One council, one instance, one air-gap each
AnBanjir is the ministry doctrine applied at municipal altitude: federal science consumed downstream, the offline engine inherited from AnKampung, credentials from AnVerified — and not one schema path between neighbouring councils.
The air-gap is the tender-winner
Sold to the authority that answers for the drain
The PBT — not a federal agency — faces the resident whose car drowned under an expressway overpass. AnBanjir signs where accountability already lives, one council at a time, each with its own instance and its own brand license.
Federal science in, council truth held
Radar, hazard maps and gauge standards are consumed downstream as public inputs — never duplicated, never re-sold. What an instance holds is local: streets, shelters, rosters, thresholds. That's also exactly what a state overlay licence cannot reach.
Councils are air-gapped from each other
MBSA's waterlines never join MPJ's; DBKL's shelter counts are invisible to every other PBT. Not forbidden by contract — absent by construction, the same schema doctrine that makes each ministry tender signable.
Where AnBanjir plugs into the portfolio
A flood console is only as good as its engines: the gatehouse that runs dark, the badge at the shelter door, the crowd that reports honestly, and the layers it legally consumes.
AnKampung — the engine it grew from
The offline state engine is inherited whole-cloth from AnKampung's gatehouse design: states mutate without signal, resolve only along legal transitions on reconnect. A kampung that keeps its flood gate log through an outage is the same primitive keeping a council console current through a dead tower.
One engine, two sovereign products.
AnVerified — who is at the gate
Responders, shelter volunteers and council officers carry scoped, expiring credentials: a bomba badge verifies as bomba without the roster becoming a database. Assisted-issue paths cover the clerk and the captain, exactly as the spine product prescribes.
The spine product at the flood door.
The crowd — residents as river gauges
Consented, geotagged waterline photos resolve against telemetry and neighbours before moving any map state. Contributors see their own reports on the public street map — the reciprocity loop that makes civic reporting self-reinforcing.
Density no gauge budget can fund.
JPS · MetMalaysia · NADMA — the layers consumed
FFHM hazard rasters, radar composites and national warning standards enter each instance as signed public inputs. The product's honesty depends on publishing which cell is radar-confirmed and which is crowd-hunch — confidence as a visible column, always.
Integrate downstream, never duplicate.
AnKedai — shops that know they'll close
A flood band crossing a merchant cluster flips AnKedai's surplus board into preview mode: Tonight's stock either sells at the pre-rain discount or donates through the Masrif dana rail before the nullah decides for them.
The loss-mitigation handshake, off the ledger.
State & federal overlays — licensed, never joined
A state disaster agency or NADMA wanting the cross-council picture buys a read-only overlay product: each contributing instance publishes what its council chooses to publish, aggregated at the edge. Aggregation is a separate deal, signed separately, joins nothing.
The doctrine survives the org chart.
Built on the Antrex spine
Shared primitives, invisible
Ledger engine, k-anonymizer, offline sync, credential rails — reused as code. No council ever sees or contracts with a platform; they buy AnBanjir.
Offline centre, cloud edge
Every response-critical state transition is local-first. The cloud is for history, learning and the public map — never for tonight's gate status.
The engine that runs dark was proven at a village gate. See where it came from.
Ready to build something intelligent?
Let's engineer your next product — from idea to launch.