SDVOSB · Rust · Cleared Cyber · Public Domain

LET'S TEAM.

Rust shop, SDVOSB-eligible. We sub on your contract, we prime your SBIR, we teach our architecture under the Unlicense. Architecture taught is architecture adopted.

Teaming Agreement Subcontract IDIQ Task Order SBIR I/II/III STTR JV / Mentor-Protégé
SDVOSB Final Review SAM.gov Active CAGE 1CQ66 UEI W7X3HAQL9CF9 EIN 41-3835237 TS/SCI reactivation eligible Maryland CSB approved eMMA SUP1095449 30% service-connected disabled veteran Dual-Use Established
0
0
0
3
2
▲ Crates Published
03250

How We Team

Two tracks. The first is your contract; we slot in. The second is our small business; you team with us as the prime or as the sub for transition. Pick whichever makes the procurement office happy.

As Prime · Teaming Preferred

You team with us; we hold the small business set-aside.

  • SBIR Phase I — concept feasibility; subs allowed up to 33% SDVOSB set-aside topics; AFWERX, SpaceWERX, NavalX, DARPA, NIH, NSF Open Topics
  • SBIR Phase II — prototype build; subs allowed up to 50% Cost-reimbursement-aware; up to ~$2M per topic
  • SBIR Phase III — sole-source, no dollar cap Team with us as the transition vehicle; we sub UNDER you for delivery
  • STTR — small biz + research-institution partner Open to UMD, JHU APL, MITRE-affiliated researcher pairings
  • Direct-to-Phase-II (D2P2) 32-crate Unlicense base + IR&D openbooks = Phase I-equivalent evidence
  • SDVOSB Joint Venture JV with another SDVOSB to combine past performance for Phase II / set-aside pursuits
  • SBA / DoD Mentor-Protégé Open to 18-month mentor-protégé arrangements; primes can sub to us on set-asides without disqualifying SDVOSB status
  • STRATFI / TACFI — post-Phase II match funding Commercial revenue (KNOXAI + oakilydokily + consulting) provides the private match
Best when you've got a topic, a research lead, a Phase III transition need — or you want to mentor.

As Sub · Where It Fits

Your contract; we slot in for the Rust/cyber CLIN.

  • Teaming Agreement — pre-award partnership Most common first touch; converts to subcontract on win
  • Subcontract on prime instrument Add us to your active contract; rate card on file; ready for clause flow-down
  • Named sub on IDIQ task order Pre-named on your bid for specific task orders; on-call for the surge
Best when you've got an active instrument and need a specialized Rust/cyber capability for a CLIN.

Architecture Taught Under The Unlicense

When we team, we don't gatekeep. The architecture is the deliverable. The architecture is public domain. Bring the contract; the patterns travel under the Unlicense.

  • Single-binary Rust web service pattern — this site is the reference impl. 10 MB binary, $10/mo bare-metal hosting, zero cloud. Source on GitHub, Unlicense.
  • Triple-Sims testing gate — three-stage simulation before merge. Implemented in exopack. Re-used across every Cochran Block crate.
  • Edge / DIL / disconnected deployment patterns — operates in disconnected, intermittent, limited-bandwidth environments. Zero external dependencies at runtime.
  • On-device AI inferenceany-gpu, pixel-forge, kova-engine. Runs on consumer hardware. No FedRAMP cloud auth required because there is no cloud.
  • Distributed C2 meshghost-fabric, runsible. Multi-node orchestration via SSH with tokenized command compression. Resync on connectivity restore.
  • Wall-of-Laptops TUI / framebuffer-console pattern — zero-GUI status displays. ~80 MB RAM total per node. Repurpose, don't replace.
  • The cochranblock crate itself — a template for instantiating your own anti-founder website. Fork it, rename it, point it at your own catalog. Public domain.
  • Custom AI orchestration over curated, research-backed datasets — multiple shipped instances. Data is the moat, not the model. Researched and curated corpora, paired with on-device inference, deliver the kind of dual-use AI that’s defensible without an OpenAI bill or a FedRAMP cloud auth.
No license fee. No NDA needed for the patterns. Full crate-by-crate breakdown at manual.cochranblock.org.

Verticals

Where the work fits. Each vertical lists the procurement vocabulary your contracting specialist will look for, not marketing words.

Defense

  • USCYBERCOM J38 JMOC-E (military service)
  • JCWA hands-on: JCC2, JCAP, UDP
  • Custom AI orchestration · curated mission-specific datasets
  • CMMC 2.0 Level 2 readiness in progress
  • DFARS 252.204-7012 / -7020 / -7021 awareness
  • Army 17C Cyber Operations · JCAC 2014
  • TS/SCI reactivation eligible

Healthtech

  • Memory-safe Rust aligned to CISA Secure-by-Design
  • On-prem AI inference (no FedRAMP cloud auth required)
  • Custom AI orchestration over curated, research-backed datasets
  • HL7 / FHIR familiarity
  • HIPAA Security Rule design pattern
  • Single-binary deployment for clinical edge
  • Air-gapped inference for radioactive data

Fed Civilian

  • Single-binary Rust services
  • Zero-cloud / FedRAMP-Mod-avoidant architecture
  • Custom AI orchestration · curated mission-specific datasets
  • NIST SP 800-218 (SSDF) familiarity
  • NIST SP 800-53 / 800-171 controls familiarity
  • Public IR&D openbooks for audit-ready transparency
  • 97% cost reduction vs cloud baseline (demonstrated)

2026 Procurement Posture

Aligned to CISA Secure-by-Design pledge + the memory-safety roadmap (Jan 1, 2026 deadline). Compliant with NSA/CISA June 2025 CSI "Memory Safe Languages: Reducing Vulnerabilities." Ready for DARPA TRACTOR C-to-Rust translation pursuits. Positioned for DoD CIO FY25-26 Software Modernization Implementation Plan software-factory subcontracts. CMMC 2.0 readiness on roadmap; NIST SP 800-171 self-assessment in progress.

