Tx-Rails — Aviation Pricing Sheet
The auditable underlay for Aviation — operators, MROs, OEMs, lessors, ANSPs, airports, regulators, accident investigators, insurers. Cryptographic continuous audit + tail-number-level provenance + multi-party AD-compliance co-attestation, sitting underneath your existing FADEC, HUMS, MRO, tech-log, defect-deferral, AD-compliance tracker, FOQA, engine-condition-monitoring, and ARINC-bus systems. We don’t replace any of them — they’re regulator-locked anyway. We bind to them via a published integration mode and produce tamper-evident, jurisdiction-independent records that survive decades and operator transitions. See iiot-aviation.md & smart-contracts-aviation-manufacturing.md and for the full underlay positioning.
What you get
Three integrated capabilities, one platform:
- Continuous cryptographic audit infrastructure
Every maintenance entry, every airworthiness-directive compliance event, every flight-data exceedance, every firmware update, every defect-deferral, every supplier-certificate handover committed to a Byzantine-fault-tolerant ledger and Merkle-anchored to the Hedera public DLT. Records survive operator merger, sale, and wind-up — the structural answer to the trust collapse that hollowed out Boeing post-737 MAX investigations.
Aligned with: EASA Part-145 / Part-M / Part-CAMO; FAA Part-43 / Part-91 / Part-121 / Part-145; CASA CAR / CASR; ICAO Annex 6 + Annex 13; AS9100 (manufacturing) + AS9120 (distribution); ATA chapter classification; EASA Form 1 / FAA 8130-3 / CASA Form 1 dual-release; EASA Part-IS + FAA NPRM 22-04 cyber-supply-chain rules. - Multi-party AD compliance + part-lifecycle with smart-contract-equivalents
Self-executing AD-compliance retrofits co-signed by OEM + regulator + operator; Power-by-the-Hour engine leasing with hour-by-hour settlement; tier-2/tier-3 supplier milestone payment release on FAI signoff; cyber-supply-chain firmware promotion gated by signed multi-party verification. Unlimited data capacity (database-backed, not on-chain). Your existing MRO / tech-log / OEM systems feed events via change-data-capture or atomic dual-write. - Regulator, investigator, lessor & insurer-grade evidence pipeline
Live data access for CASA / FAA / EASA continuing-airworthiness inspections; ATSB / NTSB / AAIB Annex-13 evidence packs that survive multi-decade investigations; aircraft-financier evidence packs for re-marketed-asset due diligence (engine pedigree, hours-since-overhaul, AD-status by tail number); hull-and-machinery + war-risk + product-liability insurer-grade telemetry.
What we sell — and what we don’t
What we don’t sell at any price: full transaction-front-end replacement. The certified avionics surface (FADEC, ARINC bus, MMS, AD-tracker) is regulator-locked — our screens have no business inside that scope. We don’t build your MRO system, your tech-log app, your defect-deferral workflow, or your engine-condition-monitor UI. If you need a new hangar-side touch terminal or regulator-evidence kiosk, your engineering team builds it against our published SDK with our reference connectors.
What we do sell falls into two groups:
A. Operator utilities (bundled — Items 2 + 4 in the pricing table)
- Evidence-retrieval portal — your continuing-airworthiness team pulls cryptographic proofs in response to CASA / FAA / EASA inspector, accident-investigator, lessor, financier, or insurer questions. Generates evidence packs in formats acceptable to ICAO Annex-13, EASA Form 1 / FAA 8130-3 dual-release, lessor re-delivery audits, and hull-insurance claim documentation.
- Continuing-airworthiness dashboard — live view of fleet AD-compliance status by tail number, FOQA exceedance trends, defect-deferral aging, MRO work-pack status, calibration-due aging, firmware-provenance status across the fleet.
- Trust-management UI — operator-side controls for your enterprise PKI: certificate issuance for licensed engineers / PICs / designated airworthiness inspectors / quality reps, revocation, partner-org onboarding (MROs, OEMs, lessors, sub-tier suppliers), kill-switch.
B. Counterparty / supply-network attestation UI (optional — Item 5 in the pricing table)
Thin signature surface for external counterparties — sub-tier suppliers (under AS9100/AS9120), MROs, OEM tech-reps, designated airworthiness inspectors, regulators issuing ADs, lessors signing pre/post re-delivery, insurer surveyors. This is explicitly in scope for us to develop, distinct from the “no MRO replacement” line above.
