01Pharoah Technology · ghostwire-suitebuilt

GhostOS

The managed host and appliance foundation for running GhostWire safely in self-hosted, edge, lab, small-business, enterprise and recovery environments. GhostOS manages infrastructure without becoming a surveillance agent or a remote-control backdoor.

Live · attoh.tech/ghostos3 parts · 0 probe-verified

Pharoah Technology Ltd (Craig Attoh and Phil Pereira, 50/50)attoh.tech/ghostos

02What it is

The facts, from the register.

Product	GhostOS — hardened golden-image OS platform
Register key	ghostos
Owner	Pharoah Technology Ltd (Craig Attoh and Phil Pereira, 50/50)
Live at	attoh.tech/ghostos · HTTP 200 on 9 September 2026
Price	priced at launch
Built from	3 register parts, 0 live, 0 probe-verified

What it does

hardened golden-image OS platform

Runs on

GhostWire tegu golden bundle (vc120)

GhostOS

GhostOS — image provenance, rollback floor and duress boot

Source: estate register (products, product_parts, builder_blocks) · deploy probe 9 September 2026Evidence live

03The frameWhat this buyer's profession checks

We will measure it against the NCSC Cyber Assessment Framework.

Three checks a buyer in this field applies, whether or not they name the standard. We use them as the frame for everything that follows.

Check 1

Assets and access under control

Check 2

Detection with an evidence trail

Check 3

Response rehearsed, not improvised

Frame chosen by BRG as a summary of the NCSC Cyber Assessment Framework. Verify the wording with the body before external use.No accreditation is claimed

04Why it's better · 1 of 6Check 2 · fit for purpose

The job as the register describes it.

Questions an operator has no reliable answer to until this exists: which nodes exist; which nodes are trusted; which GhostWire services are running; which node version is installed; which updates are pending; which nodes are unhealthy; which hardening controls failed; which nodes need backup, recovery or decommissioning; which configurations are signed and current; which actions require approval.

Who carries it

IT operators managing GhostWire deployments in self-hosted, edge, lab, small-business, enterprise and recovery environments.

Source: register pain_point · audienceThe problem, stated plainly

05Why it's better · 2 of 6Check 2 · fit for purpose

What it does instead.

hardened golden-image OS platform

The parts doing the work

GhostWire tegu golden bundle (vc120)

HISTORICAL RELEASE RECORD. Superseded by GhostWire vc141/0.4.96 on 25 Aug 2026. Retained only for audit and rollback provenance; never infer current c

GhostOS

Image provenance and boot integrity CLI (ghostosctl) shipped as a signed 0.1.0 release: real keygen/sign/verify/promote/authorize-install against a pe

GhostOS — image provenance, rollback floor and duress boot

Product 36 STANDALONE, branch claude/ghostos-hardened-image commit c3391285. 45 tests green (16 contracts + 29 engine), clippy -D warnings clean, live

Source: register purpose, public_blurb, product_parts joined to builder_blocks3 of 3 parts shown

06Why it's better · 3 of 6Check 1 · controls

Proof it exists, not a roadmap.

200

HTTP status of attoh.tech/ghostos on 9 September 2026 · healthy

0/3

parts wired live

HTTP 200

functional surface probe

Open attoh.tech/ghostos during the talk. Anything the deck claims should be visible there.

Source: register deploy_probe_code, deploy_probed_at, product_parts.verified_by_probeProbed, not promised

07Why it's better · 4 of 6Against the market, honestly

Where we lead, and where we don't.

Not in the register yet a competitive assessment. This slide stays blank until the register carries it; nothing here is invented.

Source: register vs_competitionNamed competitors are the register's, not the presenter's

08Why it's better · 5 of 6Check 2 · fit for purpose

Built for one kind of buyer.

IT operators managing GhostWire deployments in self-hosted, edge, lab, small-business, enterprise and recovery environments.

Source: register audience, serves_nichesOne buyer, not everyone

09Why it's better · 6 of 6Price is part of the scope

What it costs, in one line.

Not in the register yet a price. This slide stays blank until the register carries it; nothing here is invented.

Buying route

Payment on enquiry

software

Scope named on the next slides, so the price has a boundary

Source: register price_gbp, billing_interval, pricing_basis, payment_link_activeNo hidden rate card

10What's inside

The parts, with their verification state.

Part	Category	State
GhostWire tegu golden bundle (vc120)	backend	built
GhostOS	backend	built
GhostOS — image provenance, rollback floor and duress boot	backend	built

Source: product_parts joined to builder_blocks · 3 of 3 shown probe-verified not yet

11Why packaging matters

Bought as a price.
Delivered as a scope.

What the buyer hears

a price

A number to compare with the last number.

the gap
disputes · churn
unpaid work

What the provider means

A scope

3 parts, some verified, some not, plus everything that is excluded.

