Home/Operating Model/Developer Hub & Sandbox
Operating Model · Data & Infrastructure

Developer Hub & Sandbox

Your integration passed every test you wrote — and every test you wrote was in a language you cannot read.

The engineering on-ramp to the firm's intelligence: API documentation, integration guides, and an isolated testing environment to build and verify against — with the validated-versus-routed boundary made explicit, provenance carried into your code, and testing done on safe, isolated data rather than the population's.

Access is provisioned through engagement. The developer experience is described by design — there is no public sign-up, instant key, or self-serve portal.
Exhibit 01 — Learn · Build · Test · CorrectlyITERATEREAD THE DOCSBUILD TO THE BOUNDARYTEST ON SAFE DATASHIP WHAT WORKSThe hub teaches the boundary; the regime does the validating. Build correctly, test safely, ship what works.
Why a hub

The usual way to evaluate a language API is the one way that fails for these languages.

Definition

Developer Hub & Sandbox is the engineering on-ramp to Ariana Nexus's intelligence: API documentation, integration guides, and an isolated testing environment, built atop the Cultural Intelligence API. The hub makes explicit what the API returns with validation behind it and what it routes to human judgment, so teams build to the boundary; the sandbox is isolated and runs on synthetic, safe data — never real population data — proving an integration's behavior rather than the correctness of the intelligence, which the firm's regime validates.

The standard developer loop is well worn: read the documentation, provision a key, call the endpoint, look at the output, and ship when it looks right. For high-resource languages the loop mostly works, because a developer can sanity-check the result. For the Afghan languages it breaks at the last step, and breaks silently. The engineer evaluating the integration cannot read Pashto, cannot tell a faithful answer from a fluent-but-wrong one, and so “looks right” means “looks like confident text” — which is exactly the failure this firm built an entire division to catch. The integration passes review, the tests are green, the latency is good, and the system ships a capability no one on the team was able to evaluate.

The deeper problem is that the developer is being asked to do something the situation makes impossible: validate, by eye, intelligence in a language they do not command. No amount of documentation fixes that, and a sandbox that simply lets them “try it and see” makes it worse, by dressing an un-evaluable guess in the credibility of a working response.

So the developer experience here is built around a different premise. Its job is not to help a team judge the intelligence by eye — that cannot be done from the outside — but to help them build correctly: to understand what the API returns with validation behind it and what it routes to human judgment, to integrate to that boundary rather than around it, and to test the integration safely without ever putting real population data at risk. The hub teaches the boundary. The regime does the validating. The team builds an integration that works.

24Languages and dialect bands you can build against
0Real or sensitive population data in the sandbox — synthetic and isolated, by design
100%Of validated responses carrying their provenance and status into your code
1Governed environment, Atlas, behind every sandbox test and production call
The doctrine
Working code is not a working integration.

Clean code returning fluent text on time is not an integration that serves the user — not in a language the team cannot read. The hub exists to close that gap: build to the boundary, test safely, and let the regime validate.

The hub

Reference and guides that teach the boundary, not just the syntax.

API documentation.
Reference for the capability surface — what each capability family returns, the provenance and validation status carried on every response, and how the line between validated data and routed judgment is expressed. The documentation makes the boundary legible before the first call.
Integration guides.
Patterns for the integrations teams actually build — consuming validated lookups, verifying a Sign-Off Mark or attestation, and submitting work that routes into the regime and returns a validated result — so a team builds to the boundary by design rather than discovering it in production.
The boundary, made explicit.
The single most important thing the hub teaches: what the API can answer programmatically and what it routes to human judgment. An integration that treats a routed judgment as if it were a data lookup is built wrong, and the guides exist so it is not.
Versioning and changelog.
Versioned interfaces and a record of changes, so an integration is built against a known version and informed when it changes — the firm's versioning discipline, expressed where developers meet it.
The sandbox

A safe place to prove the integration — and an honest account of what it proves.

An isolated environment.
A sandbox separated from production and from any real engagement data, where a team can build and exercise integration patterns without touching anything sensitive.
Synthetic, safe data only.
Testing runs against synthetic or safe sample data — never real population data. The sandbox is for your code, not for the community's records, and nothing about that is negotiable.
Scoped sandbox access.
Sandbox credentials scoped and separate from production, so experimentation never reaches live systems or real data, and the blast radius of a test is a test.
The honest limit.
The sandbox proves your integration behaves — requests, responses, error handling, and the boundary between validated and routed. It does not let a team validate Afghan-language output by eye, and it never pretends to: confirming the intelligence is correct is the work of the firm's validation regime, not of a green test in a language no one in the room reads.
Connected is not the same as connected correctly

The hub's job is not to get you connected. It is to get you connected correctly.

Anyone can reach an endpoint. Building an integration that serves the user, respects the people in the data, and survives a security review takes more than a key — and the hub is built to provide it.

Provenance into your code.
Validated responses carry their provenance and status across the endpoint, so your system can record and respect what it received — the standard travels past the call, into your stack.
Build to the boundary.
The guides make the validated-versus-routed distinction explicit, so the integration you ship serves validated answers and routes what needs judgment — never one that launders a guess as a fact.
Handling inherited from Atlas.
Sandbox and production alike inherit the firm's environment — encryption, residency by jurisdiction, Gate 4 over sensitive data, no real population data in the sandbox, and a Business Associate Agreement before any protected health information in production.
Support that knows the domain.
Integration support from people who understand both the interface and the languages, so a question about behavior gets an answer grounded in the domain rather than a generic reply.
In practice

Build it right the first time, and prove it without risking anyone.

For the engineering team, the hub changes what an evaluation and an integration can be trusted to produce. You learn the API by its boundary, so you build to consume validated data and route what needs judgment — instead of discovering, in production, that you treated a routed question like a lookup. You prove your integration in an isolated sandbox on synthetic data, so a proof of concept never puts a real person's record at risk and never trips your own security review.

Validated responses carry their provenance into your stack, so what you ship can record what it received. And when you need an answer about behavior, you get one from a team that understands the languages, not a generic queue. The result is the integration you actually wanted: one that does not just return a response, but serves the user it was built for.

What the team receives
Build correctly, not just quickly.Documentation and guides that teach the boundary, not only the syntax.
A safe place to prove it.An isolated sandbox on synthetic data — a proof of concept that risks no one.
Provenance in your stack.Validated responses carry their status into your code, ready to record and respect.
An integration that works.One that serves the user — not merely one that returns a response.
Stewards

The people accountable for the boundary.

The platform is built and stood behind by named people — engineering, validation, and security — not an anonymous queue. The same accountability that runs through the firm runs through the interface you build against.

Wasil PerozHead of Platform EngineeringOwns the Atlas environment, the Cultural Intelligence API surface, and the developer experience — the interfaces teams build and test against.
Maryam SafiDirector, Validation & Cultural ComplianceLeads the validation regime that stands behind every response — the boundary the hub teaches, and the judgment a passing test cannot replace.
Hussain AhmadLead, Security & Data GovernanceOwns sandbox isolation, scoped credentials, residency, and the controls a security review examines before any data moves.
The record
24Afghan languages and dialect bands
0Security incidents
100%Senior-led engagements
41+Trust Center documents
Begin

Start building — correctly.

For engineering teams that want Afghan-language capability in their systems, built to the boundary and proven without risking a single real record. Briefings are conducted under NDA, in Washington, D.C. or virtually.