What it does:
– DID / certificate-based authentication (Part-66-licensed engineer credentials, OEM tech-rep certs, DAR/DAE credentials)
– Per-tenant queue of pending attestations (Form 1 / 8130-3 dual-release co-signs, AD-retrofit compliance signoffs, Power-by-the-Hour hour-credit acknowledgements, lessor re-delivery condition signoffs, accident-investigation evidence handovers)
– Sign + submit with cryptographic proof landing in the BFT mesh
– Multi-tenant via entnum — each counterparty sees only their own queue
What it explicitly is NOT:
– An MRO / CAMO / tech-log platform replacement
– A defect-deferral or work-card workflow tool
– An OEM engineering-data-portal replacement
When you’d buy this: cross-operator AD-compliance retrofits where regulator + OEM + multiple operators co-sign on the same evidence; sub-tier supplier networks where AS9100 evidence flows are currently email/PDF.
Pricing — five line items, four budget homes (Item 5 optional)
| # | Item | Type | Indicative price (AUD) |
|---|---|---|---|
| 1 | One-off integration & onboarding — integration-mode selection, wiring against your MRO / tech-log / defect-deferral / engine-condition-monitor / FOQA / supplier-certificate-repo systems, certificate-authority setup, UAT, launch | One-off CapEx — capitalisable over 3–5 years | A$180,000 – A$380,000 |
| 2 | One-off operator-UI configuration — evidence-retrieval portal skinned to your brand; regulator-export templates (CASA / FAA / EASA continuing-airworthiness audit packs, ICAO Annex-13 evidence packs, AD-status-by-tail packs, lessor re-delivery condition packs); continuing-airworthiness dashboard customised; SSO with your IdP | One-off CapEx — capitalisable over 3–5 years | A$80,000 – A$170,000 |
| 3 | Annual support & maintenance (security patches, OS/library upgrades, 24×7 help desk for AOG-adjacent operations, 99.95% uptime SLA for tech-log-linked deployments, integration-mode adjustments, operator-UI updates for new AD / regulator templates as they’re published) | OpEx — renewable annually | A$140,000 / year |
| 4 | Tx-Rails platform access — BFT infrastructure, audit attestation, Hedera anchoring, dual-DC redundancy, regulator pipeline. Includes the three operator utilities. Tiered by pyramid count — see range governance below. | OpEx — annual platform subscription, pyramid-tiered | A$150,000 – A$4,000,000 / year |
| 5 | Counterparty / supply-network attestation UI (optional) — thin signature surface for sub-tier suppliers, MROs, OEM tech-reps, DARs, lessors, insurer surveyors. NOT an MRO / CAMO / tech-log replacement. | One-off CapEx — capitalisable over 3–5 years | A$100,000 – A$250,000 |
| Year 1 total (Tier-3 example: 2–3 pyramids, Items 1+2 mid-points, Item 5 excluded) | A$835,000 | ||
| Year 1 total with Item 5 mid-point | A$1,010,000 | ||
| Year 2+ ongoing (Tier-3 example) | A$500,000 / year |
Item 4 — pyramid-tier pricing:
| Tier | Customer profile | Pyramid count | Annual platform fee (Item 4) |
|---|---|---|---|
| Tier 4 | Single-fleet operator (regional carrier <20 aircraft), single-AOC GA operator, single-site MRO, single-aircraft-type lessor — Shape 3 single pyramid or pilot | 1 | A$150,000 |
| Tier 3 | Mid-tier operator (regional/national carrier, 20–80 aircraft), multi-site MRO, OEM-tier supplier — 2–3 pyramids (Shape 2 small cluster) | 2–3 | A$360,000 |
| Tier 2 | Tier-1 carrier with own MRO + parts pool, large OEM-tier supplier, multi-fleet lessor — Shape 2 grouped (4–7 pyramids covering ops + maintenance + supply chain) | 4–7 | A$1,200,000 |
| Tier 1 | Major airframer (Boeing / Airbus / Embraer / Bombardier tier), major engine OEM (RR / GE / P&W / Safran tier), national / flag carrier with international long-haul — Shape 1 sovereign + Shape 2 cross-federation | 8+ | A$3,000,000+ |
Aviation tier pricing skews higher than general manufacturing because of multi-decade record retention obligations (50+ years on major airframe records, lifetime on type-certified components) and dual-regulator (national authority + ICAO) audit horizons.
Item 1 — what governs the range:
– A$180k floor — hash-only attestation (Mode A): your MRO / tech-log commits as normal; we receive only content hashes.
– A$380k ceiling — atomic dual-write (Mode B): tech-log and Tx-Rails commit in the same transaction. Highest integrity guarantee; suits new builds or major MRO-system refreshes.
– Most operators land mid-range with change-data-capture observation (Mode C) at ~A$250–320k.
Item 5 — what governs the range:
– A$100k floor — single-flow attestation kiosk (e.g. just sub-tier-supplier Form-1 co-sign), single counterparty role, default branding.