Packaging is the instrument that makes the scope as visible as the price.Thesis

12Why packaging matters

Five things a package does that a price cannot.

Scope becomes visible. The parts are named, so nothing is assumed.

Boundaries are explicit. What is outside is written down before the first invoice.

It is auditable. A package is a documented process, which is what the NCSC Cyber Assessment Framework looks for.

Buyers compare like for like. A referral needs a defined thing to refer.

Switching fear drops. The move is inside the package, not a project bolted on the front.

Source: BRG packaging doctrine; frame from slide 3Packaging = a compliance instrument

13This packageCut by what each part does

GhostOS, as a package.

backend

GhostWire tegu golden bundle (vc120)

HISTORICAL RELEASE RECORD. Superseded by GhostWire vc141/0.4.96 on 25 Aug 2026. Retained only for audit and ro

built

GhostOS

Image provenance and boot integrity CLI (ghostosctl) shipped as a signed 0.1.0 release: real keygen/sign/verif

built

GhostOS — image provenance, rollback floor and duress boot

Product 36 STANDALONE, branch claude/ghostos-hardened-image commit c3391285. 45 tests green (16 contracts + 29

built

Source: product_parts grouped by builder_blocks.category1 groups

14Anatomy of the packageOn one page · 6 items of work left, filed

A package reads like a control document.

Inside the scope

GhostWire tegu golden bundle (vc120)
GhostOS
GhostOS — image provenance, rollback floor and duress boot

Evidenced, and how

Live URL probed: HTTP 200 on 9 September 2026
0 parts probe-verified
Functional surface: HTTP 200
Register row updated with every probe

Outside the scope today · work left

No build gap recorded in the register
3 parts still to verify by probe
3 register fields to fill (vs_competition, price_gbp, logo_path)

Who signs, and where the work sits

Pharoah Technology Ltd owns the product and the data layer
0 build packets proposed · 6 management items pending
Change log kept in the register

Source: product_parts (inside), deploy and part probes (evidenced), v_deck_work_left (work left; filed to manager_work and build_packets by deck_work_left_sync)One page

15Across the family

Where it hands over.

Anaïs AIgateway.pharoahtechnology.com

Anaïs AI (LLM router / reseller)anaisai.co.uk

Anaïs AI (working app)anaisai.co.uk

Pharoah TechnologyGhostOSattoh.tech/ghostos

ATS Résumé Scanner (free)ats.pharoahtechnology.com

Aurora AIauroraai.pharoahtechnology.com

Aurora Guardauroraguard.co.uk

Source: register rows sharing client_key pharoahOne house, many doors

16Close

Three things to take back to your desk.

One

Open the URL on slide 6. Test it before you trust it.

Two

The parts and their verification state are on slide 10.

Three

A package is a compliance instrument, not a price list.

See it live

attoh.tech/ghostos

Talk to us

via attoh.tech/ghostos

Pharoah Technology Ltd (Craig Attoh and Phil Pereira, 50/50)Pharoah Technology

1 / 16

Arrow keys or space · N narration · P print

Slide 1Narration Words Running total

Item	Spec
Format	16:9, 1920×1080, 25 fps, H.264 MP4 plus WebM. Burned captions and a sidecar SRT.
Runtime	Narration below plus screen captures of the live product; typically 8 to 12 minutes.
Frame	the NCSC Cyber Assessment Framework. Verify the wording of the three checks with the body before external use.
Brand	Pharoah Technology family palette as rendered here. Green only for verified and live states; red only for exclusions.
Voice	Calm, exact, never theatrical. Read figures and dates in full. Numbers are the register's, and the register is cited on every slide.

GhostOS

The facts, from the register.

We will measure it against the NCSC Cyber Assessment Framework.

Assets and access under control

Detection with an evidence trail

Response rehearsed, not improvised

The job as the register describes it.

What it does instead.

GhostWire tegu golden bundle (vc120)

GhostOS

GhostOS — image provenance, rollback floor and duress boot

Proof it exists, not a roadmap.

Where we lead, and where we don't.

Built for one kind of buyer.

What it costs, in one line.

The parts, with their verification state.

Bought as a price.Delivered as a scope.

What the buyer hears

What the provider means

Five things a package does that a price cannot.

GhostOS, as a package.

GhostWire tegu golden bundle (vc120)

GhostOS

GhostOS — image provenance, rollback floor and duress boot

A package reads like a control document.

Inside the scope

Evidenced, and how

Outside the scope today · work left

Who signs, and where the work sits

Where it hands over.

Three things to take back to your desk.

One

Two

Three

Production guide

1 · Deliverable

2 · Runtime plan

3 · Screen captures

4 · Full narration

5 · What this deck must not say

6 · Regenerate

Bought as a price.
Delivered as a scope.