Skip to Main Content

NoKey — Business Protection

Built at Meta Global AI Developer Hackathon · Oct 26, 2026 · Remote

NoKey — Business Protection — Demo video

wAIrrior (submitted earlier as NoKey) is the AI warrior that watches every app, machine and camera a business runs, spots irregularities, and contains the attack on its own. Contain first, ask later: anything reversible it does alone in milliseconds; anything irreversible waits for the owner, who then gets one WhatsApp notice: "You were attacked. We already did X, Y, Z. Tap to undo." This week: on 2 Nov attackers remotely forced supermarket freezers across Europe into defrost (Tom's Hardware, CBS, Al Jazeera); on 4 Nov a French bank suspended transfers for every client after fraudulent operations (Euronews); in October our own AI keys were abused for ~16 hours (USD 310). Real cameras: Meta SAM 3.1 watches 5 real security cameras of our restaurant in Madrid. Every person is covered before any frame is shown. On 78 real frames labeled by hand: someone-vs-empty 78/78 (precision and recall 1.0), exact head count 59/78. Five security apps run on it: occupancy, after-hours intrusion, storeroom stock watch, unattended cash desk, and a shift report Muse Spark writes from redacted frames only. Sentinel: one timeline for cold room, payments, POS and AI gateway. A combined attack wave is contained per app (defrost blocked, payment held, stolen key replaced) while legitimate work continues: in single-app attacks 300/300 legitimate writes stay alive vs 0/300 when everything is suspended. Physics, not text: a defrost is a legitimate command, so before an agent acts a thermal twin predicts the product temperature. On 1,000 simulated scenarios the shield stopped 419/419 damaging actions (static rules 7/419; false blocks 23/581). A three-round red team published every bypass it found; each was closed. Honest limits: cameras and Meta model calls are real; the attacks, the thermal twin and containment are simulated and labeled; no real actuator or bank is connected. Demo (no sign-in): https://bendrix-shield-panel-290240328973.us-central1.run.app/

Team