Project · Protected Environments

Drone Detection & Airspace Intrusion Intelligence

Detect activity. Build context. Preserve the evidence behind the airspace state.

Evidence levelE0Concept

Event evidence ladder

Interactive view

Data status: Illustrative

One invented event. Add evidence and it climbs: observation, candidate, correlated, classified hypothesis. Remove a lower item and everything above it falls back. Switch on context chips and watch the rung stay where it is.

  1. ObservationSomething was seen by one source.Reached
  2. CandidateThe trace persists and is worth following.Not reached
  3. CorrelatedIndependent sources agree about it.Not reached
  4. Classified hypothesisA class is proposed, with a band, and remains open to review.Not reached
Evidence
Intrusion context

Context describes the event. It never moves it up the ladder.

Where the event stands

Observation

Confidence band: 15–45

The event and the bands are invented. The top rung is a hypothesis and never a confirmation.

Why this exists

A single-sensor alert runs two different claims together: something is there, and it is a drone with an intent. The first can be seen. The second cannot be read from one trace, and a system that blurs them makes every unidentified object look like a decision waiting to be taken.

What it takes in

Each input adds something and leaves something unproven.

  • Observations from independent sourcesRadio-frequency, passive spatial and optical traces of low-altitude activity, each with its own quality. No sensor or site is described here.
  • Persistence and timingHow long an event lasts, when it occurs and whether it recurs, kept as context and not as a verdict.
  • Gaps in coverageWhere no source could have seen, so that an absence of evidence is not read as evidence of absence.
Source presence: Data table
ItemValue
Source AContributes
Source BContext only
Source CNot yet available
Source presence RD03Data status: IllustrativeEvidence level: E0 · ConceptQuestion answered: Which sources contribute to this state?Three source markers connect to one state and carry a text status each. A source being present does not mean it is trusted; the label says what it contributes.Limitation: Sources are generic and their positions are not geographic.

How it works

Three steps, in the order the state is formed.

  1. Climbs one event up a ladder: observation, candidate, correlated, classified hypothesis.
  2. Attaches intrusion-context chips for persistence, timing and repetition, which describe the event and never move it up the ladder.
  3. Keeps an evidence record and a replay for every event, with the confidence band of each rung.
  • Unidentified is not a verdict: the top rung is a hypothesis with a band.
  • Context describes an event and does not promote it.
  • No response workflow, and no numeric trigger anywhere in the page.
  • Every event can be reopened with the evidence that put it on its rung.

Where it sits in the architecture

Low-altitude detection is an application of the core platform. It takes correlated observations from the fusion engine, places each event on an evidence ladder and keeps the record and replay behind it. It is awareness for review and not an instrument of response.

Read the architecture

Data flow: Data table
StageValue
1Sources
2Model
3Policy
4Interface
5Consumer
6Audit
Data flow CH13Data status: IllustrativeEvidence level: E0 · ConceptQuestion answered: How does data flow through the architecture?A pipeline of six stages, from sources to audit, shows how data moves through the model, the policy and the interface to the consumer, with a record kept at the end.Limitation: A conceptual flow. It does not describe a deployed system.

Evidence and assurance

What has been shown, to which level, and what has not.

Evidence ladder

  1. E0 · Concept reached
  2. E1 not reached
  3. E2 not reached
  4. E3 not reached
  5. E4 not reached
  6. E5 not reached

