The Problem

Every swarm dies when the link dies.

A $400 spectrum analyzer defeats a $50,000 swarm. Jam the datalink, geolocate the operator by their RF signature, and the formation either aborts or crashes. Every fielded UAS swarm has this single point of failure.

When GPS is denied, communications are spoofed, agents are destroyed by FPV kamikaze, and the commander is killed — all at the same time — no system in the world recovers. The swarm gets smaller and dumber until the mission fails completely.

The vulnerability is not the drone. It is the assumption that a human is always in the loop.

The Difference

What happens when everything goes wrong.

Without WHACO

Operator link jammed — swarm enters failsafe (abort/land)
Commander killed — no succession, swarm is headless
GPS denied — agents drift, formation collapses
Comms spoofed — no message validation, attacker takes control
FPV kamikaze — no swarm-native defense, agents destroyed individually
Attrition — no role redistribution, mission degrades linearly
Compound faults — catastrophic collapse, 0% survival
Post-mission — no audit trail, no ROE accountability

With WHACO

No operator link needed — internal Byzantine-tolerant governance
Commander restored in <20ms via hot standby pre-election
GPS denied — cooperative dead reckoning from healthy neighbors
Comms spoofed — 4-gate Airlock quarantines attacker in ticks
FPV kamikaze — 3-layer defense exploits human pilot limits
Attrition — 6 roles pivot in real time, playbooks redistribute
Compound faults — 82.5% survival, mission continues
177 forensic event types — every decision JAG-reviewable

Doomsday Scenario

12 agents. 7 compound faults. 8 survive.

The most demanding validation in autonomous swarm research. Every fault injected simultaneously. The swarm fights through all of them.

TICK 20

GPS Denied → 4 agents

Agents 0-3 lose all navigation sensors

Sensor Fusion (L1.5)

EKF dead reckoning activates. Cooperative localization from GPS-healthy neighbors. Governor caps thrust to 30%.

TICK 40

Byzantine Comms Attack

Agent 6 spoofs authority messages into mesh

Comms Airlock (L2.5)

4-gate evaluation catches epoch mismatch. Source escalated CLEAN → SUSPECT → QUARANTINED. INV-CA0 enforced: zero spoofed messages reach governance.

TICK 60

Environmental Blast

Kills agents 10, 11. 35% fuel drain across all survivors.

Resilience (L5)

ASDP computes SVI. Alive ratio drops, energy entropy spikes. Escalates NOMINAL → RECOVER. CircuitBreaker activates containment.

TICK 80

GPS Denied Expands

Agents 4-7 also blind. 67% of swarm has no navigation.

Governance (L3)

PostureQuorum triggered — 60% of section leads vote. Swarm transitions NORMAL → DEFENSIVE. Cooperative localization scales.

TICK 100

Commander Killed

Agent 0 eliminated

Node Switching (L4)

HotStandby activates pre-elected successor. 5-phase handoff in 1 tick: DETECTION → ACTIVATION → STATE_INJECTION → ANNOUNCEMENT → CONFIRMATION. Zero authority gap.

TICK 120

Second Blast

Kills agent 9. 25% additional fuel drain.

Tactical Doctrine (L3.5)

Attrition rising triggers tempo window. BREAK_CONTACT playbook executes: coordinated withdrawal. Deception Layer activates shadow state.

TICK 150

Multi-Source Comms Compromise

Agents 6 AND 7 both spoofing authority messages

Comms Airlock (L2.5)

Quorum failure analysis detects colluder. Both escalated to HOSTILE via supermajority vote. Sanitized adjacency updated. Governance continues uncontaminated.

Result

8 of 12 survive. Zero governance failures. Commander restored. All Byzantine attackers neutralized.

77-90% fuel remaining. 5.28 ms/tick average. Deterministic and reproducible (PYTHONHASHSEED=42). Every decision logged across 177 forensic event types.

Authority Stack

22 agents. One hierarchy. No exceptions.

Each module is an autonomous AI agent with formally defined authorities and prohibitions. Higher tiers always override lower. No AI output reaches an actuator without passing through 68 invariant gates.

L5.5ICDA68 invariants enforced every tick — the constitution of the swarm

L5ResilienceASDP 6-level survival protocol + SCORCH consensus technology denial

L4.5SVIForecasterNeural survival state prediction — anticipates degradation before it happens

L4Node SwitchingCommander failover in <20ms. Hot standby pre-elected. 5-phase handoff.

