{"slug": "nocturne-investigating-ghosts-in-the-machine-with-air-gapped-environmental-ai", "title": "NOCTURNE: Investigating Ghosts in the Machine with Air-Gapped Environmental AI", "summary": "A developer built NOCTURNE, an open-source, air-gapped environmental telemetry forensics platform that ingests multi-variate nocturnal IoT time-series data and uses a two-stage local AI pipeline to distinguish mechanical failures from unexplained anomalies. The system pairs TabPFN tabular anomaly scoring with Google Gemma 2 reasoning run locally via Ollama, then seals each verdict with a SHA-256 tamper-evident evidence checksum. The MIT-licensed project is deployed as a live workstation and published on GitHub.", "body_md": "*This is a submission for the [Hacktoberfest Open-Source AI Challenge Week 4: Ghost in the Machine](https://dev.to/challenges/hacktoberfest-week4-2026-10-26)*\n\nIn modern smart homes and automated facilities, thousands of IoT sensors hum silently in the dark—tracking ambient microclimates, circuit wattage, acoustic pressure, and magnetic deadbolt states. When inexplicable events occur—a bedroom drops 7°C in under three minutes, a locked door unlatches with zero network authorization, or a sub-panel breaker registers 2,400W despite being physically switched off—homeowners either dismiss them as unexplained \"glitches\" or jump to supernatural conclusions.\n\n**NOCTURNE** is an air-gapped, local-first environmental telemetry forensics platform built to investigate the literal *ghosts in our machines*.\n\nInstead of building a conversational chatbot, I built an aerospace-grade forensic workstation that ingests multi-variate nocturnal time-series (from Zigbee2MQTT, ESPHome, or Home Assistant) and uses open-source AI to determine causality. It pits rigorous physical mechanics (HVAC damper collapse, thermal bridging, induction loop transients) against anomalous environmental signatures (thermodynamic entropy extraction, 18.98 Hz ocular infrasound resonance) and seals every verdict with a cryptographic SHA-256 evidence checksum.\n\nThe entire codebase is open-source under the MIT license:\n\n**Live Production Workstation:** [https://nocturne-nb2y.onrender.com](https://nocturne-nb2y.onrender.com)\n\n**Source Repository:** [https://github.com/ayushg-1506/nocturne](https://github.com/ayushg-1506/nocturne)\n\nNOCTURNE is a local-first, air-gapped environmental telemetry forensics platform engineered to investigate anomalous microclimate and electrical deviations across residential and facility IoT sensor networks.\n\nBy combining tabular foundation model statistical scoring (TabPFN) with open-weight deductive reasoning (Google Gemma 2), Nocturne processes multi-variate nocturnal time-series to determine causality: differentiating between mechanical system failures (e.g., HVAC damper collapse, unshielded induction transients) and unclassified anomalous environmental phenomena.\n\n`#000000`) & Phosphor Green tactical design system with zero external CSS frameworks\nNOCTURNE is architected around a two-stage local AI reasoning pipeline:\n\n``` php\n[IoT / Edge Telemetry] ---> [CSV / JSON Ingestion Engine]\n                                      |\n                                      v\n                    [TabPFN Tabular Anomaly Scoring]\n                    (Residual variance, Z-score thresholds)\n                                      |\n                                      v\n                    [Google Gemma 2 Reasoning Engine]\n                    (Local Ollama :11434 / Air-Gapped Adapter)\n                                      |\n               +----------------------+----------------------+\n               |                                             |\n               v                                             v\n   [Rational Physical Hypothesis]             [Anomalous Phenomenon Deduction]\n   (HVAC damper failure, induction            (Thermodynamic collapse,\n    coupling, solenoid drift)                  ocular infrasonic resonance)\n               |                                             |\n               +----------------------+----------------------+\n                                      |\n                                      v\n                    [SHA-256 Tamper-Evident Evidence Seal]\n```\n\nDomestic sensor telemetry contains our most intimate private signatures—sleep schedules, bedroom temperatures, movement patterns, and door latch cycles.\n\nSending continuous nocturnal smart-home logs to closed proprietary cloud APIs is an unacceptable privacy hazard. Open-weight models like **Google Gemma 2** and open tabular frameworks make it possible to run sophisticated forensic AI **100% locally and air-gapped on commodity hardware**. \n\nOpen innovation ensures that privacy-sensitive analysis remains in the hands of the user—operating completely offline without vendor lock-in, recurring subscriptions, or corporate data harvesting.\n\nThis project was inspired by British engineer Vic Tandy's 1998 research paper, *\"The Ghost in the Machine\"*. While working in a medical laboratory reputed to be haunted, Tandy experienced unexplained dread, cold sweats, and fleeting apparitions. He eventually discovered that a newly installed extraction fan was emitting an imperceptible standing sound wave at **18.98 Hz**—the exact resonant frequency of the human eyeball. The infrasound caused the eye's vitreous humor to vibrate, producing optical illusions of gray figures in the peripheral vision.\n\nWhen you load Case #0317 (The Nursery Cold Spot) in NOCTURNE, scrub the timeline to 03:14 AM, and toggle the Spectral Scope audio, you hear the low 18.98 Hz thrum alongside a 7.2°C temperature drop and an unauthenticated deadbolt release. Watching open-source AI dissect the physical vs. anomalous causal chains in real time captures the eerie intersection of physical phenomena and human perception.", "url": "https://wpnews.pro/news/nocturne-investigating-ghosts-in-the-machine-with-air-gapped-environmental-ai", "canonical_source": "https://dev.to/ayushg_15/nocturne-investigating-ghosts-in-the-machine-with-air-gapped-environmental-ai-3pk1", "published_at": "2026-10-29 18:37:49+00:00", "updated_at": "2026-10-29 18:49:05.086950+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-tools", "ai-agents", "mlops", "ai-safety"], "entities": ["NOCTURNE", "Google Gemma 2", "TabPFN", "Ollama", "Home Assistant", "Zigbee2MQTT", "ESPHome", "GitHub"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/nocturne-investigating-ghosts-in-the-machine-with-air-gapped-environmental-ai", "markdown": "https://wpnews.pro/news/nocturne-investigating-ghosts-in-the-machine-with-air-gapped-environmental-ai.md", "text": "https://wpnews.pro/news/nocturne-investigating-ghosts-in-the-machine-with-air-gapped-environmental-ai.txt", "jsonld": "https://wpnews.pro/news/nocturne-investigating-ghosts-in-the-machine-with-air-gapped-environmental-ai.jsonld"}}