aggregated intelligence — never raw incidents, victims, or reporters. The map guides; it never gossips.
Manipulation watch
Anomaly models flag report patterns that would profitably move a Safety Score or corridor band — before they publish. Sudden Index moves carry a review lag.
0
APIs that can expose a reporter
2-person
Control to open the identity vault
NDPR / NDPA
Nigerian data residency for all personal data
One truth, four doors
REST for state, WebSocket for streams, webhooks for events, and the embeddable Map SDK for interfaces — with per-tenant keys, HMAC-signed webhooks, and audience-class enforcement baked in. A client physically cannot request detail above its clearance.
- GET /v2/map/cells?bbox=&res= → banded cells for any viewport
- POST /v2/routes → fastest + safest, with risk deltas
- GET /v2/index/wards/:code → Safety Score, trend, confidence
- POST /v2/subscriptions → geofences with severity floors
- WS /v2/stream → cell.delta · alert.fired
Service-level objectives
A vertical launches in a corridor only after the map runs clean there. One noisy launch that cries wolf is lost permanently.
Confirmed-alert latency
< 60 s
corroboration complete → first device notified, P95
Map freshness
≤ 1 h / ≤ 5 s
full snapshot cadence / streaming delta propagation
Tile latency
< 300 ms
P95 from in-country CDN edge
Fabric availability
99.9%
alert path, SMS fallback counted as up
High-alert precision
> 90%
High classifications later confirmed accurate
Coverage
≥ 1 / community
active accredited Guardian per launched community
Shield in your pocket
The resident app and the Guardian app ship in one download: your home cell's band before you leave the house, panic with silent mode, offline-first reporting, and alerts in English, Pidgin, Hausa, Igbo, and Yoruba.
Watch. Verify. Respond. Build on it.
Protect Nigerian lives by putting one verified map under every decision — where to live, which road to take, when to raise the alarm — and closing the gap between when something happens and when the people who can respond find out.