Platform component
Alchemi Execution Environment (AXE)
Control over what runs, where, and against which files, applied at the machine on the shop floor rather than at the network edge.
For an adjacent operational perspective, productivity vs efficiency explains the topic in a practical workplace context.
For an independent reference point, see ENISA cybersecurity topics.
What it is
Control over what runs, at the machine
Authorisation applied where the work happens: which programs may execute, against which files, on which equipment, and with what recorded.
This is the part that addresses the gap the home page describes. A network control cannot tell you whether an operator loaded an unauthorised program at two in the morning; something at the machine can.
Where it fits
Between the enclave and the floor
The enclave governs where covered information lives. This governs what happens to it when it reaches equipment that cannot govern itself.
The entry on legacy machines sets out the four ways of treating a machine that cannot be secured, and this is the second of them.
Elsewhere
The other components
ACE
Alchemi Compliance Enclave
A governed environment for controlled unclassified information, built on infrastructure that inherits a documented set of controls rather than reimplementing them.
Also
ShieldCRS
Detection of insider activity: who touched which file, when, and whether that pattern is consistent with the work they do.