ICN Intelligent Control Navigator
Contact
00 / Identity·icn.at

ICN

I can deliver.
Intelligent Control Navigator
The Delivery Guardian
icn.at →

An adaptive delivery decision system that controls, optimises, and stabilises email flows in real time — fully automated, with no manual intervention.

01 · Detects
Adaptive Detection

No static filter. No manual rule tuning.

ICN learns continuously from delivery outcomes, sender behaviour, and network feedback. Drift and anomalies are detected before they cause damage.

→ MORE
02 · Decides
Dual Evaluation Model

Optimisation and security — simultaneously, not sequentially.

Two logics, one shared decision space. The Control Navigator optimises the route. The Delivery Guardian protects the reputation. Both compute in parallel.

→ MORE
03 · Delivers
Reputation-Based Routing

Premium paths reserved for demonstrably clean senders.

Four delivery zones, domain-granular. Routing decides continuously and can fall back instantly when signals change — without manual intervention.

→ MORE
thinks ahead learns continuously filtering
Rule engine
No static filter.
No fixed rules.
Isolated modules
One decision space.
One process.
Reactive pipeline
Continuous adaptive
decisions.
01 / Model

Every decision is formed in a shared evaluation space.

Two roles, one pipeline. Optimisation and security are computed simultaneously — not processed sequentially.

Approach
Dual evaluation model
Decision
Real-time, per message
Intervention
Fully automated
Control Navigator

Optimisation logic

"What is the best possible way to deliver this message?"
  • Optimal delivery routes
  • Throughput optimisation
  • Adaptive routing decisions
  • Behaviour-based delivery strategies
Delivery Guardian

Security logic

"What is the safest way to execute this delivery?"
  • Sender reputation protection
  • Anomaly detection
  • System-wide stability
  • Control under load and stress
Not a two-system model

Optimisation and security are computed simultaneously — not one after the other.

02 / Adaptive

ICN learns continuously.

The system adapts on an ongoing basis — not through manual rules, but through observed behaviour. Every signal feeds back into the decision process.

Learning
Online, continuous
State
Shared via Redis
Forgetting
Exponential decay
01
Delivery outcomes
Success, defer, bounce — every result adjusts the model in real time.
02
Sender behaviour drift
Deviations from the learned profile are detected immediately, before they cause damage.
03
Provider responses
Throttling, delays, and rejections feed directly into routing decisions.
04
Network feedback
Bounces, complaints, and reputation signals processed in real time.
05
Historical reputation
Long-term patterns stabilise or correct decisions — rehabilitation without manual database cleanup.
06
Real-time context
System state, load, and current network conditions influence every individual decision.
03 / Pipeline

Six components, one coherent pipeline.

Every outbound email passes through all stages sequentially. No additional messaging layers, no network hops, no unnecessary latency.

Platform
ZoneMTA · Haraka
State
Redis · MySQL · MongoDB
Latency
p95 < 90 s end-to-end
M·01
ContentScore
Sender domain reputation
M·02
LRAL
Behavioural anomalies
M·03
FuzzyChecker
Duplicate & bulk detection
M·04
SmartRouter
Routing decision
M·05
ARC-Proxy
Authentication chain
M·06
BounceHandler
DSN processing
Defense-in-Depth

No single signal triggers a block. The pipeline requires consistent negative signals across multiple independent algorithms — an attacker would need to simultaneously fool the reputation algorithm, the anomaly detector, and the duplicate checker.

04 / Routing

Four delivery zones, decided by priority.

Security checks take precedence over performance optimisations. The premium hourly limit is domain-based — multiple sender addresses sharing a domain share a single quota.

Granularity
Per domain
Anti-splitting
Active
Hot-reload
Yes
zone · dump
Immediate rejection

Score too high or rate limit exceeded. No retry — full logging for analysis.

zone · filter
Standard delivery

Normal outbound mail without premium status. Classic MX path with conservative limits.

zone · mxroute
Premium direct delivery

Consumer domains (Gmail, Yahoo, Microsoft). Reserved for demonstrably clean senders with stable reputation.

zone · mxroute_lsto
Premium + List-Unsubscribe

Bulk mailings with LSTO header. Gmail- and Yahoo-compliant for high-volume legitimate campaigns.

05 / Outcome

Every delivery decision is.

Built for environments where delivery is not binary — where reputation, context, and behaviour all count.

Metrics
Prometheus · Grafana
Shutdown
Graceful < 5 s
Scaling
Horizontal · stateless workers
Optimised for performance
Best possible route, provider, and timing — computed adaptively, not statically configured.
Secured by safety logic
Reputation, stability, and risk are assessed simultaneously. No downstream filter.
Adapted to behaviour
The system knows the sender — and responds to deviations before they escalate.
Fully auditable
Every decision path is measurable. Prometheus metrics, Grafana dashboards, complete audit trails.
06 / Differentiation

Not a spam filter. A decision layer.

ICN does not replace Rspamd — it builds on Rspamd results and condenses them through behavioural, historical, and contextual signals into robust delivery decisions.

Position
Above existing MTA stack
Data residency
EU · CH · sovereign
Feature Classic MTA + Rspamd ICN
Reputation learning None — static rule configuration Online learning with exponential decay
Anomaly detection Absolute thresholds Behaviour-based, time-of-day adaptive
Bounce processing Manual or rudimentary RFC 3464, fully automated, idempotent
False-positive protection No systematic mechanism Legitimacy detection, multi-signal voting
Authentication chain DKIM/SPF/DMARC passive ARC signing per RFC 8617, active
Routing granularity One or two paths Four delivery zones, domain-granular
07 / Contact

Let's talk about your delivery.

A 45-minute architecture session with a delivery engineer. We analyse your current outbound topology and show exactly where ICN would integrate. Outcome: a technical assessment, not a sales deck.

Format
Remote · 45 min · technical
NDA
Mutual, on request
Cost
None
Email
icn@icn.at
Response within 1 business day · CET
Email security that thinks ahead. And grows with you.
outbox.at · I can deliver.