– A$250k ceiling — multi-flow hub (Form 1/8130-3 + AD-retrofit + PBH credit + lessor re-delivery + accident-evidence handover), multiple role tiers, Part-66-licensed engineer DID auth, deep brand alignment.
Please refer to the Federation Trust Model page for explanations of Federations, Shapes and Pyramids.
Payback and ROI
For a Tier-3 mid-tier regional carrier with ~A$600M annual revenue, ~50 aircraft, and ~A$120M in directly counterparty-touching flow (MRO contracts, parts pool, sub-tier supplier procurement, lessor settlements).
| Annual benefit | Conservative | Realistic |
|---|---|---|
| Audit IT-controls displacement (external auditor + CASA / FAA / EASA continuing-airworthiness audit + lessor re-delivery audit) | A$150,000 | A$400,000 |
| MRO-contract reconciliation & dispute overhead reduction (work-pack disputes, parts-pool reconciliation, AOG-recovery billing) | A$300,000 | A$900,000 |
| Reduced AOG exposure via faster AD-compliance attestation (hours of grounded fleet recovered through automated co-signature flows; one A380-equivalent AOG-hour = ~A$25k–50k) | A$300,000 | A$1,500,000 |
| Insurance-premium reduction tied to telemetry-backed risk evidence (hull-and-machinery, war-risk, product-liability) | A$200,000 | A$800,000 |
| Regulatory + investigator compliance evidence (Annex-13 readiness, AD-status-by-tail packs, continuing-airworthiness audit-prep) | A$150,000 | A$500,000 |
| Re-marketed-asset value uplift on engine + airframe pedigree (lessor evidence packs that hold up under scrutiny add 1–3% to mid-life asset re-marketing value) | A$200,000 | A$1,200,000 |
| Total annual value delivered | A$1,300,000 | A$5,300,000 |
| Tx-Rails Year 2+ cost (Tier-3 example) | A$500,000 | A$500,000 |
| Net annual return | A$800,000 | A$4,800,000 |
| ROI multiple | 2.6× | 10.6× |
The “Boeing 737 MAX” overlay: a Tier-1 airframer’s loss-of-trust event runs into the tens of billions in market-cap impact. The platform’s structural value to a major OEM isn’t the £-per-engine telemetry savings — it’s the existence of a tamper-evident audit chain that survives a hostile regulator investigation. That’s worth orders of magnitude more than the line-item ROI table suggests, but it’s not money you can put on a CFO’s slide ex-ante.
Pilot terms — non-binding, parallel-run, zero operational risk
- 3 months running Tx-Rails alongside your existing systems. No production switchover.
- Mode A (hash-only) integration with one chosen federation (typically AD-compliance tracking, engine-condition-monitoring, or sub-tier-supplier Form-1 attestation) for the pilot.
- Walk-away clause: if at month 3 the metrics don’t meet agreed targets, the engagement ends.
- Regulator pre-validation: before signing, we’ll meet with your CASA / FAA / EASA Principal Maintenance Inspector to confirm evidence-pack acceptability.
- Data ownership: cryptographic exports are open-format, re-readable indefinitely — outlives operator transitions, lessor re-marketings, and registration changes.
Why now
- EASA Part-IS + FAA NPRM 22-04 — aviation cybersecurity rules in force / pending; auditable firmware-provenance evidence becomes mandatory.
- Boeing 737 MAX aftermath — operator and regulator trust thresholds have moved; documentary trust without cryptographic backing is failing inspections.
- EASA Form 1 / FAA 8130-3 dual-release reconciliation continues to be a major operator pain point; cryptographic underlay solves the reconciliation question entirely.
- Re-marketed-aircraft pedigree scrutiny rising as fleet ages — lessor evidence requirements increasing.
- ICAO Annex-13 retention — multi-decade evidence durability is structurally hard for conventional record-keeping; cryptographic anchoring is the structural answer.
Next steps
- 30-minute discovery call with your Director of Engineering + CFO + Head of Continuing Airworthiness.
- Letter of Intent — non-binding, signals pilot interest.
- Pilot kick-off within 8 weeks of LOI.
Contact: John Olsen · john@itotchaincloud.com.au · +61 490 114 879
Reference data sources: EASA Annual Safety Reports; FAA Aviation Safety information bulletins; ICAO Annex 13 Investigation Manual; IATA / MRO Network MRO Survey + parts-pool cost benchmarks; Cirium / Ascend fleet & values data; aviation hull-insurance market-loss-development triangles; AOG-cost reports (Boeing / Airbus operator-economics studies). Full citations available on request.
Tx-Rails — Built by IT/OT Chain & Cloud Australia (ITOTCCA). Sydney · London.