Who it protects · Government
A nation needs a stop authority it owns, not one it requests.
AI now sits inside grids, defence, logistics, benefits and courts — much of it foreign-operated, most of it with no domestic off switch. SEARIN Sovereign gives a state federated interlocks, quorum authority mapped to constitutional roles, and evidence an oversight body can read without asking the operator.
n-of-m
Quorum authority across named offices
24/7
Staffed national severance watch
Tier 4
Hardened enclosure, EMP and tamper resistant
Read-only
Independent audit channel for oversight
What goes wrong here
The failures this deployment is built against.
Every control below exists because one of these has already happened somewhere, to someone with the same estate as yours.
Critical infrastructure run by models nobody here controls
Grid balancing, water treatment, rail scheduling and port logistics increasingly depend on models operated abroad or by contractors. Federated interlocks place a domestic severance point at each operator, under national authority.
A shutdown request that depends on a foreign company
Asking a vendor to disable a model is a commercial negotiation during a national emergency. A sovereign interlock removes the negotiation — the state severs its own substrate.
Statutory duties with no evidence to satisfy them
Emerging regimes require demonstrable human oversight, tested emergency shutoff and prompt incident reporting. Rehearsed cuts with signed custody records are what turns a written policy into compliance.
Concentrated authority becoming the risk
A national kill switch held by one office is itself a hazard. Quorum thresholds, separated key custody and a read-only oversight channel mean no single official can sever a region unilaterally or quietly.
How it works here
The severance chain, stage by stage.
The same seven stages run everywhere. What changes is who holds the keys, what is in scope and how fast the cut has to land.
A national register of autonomous systems in public function
Departments, operators and licensed contractors declare AI systems acting in critical or public-facing roles. Each is classified by sector, criticality and the substrate that keeps it running.
Federated interlocks at every operator
Sovereign SV-C interlocks are installed at operator sites, data centres and regional exchanges, each answerable to the national authority while remaining physically held on the operator's premises.
A national severance watch, staffed continuously
Channel state across all federated sites is aggregated into one operations picture, with graded alerts for capability expansion, cross-border replication and loss-of-control indicators.
Quorum of named constitutional roles
Arming a regional or national scope requires an n-of-m quorum of designated office holders. Thresholds, roles and escalation paths are published; every arming attempt is recorded whether or not it proceeds.
Severance by sector, region or the whole estate
Cuts are executed in declared scopes — one operator, one sector, one region, or national. Cross-border replicas are pursued in parallel through the replica hunter and mutual-assistance channels.
Confirmation from each federated site, independently witnessed
Each interlock reports channel state back to the watch and, in parallel, to the read-only oversight channel — so the confirmation an auditor sees does not pass through the operator or through SEARIN.
Restoration under the same quorum, staged by sector
Return to service requires a fresh quorum decision, proceeds sector by sector with essential services first, and is recorded as a separate signed act from the cut.
Scope
What the switch touches — and what it never touches.
Scope is surveyed, written down and physically wired before the first rehearsal. Nothing outside the covered list can be cut.
In scope — severable
- AI systems in grid, water, rail, port and logistics control
- Defence and border decision-support systems
- Public-service automation in benefits, tax, health and justice
- National and regional data-centre capacity hosting those systems
- Sovereign cloud regions, model endpoints and weight stores
- Cross-border replicas under mutual-assistance agreements
Excluded — physically barred
- Emergency services dispatch and public warning systems
- Hospital life-critical and clinical-safety equipment
- Military nuclear command, control and communications
- Civil aviation and maritime safety-of-life systems
- Electoral systems outside a declared emergency
- Anything not entered in the national severance register
Authority
Who is allowed to pull it.
A cut is never automatic and never anonymous. Authority is held by named people in named roles.
Quorum, not a single hand
National scopes require an n-of-m quorum of named offices. Keys are physically separated across ministries, so no single department can sever a sector on its own.
Statutory oversight built in
An independent read-only channel streams channel state and ledger entries to the designated oversight body in real time. It cannot arm, cut or restore — only see.
Sunset and review on every cut
A national severance carries a declared duration. Continuing past it requires a fresh quorum decision, so emergency powers expire by default rather than by request.
Deployment
From first survey to first rehearsed cut.
What actually happens, in order, once you engage SEARIN.
Phase 01
National lifeforce assessment
Eight to sixteen weeks. Sector-by-sector inventory of autonomous systems in public function, dependency mapping to substrate and operators, and a proposed severance register.
Phase 02
Legal and authority design
Quorum thresholds, key custody, exclusions and the oversight channel are mapped to the constitutional and statutory framework, then published.
Phase 03
Federated installation
Sovereign SV-C interlocks are installed at operator and regional sites in hardened enclosures by cleared certified partners, each acceptance-tested and registered.
Phase 04
National exercise programme
Shadow drills escalate to witnessed sectoral live cuts on a published cadence, with oversight observers accredited and results reported to the legislature.
Evidence you keep
Every cut leaves a record someone else can check.
- A signed national custody ledger of every arming, cut, verification and restoration
- The published severance register of covered systems and barred exclusions
- Independent oversight-channel records that never pass through operator or vendor
- Exercise reports with end-to-end timings, suitable for legislative reporting
Recommended plan
Sentinel Sovereign
Custom — priced per programme after evaluation
Includes the national assessment, authority and legal design, federated SV-C interlocks, the 24/7 severance watch, replica pursuit, the independent oversight channel and the national exercise programme. Scoped per sector count and site count.
Get a price
Request a quote for this deployment.
Scoped to your estate, with survey dates and what is barred from severance written down before anything is installed.