The Digital Graft

1. Introduction

Global IT infrastructure today represents a critical asset valued at over 110 billion euros. This asset is ill — not from an acute disease, but from a chronic, silent, and systemic pathology: accumulation.

Each decade brings its wave of technologies — mainframes, client-server, virtualization, cloud, containers, edge computing — that pile up without ever replacing the previous ones. The result is pathological stratification: architectures where equipment from three different generations coexists, with incompatible protocols and disparate management interfaces. A hospital may have an MRI scanner using DICOM, a heating system using Modbus, cameras using RTSP, and an Active Directory using LDAP — none of these systems communicate with each other.

The industry has responded with migration: replacing the old with the new. But migration is an amputation. It cuts the flow, paralyzes activity, introduces existential risk at every cutover. Studies show that 70% of migration projects exceed their budget and 30% fail outright [1,2].

We propose a third way. Instead of replacing, we graft. Instead of migrating, we evolve. Instead of considering infrastructure as a set of boxes, we consider it as a living body — with organs, a nervous system, and a pulse.

This paper introduces the digital graft: the transplantation of a living digital organism in parallel with existing infrastructure, without modification of the original tissue, establishing a symbiotic relationship where both entities coexist, communicate, and evolve together.

2. Related Work

Infrastructure monitoring is a mature field, populated by proven tools but conceptually frozen for two decades. We distinguish four families and demonstrate what NOVA provides that each family does not cover.

Classic SNMP monitoring. Nagios (1999), Zabbix (2001), PRTG, and SolarWinds rely on periodic polling via SNMP. These tools require exhaustive manual configuration: every device must be declared, every OID specified, every threshold parameterized. Deploying Zabbix on a fleet of 200 devices requires two to five days of configuration. NOVA distinguishes itself by the total absence of prior configuration: the graft discovers organs passively, generates its connectors dynamically, and automatically classifies each device in the Synthética taxonomy.

SDN and streaming telemetry. Software-Defined Networking architectures (OpenFlow, gNMI, NETCONF) offer real-time visibility through push telemetry streams. However, they require a complete replacement of infrastructure: SDN-compatible switches, centralized controller, architecture redesign. This is precisely the type of migration that the digital graft avoids. NOVA grafts onto the existing, including equipment without SDN capabilities.

Modern observability. Datadog, Grafana, Prometheus, and OpenTelemetry represent the state of the art in cloud-native observability. Excellent for microservices and containers, they are poorly suited to heterogeneous physical network equipment — switches, PLCs, cameras, Modbus sensors. Their model relies on agents installed on each node: a modification of tissue that NOVA excludes by design.

Passive network discovery. Netdisco, ARPwatch, and passive SNMP probes map the network by listening. This is the family closest to NOVA. The fundamental difference is integration: these tools stop at discovery. NOVA continues with taxonomic classification, synaptic learning, molecular cockpit visualization, and voice interaction (Kenza).

3. The Biological Paradigm

Nature solved the problem of evolution 3.8 billion years ago — not through brutal replacement, but through continuous adaptation. Three biological principles underpin our approach.

3.1 Lichen Symbiosis

A lichen is not a single organism. It is two organisms — a fungus and an alga — that fuse into a new entity. The fungus provides structure and hydration. The alga provides energy through photosynthesis. Each retains its integrity. The whole becomes greater than the sum.

This is the founding principle: NOVA replaces nothing. NOVA weaves a symbiotic relationship with the existing. Each device retains its function. NOVA adds a layer of life — observation, diagnosis, communication.

3.2 The Nervous System

The human body contains 86 billion neurons. Every organ is connected. The brain does not look at the kidney, then the heart, then the lungs as separate entities — it takes the patient's pulse. At a single glance.

Today's infrastructure has no nervous system. Each device is an island. NOVA weaves this nervous system: a logical neuron at every network synapse. For the first time, the administrator takes the pulse of their infrastructure in a single glance.

3.3 Surgical Transplantation

When a surgeon grafts an organ, they do not remove the entire body. They connect vessels, suture tissues. Blood circulates. Both entities learn to cohabit. If the graft is rejected, it is removed without sequelae.

This is NOVA's principle: passive connection, signal reading, information circulation, total reversibility. The digital graft is a transplantation without rejection.

4. The Protocolum Graftii

4.1 Formal Definition

4.2 The Six Acts of the Surgical Protocol

The Protocolum Graftii unfolds in six acts, from first contact to post-graft follow-up.

4.3 Fundamental Properties

Non-invasiveness. The incision phase is strictly read-only. Any packet emitted by G is timestamped and logged. This property is verifiable through independent traffic analysis.

Reversibility. At any time, the removal of G restores I to its prior state. There is no point of no return. This is the fundamental difference from a migration.

Transparency. G operates in standard user space. No kernel drivers. No firmware modifications. No persistent privilege escalation. The graft is auditable line by line.

Universality. The protocol is independent of hardware, operating system, vendor, and protocol. Auto-adaptive connectors enable dynamic discovery of any listening surface.

5. The Six Auxiliary Protocols

The Protocolum Graftii is complemented by six auxiliary protocols that operationalize each stage of the graft.

6. The NOVA Framework

6.1 Architecture

NOVA is the reference implementation. Its architecture directly mirrors the biological principles of Section 3.

