Project · Protected Environments

Critical Infrastructure Airspace Protection

Persistent awareness for the airspace around infrastructure that cannot afford blind assumptions.

Evidence levelE0Concept

Persistence ring

Interactive view

Data status: Illustrative

Twenty-four hours around an abstract asset. Each hour is continuous, degraded or unknown, and an unknown hour is drawn open and named in words. Pick a day, pick an hour, and read the shift log.

Asset
Day
Hour
00
State
Continuous
Freshness
Fresh

Hours: Continuous 22, Degraded 2, Unknown 0

Shift review log

  1. First shiftPartial
  2. Second shiftComplete
  3. Third shiftComplete

The days are invented and the asset is a glyph. There are no distances, no layout and no real site.

Why this exists

A perimeter system tells you that something happened. It does not tell you how long it has been watching, how fresh each source is, or which hours nobody was looking. For a site that cannot rely on assumptions, the gaps matter as much as the events, and they are the part that stays invisible.

What it takes in

Each input adds something and leaves something unproven.

  • Independent sources around the siteWhat each source contributes over time, around a generalised asset. No perimeter, distance or layout is published here.
  • FreshnessHow recently each source reported, so that a stale view is told from a current one.
  • Unknown periodsThe hours in which no source could support a statement, recorded as unknown and not as quiet.
Source presence: Data table
ItemValue
Source AContributes
Source BContext only
Source CNot yet available
Source presence RD03Data status: IllustrativeEvidence level: E0 · ConceptQuestion answered: Which sources contribute to this state?Three source markers connect to one state and carry a text status each. A source being present does not mean it is trusted; the label says what it contributes.Limitation: Sources are generic and their positions are not geographic.

How it works

Three steps, in the order the state is formed.

  1. Combines independent sources around a generalised asset.
  2. Keeps a continuity log, hour by hour, with freshness and with unknown periods kept as their own state.
  3. Provides replay and a review log, so that a shift can hand over what was seen and what was not.
  • Unknown hours are shown as unknown, never as a calm period.
  • No geometry and no distances: the asset is a glyph.
  • A review log takes the place of an alarm.
  • Awareness only: no defeat, no response, no tasking.

Where it sits in the architecture

Critical infrastructure protection is an application of the core platform. It takes the unified airspace state around a site, keeps a continuity record of it and turns it into something a shift can review and hand over. It adds no sensing of its own and takes no action.

Read the architecture

Data flow: Data table
StageValue
1Sources
2Model
3Policy
4Interface
5Consumer
6Audit
Data flow CH13Data status: IllustrativeEvidence level: E0 · ConceptQuestion answered: How does data flow through the architecture?A pipeline of six stages, from sources to audit, shows how data moves through the model, the policy and the interface to the consumer, with a record kept at the end.Limitation: A conceptual flow. It does not describe a deployed system.

Evidence and assurance

What has been shown, to which level, and what has not.

Evidence ladder

  1. E0 · Concept reached
  2. E1 not reached
  3. E2 not reached
  4. E3 not reached
  5. E4 not reached
  6. E5 not reached

Project assurance panel

Mission and context
Give the operators of a site that cannot rely on assumptions a persistent, reviewable account of the airspace around it, including what was not known.
Primary contribution
A continuity log with freshness and explicit unknown periods, replay of events and a review log for handover.
Decision value
Lets a reviewer see not only what was observed but when nobody could have observed anything, and how current each source was.
Evidence status
Evidence level: E0 · Concept Concept and research direction only. No specification, prototype, test result or deployment is claimed.
Next validation step
Write down how continuity, freshness and unknown periods are recorded, then specify a first review of a synthetic day before any claim is made.
Behaviour when degraded
When a source goes quiet, the hours it covered alone are recorded as unknown and not as clear. A shift can read as complete only when none of its hours is degraded or unknown.
Role in integration
Would take the unified state from the core platform and the fusion engine, and send review records to the people on shift. It does not control any equipment.
Human review
A person reviews every shift log and every event that rests on a degraded or unknown period, and signs the handover.
Public-safe limitation
No site, perimeter, distance, sensor or response procedure is described. The ring on this page uses invented days.
Open unknowns
How unknown periods should be defined, how much freshness a source must show to count and how reviews should be organised across shifts are not yet known.

When inputs degrade

When a source goes quiet, the hours it covered alone are recorded as unknown and not as clear. A shift can read as complete only when none of its hours is degraded or unknown.

  • Normal
  • Degraded
  • Unavailable
System health over time: Data table
Time (relative)Component 1Component 2Component 3
1NormalNormalNormal
2NormalNormalNormal
3NormalNormalNormal
4NormalNormalUnavailable
5NormalNormalUnavailable
6NormalDegradedNormal
7NormalDegradedNormal
8DegradedNormalNormal
9DegradedNormalDegraded
10NormalNormalNormal
11NormalNormalNormal
12NormalNormalNormal
System health over time CH07Data status: Synthetic dataEvidence level: E0 · ConceptQuestion answered: How has system health changed?Three bands, one for each of three example components, show normal, degraded and unavailable periods as different fills and patterns, so state never depends on colour alone.Limitation: Periods are invented and say nothing about any real component.

Where it applies

  • A site where a gap in awareness is itself a risk

    Why it matters here
    A quiet log can mean a calm sky or a blind sensor, and the two look the same.
    What it contributes
    A record in which an unknown hour is visible as unknown.
    What it does not replace
    Physical security, or the people responsible for the site.
  • Shift handover

    Why it matters here
    What the last shift did not know is the most useful thing to tell the next one.
    What it contributes
    A review log that lists complete, partial and unknown periods.
    What it does not replace
    A conversation between the people on duty.

Role in the data flow

Would take the unified state from the core platform and the fusion engine, and send review records to the people on shift. It does not control any equipment.

Validation path

Write down how continuity, freshness and unknown periods are recorded, then specify a first review of a synthetic day before any claim is made.

Validation by stage: Data table
ItemDefinedPrototypeIntegratedField
Module ADoneIn progressNot startedNot started
Module BDoneNot startedNot startedNot started
Module CIn progressNot startedNot startedNot started
Validation by stage CH15Data status: IllustrativeEvidence level: E0 · ConceptQuestion answered: What is the validation status per stage?A grid of three example modules against four validation stages marks each cell as done, in progress or not started. Most cells are still open, as expected at this point.Limitation: Modules and statuses are placeholders and do not report real validation.

Limitations

  • This is a concept. There is no specification, prototype or measured result behind it.
  • The ring uses invented days. It shows how unknown periods are kept apart, not how any site behaved.
  • Awareness is not protection. Nothing here prevents, stops or answers an event.
  • A complete shift means that every hour had support from sources. It does not mean that nothing happened.

Related projects

Each link says why the two belong together.

Capabilities

Solutions

Technology

A continuity record, or an evidence ladder

Two ways of keeping awareness open to review.

A continuity record, or an evidence ladder
AspectCritical Infrastructure Airspace ProtectionDrone Detection & Airspace Intrusion Intelligence
What it keepsA record of each hour, as continuous, degraded or unknown.A record of each event, showing how far its evidence has climbed.
What it refusesTo treat an unknown hour as a calm one.To treat context as if it were evidence.
Who reads itThe shift that hands over and the shift that takes over.The reviewer who decides what, if anything, follows an event.