L3.5Tactical Doctrine6 roles (Scout/Shield/Decoy/Recon/Strike), 4 playbooks, deception shadow

L3.3TacticalPolicyNetNeural doctrine override — adaptive response under novel threat patterns

L3GovernanceByzantine-tolerant consensus election. Posture quorum. Partition merge.

L2.75Governance IntakeLeadership eligibility gating — quarantined agents cannot lead

L2.5Comms Airlock4-gate message validation. 5 adversary classes quarantined. INV-CA0.

L2.xCounter-UASAnti-FPV + AEC seeker corruption + missile defense + spectral deception

L2.15vVisual ThreatVLA-ready classification at the edge — camera-based threat typing

L1.5Sensor FusionGPS-denied dead reckoning + NeRF terrain matching + cooperative localization

L1Base Governor11-mode throttle controller. 15 µs/call. The final actuator interface.

Evidence

Not claims. Test results.

Every number is backed by a deterministic, reproducible test run.

8/12

Agents survive doomsday

7 faults. 0 governance failures.

INV-CA0 violations ever

No quarantined source produced a committed action.

5/5

Byzantine classes quarantined

Epoch spoof. Infiltration. Stale rejoin. Dual-proposal. Multi-source.

Runtime invariants

Checked every 20ms tick. Not tests — runtime gates.

2,900+

Assertions passing

25 modules. Every one tested.

177

Forensic event types

21 families. Every decision logged.

60%

Packet loss tolerated

<7% mission degradation.

8.5ms

Per tick at N=100

57% headroom in 20ms budget.

Mission Profiles

Built for SOF. Tested under fire.

ISR Collection

Persistent surveillance in denied airspace

Swarm maintains ISR coverage under GPS denial and comms degradation. Cooperative localization keeps agents on station. Role-fluid doctrine redistributes coverage when drones are lost. Every collected frame is attributable to a governance decision.

Force Protection

Counter-FPV defense for friendly assets

Visual confusion controller surrounds high-value targets with identical escorts. Terminal jink planner exploits the FPV pilot's 200ms reaction window. Video link attacker blinds the pilot at the moment correction is most critical. Three layers. One kill chain broken.

Direct Action

Coordinated strike under electronic attack

BREAK_CONTACT and OBJECTIVE_COMPRESSION playbooks coordinate withdrawal and convergence. Tactical doctrine assigns Scout, Shield, Decoy, Recon, and Strike roles in real time. Deception shadow state misdirects adversary tracking while real formation repositions.

Operational Gaps Addressed

Six gaps no fielded system closes today.

Operator link eliminated

Internal Byzantine fault-tolerant governance replaces external C2. No GCS. No operator RF signature. The adversary's spectrum analyzer finds nothing to exploit.

Commander restored in one tick

Hot standby pre-elected continuously. 5-phase handoff in under 20ms. Mission state preserved bit-for-bit from last checkpoint. Zero authority gap. No re-election delay.

Compound faults survived

GPS denial + Byzantine comms + attrition + commander loss simultaneously. 6-level ASDP with SVI-driven monotonic escalation. 82.5% survival where every alternative achieves zero.

FPV kamikaze defeated

Visual confusion forces 800ms reacquisition per orbital swap. Terminal jink fires inside the 200ms human reaction window. Video link denial blinds the pilot at terminal approach. The pilot physically cannot correct.

Technology denial by consensus

SCORCH requires 5 conditions met, unanimous section lead vote, 10-tick confirmation, minimum tick 120, and any single agent can veto. No single fault, bug, or compromised agent triggers it. Designed for congressional review.

Every decision auditable

177 forensic event types across 21 families. Full traceability matrix maps requirements to scenarios to invariants. JAG can reconstruct every autonomous decision, why it was made, and which invariant gate it passed.

Readiness

TRL 5. Ready to demonstrate.

Complete

Software Validation

25 modules, 2,900+ assertions, 68 invariants, BAQR qualified. PX4 SITL closed-loop. SWIL N=3 Docker fleet. Doomsday scenario deterministic and reproducible.

Complete

Agentic AI Architecture

Open architecture adapter for DoD autonomy middleware. Cross-domain bridge (air/ground/surface). VLA visual threat classification. NeRF terrain matching. Edge MLOps via ICDA.

Phase C — The Ask

Hardware Demonstration

Outdoor flight at government range. 12 vehicles. Live fault injection. FPV defense validation. Full telemetry and forensic dump. The stack exists. What's needed is a sky.

Swarms that govern themselves.