Project assurance panel

Mission and context
Keep detection, classification and intrusion context honestly apart for activity in the low-altitude airspace.
Primary contribution
Events on a four-rung evidence ladder with a confidence band at each rung, context chips that describe without promoting, and an evidence record with replay.
Decision value
Lets a reviewer see what an event rests on and what it does not, and prevents a persistent trace from being read as intent.
Evidence status
Evidence level: E0 · Concept Concept and research direction only. No specification, prototype, test result or deployment is claimed.
Next validation step
Write down the four rungs and the evidence each one requires, then specify a first review of synthetic events before any claim is made.
Behaviour when degraded
When a source drops out, the events that depended on it fall back to the highest rung that the remaining evidence supports, and the record says why. The chips stay, because they describe the event, but they do not hold it up.
Role in integration
Would take correlated observations from the fusion engine and context from the core platform, and send evidence records to the people reviewing. It triggers nothing.
Human review
A person reviews every event at the classified-hypothesis rung and decides what, if anything, follows. The system does not recommend a response.
Public-safe limitation
No sensor, site, procedure or numeric trigger is described. The ladder on this page uses an invented event.
Open unknowns
What evidence each rung should require, how context chips should be presented without suggesting intent and how events should be reviewed are not yet known.

When inputs degrade

When a source drops out, the events that depended on it fall back to the highest rung that the remaining evidence supports, and the record says why. The chips stay, because they describe the event, but they do not hold it up.

  • Normal
  • Degraded
  • Unavailable
System health over time: Data table
Time (relative)Component 1Component 2Component 3
1NormalNormalNormal
2NormalNormalNormal
3NormalNormalNormal
4NormalNormalUnavailable
5NormalNormalUnavailable
6NormalDegradedNormal
7NormalDegradedNormal
8DegradedNormalNormal
9DegradedNormalDegraded
10NormalNormalNormal
11NormalNormalNormal
12NormalNormalNormal
System health over time CH07Data status: Synthetic dataEvidence level: E0 · ConceptQuestion answered: How has system health changed?Three bands, one for each of three example components, show normal, degraded and unavailable periods as different fills and patterns, so state never depends on colour alone.Limitation: Periods are invented and say nothing about any real component.

Where it applies

  • A site that sees unexplained low-altitude activity

    Why it matters here
    A sighting is not an explanation, and acting on it as if it were is a decision made without evidence.
    What it contributes
    A ladder that shows how far the evidence has got.
    What it does not replace
    The people who decide what to do, or the authorities responsible for the airspace.
  • A review after an event

    Why it matters here
    What was known at each moment matters more afterwards than the final label.
    What it contributes
    An evidence record and a replay in which each rung is dated.
    What it does not replace
    An investigation.

Role in the data flow

Would take correlated observations from the fusion engine and context from the core platform, and send evidence records to the people reviewing. It triggers nothing.

Validation path

Write down the four rungs and the evidence each one requires, then specify a first review of synthetic events before any claim is made.

Validation by stage: Data table
ItemDefinedPrototypeIntegratedField
Module ADoneIn progressNot startedNot started
Module BDoneNot startedNot startedNot started
Module CIn progressNot startedNot startedNot started
Validation by stage CH15Data status: IllustrativeEvidence level: E0 · ConceptQuestion answered: What is the validation status per stage?A grid of three example modules against four validation stages marks each cell as done, in progress or not started. Most cells are still open, as expected at this point.Limitation: Modules and statuses are placeholders and do not report real validation.

Limitations

  • This is a concept. There is no specification, prototype or measured result behind it.
  • The ladder uses one invented event and invented bands. It shows how evidence is kept apart from context, not how a system performs.
  • A classified hypothesis is not an identification. Its band is wide on purpose.
  • The page describes awareness. It describes no countermeasure, response procedure or enforcement.

Related projects

Each link says why the two belong together.

Capabilities

Solutions

Technology

A continuity record, or an evidence ladder

Two ways of keeping awareness open to review.

A continuity record, or an evidence ladder
AspectCritical Infrastructure Airspace ProtectionDrone Detection & Airspace Intrusion Intelligence
What it keepsA record of each hour, as continuous, degraded or unknown.A record of each event, showing how far its evidence has climbed.
What it refusesTo treat an unknown hour as a calm one.To treat context as if it were evidence.
Who reads itThe shift that hands over and the shift that takes over.The reviewer who decides what, if anything, follows an event.