Project Sentinel: Joint-Service Offline Two-Person Integrity (J-SOTPI) for Tactical Systems
Subject: Project Sentinel: Joint-Service Offline Two-Person Integrity (J-SOTPI) for Tactical SystemsSolicitation Number: 26-A008Notice Type: SOLICITNAICS: 541715Set-Aside: No Set aside usedNotice Published: 08-05-26Response Due: 08-12-26Agency: Department of the NavyOffice: NIWC ATLANTICContact: Jessie Rehwoldt This email address is being protected from spambots. You need JavaScript enabled to view it.Office Address: NORTH CHARLESTON, SC 29419-9022Place of Performance: SC 29419
Click for official SAM (FBO) notice, additional information, and accompanying attachments
In highly contested Joint All-Domain Command and Control (JADC2) environments, tactical systems cannot rely on external network reach-back or cellular signatures for authentication. Project Sentinel will validate an enterprise-grade software capability that enforces concurrent, hardware-validated dual-operator controls locally?ensuring that critical, single-point-of-failure actions cannot be executed single-handedly in disconnected space. The Department of the Navy requires a prototype to demonstrate and validate an enterprise-level software capability for Two-Person Integrity (TPI) combined with Multi-Factor Authentication (MFA) for Privileged Access Management (PAM) within highly isolated, disconnected, and heterogeneous operational networks across Joint Force environments. We seek to prototype and scale a unified, non-cellular-reliant dual-authorization mechanisms to safeguard privileged functions?such as critical data deletion, privilege escalation, and network configuration changes?across diverse target systems (Windows, Linux, hypervisors, and network hardware). This effort seeks to evaluate a minimum viable product that enforces concurrent dual-operator authentication using dedicated physical hardware components (such as physical cryptographic tokens or smart cards, excluding mobile devices) in disconnected environments, ensuring critical system changes cannot be executed single-handedly. To ensure long-term supportability and integration, the technical response must explicitly define the physical hardware components required to support the solution, as well as the specific operating system and hypervisor versions supported (including legacy and modern Windows, Linux, VMware/vSphere, and Hyper-V distributions). Success will be measured by a 100% enforcement rate of concurrent, multi-factor dual-approvals under simulated disconnected-state operations, zero dependency on commercial cellular/internet networks, and documented cross-platform compatibility across all specified target systems.