SBIR-ready. Dual-use posture demonstrated by paid commercial product (KNOXAI) plus 32-crate Unlicense technology base. Targeting AFWERX / SpaceWERX / NavalX / DARPA Open Topics. STRATFI / TACFI match-funding viable via existing commercial revenue.

Dual-Use Proof

Federal pull paired with commercial pull. KNOXAI is the commercialization anchor — same technology base, two revenue streams.

TechnologyFederal pullCommercial pull
Single-binary Rust services DoD CIO FY25-26 Software Mod Plan; FedRAMP-Mod-avoidant deployments oakilydokily.com (paying client); cochranblock.org self-hosted
Memory-safe modernization CISA Secure-by-Design; NSA/CISA June 2025 CSI; DARPA TRACTOR 32 Unlicense crates with public adoption
On-device AI inference DoD edge / disconnected-environment requirements any-gpu, pixel-forge — runs on consumer GPUs
AI model integrity certification NIST AI RMF · EO 14110 · federal AI assurance KNOXAI — paid commercial service · the proprietary lane · STRATFI/TACFI match source
Custom AI orchestration over curated data Mission-specific dataset curation; on-device inference for disconnected / cleared environments Multiple shipped instances; researched and curated corpora as the moat (data, not model)

Past Performance

Three sections, three different framings. Corporate past performance follows The Cochran Block, LLC. Military service is the owner's uniform. Contractor employment is the owner's W-2 history. All three are publicly verifiable.

EngagementEntityPeriodScope
oakilydokily.com Commercial · paying client 2025–present Waiver management; digital intake; ESIGN compliance; Cloudflare Zero Trust on bare metal
cochranblock.org IR&D · self-funded · openbooks audit 2024–present Production website; 31 products; 10 MB binary; $10/mo infrastructure; intake forms; SQLite; booking; community grant app. Full IR&D activity log at /openbooks.
KNOXAI Commercial · multiple customers 2024–present Third-party AI-model integrity certification; specifics under NDA; verification artifacts public
Maryland eMMA State vendor SUP1095449 2024–present ACH direct deposit active; ready for state task orders
USCYBERCOM J38 JMOC-E Systems Developer · co-dev lead Jun 2020 – Sep 2022 NDAA-directed offensive cyber operations study; API development, CI/CD pipeline design, data modeling, network protocol implementation. Specifics not publicly disclosed.
ARCYBER 103rd Combat Mission Team Title 10 Offensive Cyber Operator Feb 2017 – Jun 2020 Executed 100+ operational missions; Python automation tooling for mission support. Specifics not publicly disclosed.
National Mission Team Digital Network Exploitation Analyst Jul 2014 – Feb 2017 Network mapping, traffic analysis, Intelligence Community reporting.
U.S. Army · MOS 17C Cyber Operations JCAC Corry Station 2014 2014 – 2022 Cleared environment throughout active service; prior TS/SCI; reactivation eligible.
30% service-connected disabled veteran VA-rated Basis for SDVOSB eligibility.
Two Six Technologies Senior Software Engineer · W-2 Sep 2022 – Sep 2024 JCWA hands-on integrations: JCC2, JCAP, UDP. YAML-to-SQL pipelines, regex parsing engines, data sanitization tooling for compartmented cyber environments.
MaxisIQ Senior Systems Engineer · W-2 Sep 2024 – Feb 2026 Mission-critical systems for USCYBERCOM Title 10 ops support. Custom Python tooling for systems survey + automated server service repairs. SSH/Kerberos infrastructure automation.

Contract numbers omitted intentionally. Contractor employment entries reflect work performed as W-2 employee of the named employer; The Cochran Block, LLC was not the contracting entity for those engagements. References available on request.

Registrations & NAICS

SAM.govActive · CAGE 1CQ66 · UEI W7X3HAQL9CF9
SDVOSB · MySBA CertificationsFinal Review (~12 day SBA average as of 2026-Q1)
Maryland CSB · Certified Small BusinessApproved
Maryland eMMA · State vendorSUP1095449 · ACH active
EIN41-3835237
Clearance posturePrior TS/SCI · reactivation eligible

NAICS Codes

541511Custom Computer Programming Services
541512Computer Systems Design Services
541519Other Computer Related Services
541330Engineering Services
541690Other Scientific and Technical Consulting
541714R&D in Biotechnology (except nanobiotechnology)
541715R&D in the Physical, Engineering, and Life Sciences
518210Computing Infrastructure Providers

Available now for non-set-aside teaming, IDIQ task orders, and SBIR pursuits. SDVOSB set-aside eligibility activates upon SBA Final Review completion.

Full procurement-document set at /govdocs · Capability Statement: PDF · SBIR positioning: /sbir · VR&E: /vre · DCAA path: /dcaa