Aviation Human Factor & Safety Architecture

Privacy-by-design Safety Management System (SMS) backend that aggregates five operational silos — FRMS/ULR fatigue (SAFTE-FAST-like biomath + EASA ORO.FTL.205 FDP limits), NOTECHS II, LOSA peer observations, 4-level HFACS, and operational KPIs — across three trust zones separated by Postgres Row-Level Security. Enforces identity separation, unlinkable micro-pulse submissions via a separate submission-token ledger, k-anonymity (k=5) on management aggregates, and Just Culture hashing. FastAPI + SQLAlchemy 2.0 + Alembic + Keycloak OIDC; React/TS frontend (4 role tabs); 104 tests; end-to-end coverage.