Kenza. Voice interface based on a local speech-to-text and text-to-speech pipeline. "Kenza, what is the status of the main switch?" — "Main switch: temperature 42°C, throughput 840 Mbps, no errors in 72 hours."

Molecular Cockpit. Real-time 3D interface visualizing infrastructure as a living organism. Each device is an organ, each connection a synapse. Vital signs — latency, throughput, errors, temperature — are displayed continuously.

Knowledge Base. Universal taxonomy of IT/OT equipment, biologically organized and enriched by a local analysis AI.

6.2 Auto-Adaptive Connectors

The central challenge of any graft is heterogeneity. A typical infrastructure contains equipment from 5 to 50 manufacturers, speaking 10 to 200 protocols. NOVA solves this problem through a five-phase pipeline:

Phase 1 — Passive sniffing. Listening to network traffic to map without emitting a single packet.

Phase 2 — AI analysis. Network signatures are sent to a local language model (6 GB VRAM class) that identifies the type, model, and likely operating system.

Phase 3 — Generation. For each device, NOVA generates a connector — a lightweight script querying the device via its native protocol.

Phase 4 — Validation. Six tests: connection, authentication, query, parsing, timeouts, graceful degradation.

Phase 5 — Decision. Compatibility score. ≥ 80%: automatic deployment. 50–80%: human proposal. < 50%: passive proxy.

This pipeline achieves a 98% success rate across 16,746 signatures spanning 196 manufacturers and 25 sectors.

6.3 The Molecular Cockpit

Unlike traditional dashboards — lists, tables, static graphs — the cockpit represents infrastructure as a three-dimensional organism. Each node pulses at the frequency of its vital signs. Connections vibrate proportionally to traffic. An anomaly manifests as a change in color and rhythm — like inflammation in biological tissue.

7. The Taxonomy of Digital Life

We introduce a Linnaean classification of digital equipment — the Synthética taxonomy (detailed in Paper 002).

8. Operational Hierarchy

The digital graft introduces four operational roles:

This hybrid nomenclature — using words that network administrators immediately understand while maintaining the medical metaphor — is intentional. The Pilot pilots the surgical operation. The Grafter maintains the grafted organism. The Reader takes the pulse.

9. Regulatory Landscape

The digital graft operates within a regulatory framework that clarifies its status.

NIS2 (EU 2022/2555). NOVA assists compliance by providing exhaustive asset mapping, a prerequisite for any NIS2 approach. Passive grafting does not constitute "processing of personal data" under GDPR — it maps the schema, not the content.

ExpertCyber (ANSSI). The ExpertCyber certification assesses cyber maturity. NOVA contributes through its non-impact proofs and immutable logging.

Wassenaar Arrangement. Passive discovery capabilities do not fall under export controls, as NOVA includes no intrusion, exploitation, or circumvention capabilities.

10. Environmental Impact

The digital graft has a radically lower carbon impact than migration. A 200-device data center migration generates approximately 15 tons of CO₂ (manufacturing, transport, installation). A NOVA graft deploys on the existing. Hardware remains in place. Equipment lifespan is extended. The non-replacement savings is the most powerful Green IT lever we have.

11. Security by Design

The digital graft is designed with a radically reduced attack surface.

Passive mode. The incision phase is strictly read-only. No packet is emitted toward the infrastructure. This property is verifiable.

Cell isolation. Each NOVA is isolated. Compromise of one cell does not grant access to others, nor to the host infrastructure.

Air-gap. The DNA base is embedded and encrypted (AES-256). No cloud connection is required for nominal operation.

Immutable log. Every cell action is timestamped and signed (SHA-256). The audit trail is verifiable.

12. Discussion

The digital graft proposes a paradigm shift: no longer considering infrastructure as a territory to defend, but as a living body to heal. This shift is not cosmetic. It has operational, economic, and regulatory consequences.

Acknowledged limitations. The graft in passive mode cannot query equipment that emits no traffic (full air-gap). It does not replace a pentest. It does not fix vulnerabilities — it signals them. These limitations are documented, transparent, and constitute natural extensions of the platform, not weaknesses.

13. Natural Extensions

Controlled active graft. The extension of the Protocolum Graftii toward a conditional write phase — triggered by explicit consent and time-bounded — is a natural evolution. Paper 006 (RESILIENCE) explores survival under crisis conditions.

SPINA — Collective memory. Integration with the SPINA protocol (Paper 008) allows each NOVA cell to contribute to a decentralized, immutable immune memory. Signatures discovered by one graft protect all others.

Digital anesthesia. The extension of the alert pipeline toward a living sandbox (Paper 005) transforms detection into a collective lesson: detected malware is redirected, observed, and its signature enriches the DNA base.

14. Conclusion

We have introduced the digital graft, formalized the Protocolum Graftii, described its six auxiliary protocols, and presented NOVA as a reference implementation. This approach rests on four properties — non-invasiveness, reversibility, transparency, universality — which, combined, constitute a paradigm shift.

The digital graft opens a radically new path for infrastructure evolution. It does not replace. It grafts. It does not migrate. It evolves. It does not defend a territory. It heals a body. And a living body — that knows itself, protects itself, remembers, and survives — cannot be surprised.

Acknowledgments

References