Decision speed is the weapon.

One board for a fleet’s real state, whether ready, waiting on a part or in the workshop, with fault reports from the vehicles and the workshop combined to forecast what will fail next. Parts are ordered ahead, workshop time is scheduled against the training and deployment calendar, and every order is approved by a person.

• Every vehicle’s real state on one board
• Faults combined to forecast what fails next
• Parts ordered ahead, approved by a person
• Workshop time scheduled against the calendar

A unit needs twenty-four vehicles ready for an exercise on Monday, and on Wednesday the board shows twenty-one. Fault reports point to three vehicles whose cooling pumps are likely to fail within two weeks; the agents draft the orders and a workshop plan, and the fleet manager approves them. Two pumps arrive from another depot on Thursday and are fitted on Friday. On Monday twenty-three vehicles are ready, and the twenty-fourth has a date.

Access decided at the moment of the request, per person, role, nation and device, against the label each document and dataset carries. Every read is recorded, a lost device is locked out at once, and a section released to one partner stays closed to another until someone with the authority releases it.

• Every document carries its own label and releasability
• Access decided per person, role, nation and device, at the moment of the request
• Every read recorded; a lost device locked out at once
• Releases made by people with the authority to make them

A shared plan for a joint exercise has five sections. A liaison officer from one partner sees four of them; the fifth, marked for national eyes only, stays closed. A contractor sees only the logistics annex. When an officer reports a lost tablet, every session on it ends within seconds, and the record shows exactly what was read from it and when.

Resupply runs planned across depots and sites with every vehicle’s capacity, the drivers’ hours and the state of the roads. When a road closes or a site’s needs change, the runs re-solve and every site sees its new arrival time.

• Runs planned with vehicle capacity, driver hours and road state
• A closed road or a changed need re-solves the runs
• Every site sees its own arrival time
• Every load tracked from depot to signature

Three field sites are resupplied from one depot each morning. At 07:40 the bridge on the main road is closed for inspection, and one site reports that its water treatment unit is down. The runs re-solve: two vehicles take the valley road, and the third carries water instead of fuel. Every site sees its new time, and all three loads are signed for before noon.

A quadrupedal platform that patrols a programmed route around a site, covering fence, gates, culverts and lighting by day and night, compares what it sees with the previous patrol, and sends anything that has changed to the security operations centre. It reports; a person decides and responds.

• A programmed patrol around the perimeter, day and night
• Every patrol compared with the one before
• Changes sent to the security operations centre with photographs
• It reports; a person decides and responds

At 02:10, on its third patrol of the night, the platform reaches a culvert on the eastern fence and finds a panel displaced, leaving a gap that was not there two hours earlier. It sends the photographs and the position to the operations centre and carries on with its route. The duty sergeant reviews the images and sends a patrol, who find storm damage and make the fence good before dawn.

Agents that draft options, surface the risk in each and rank them against stated intent, then stop. The release decision belongs to a person and is enforced at the authorisation layer. When the link degrades the reasoning continues locally and reconciles when it returns.

• Options drafted, risk surfaced, ranked against stated intent
• The release decision stays with a person, enforced at the authorisation layer
• Reasoning continues locally through a degraded link
• State reconciles when the link returns

At 18:00 a decision is needed on moving a field hospital ahead of a storm, with one intent: patients safe before it peaks. The agents draft three options, to move tonight by the north road, move at first light, or stay and reinforce the shelters, and rank the risk in each against that intent. At 18:05 the link degrades; the reasoning carries on locally instead of stopping with it. At 18:10 the commander releases the first option. No agent can: the boundary is enforced at the authorisation layer, not requested in an instruction. When the link returns at 18:30, the records reconcile.

Position held without satellites: inertial propagation, terrain reference and opportunistic signals fused into a single estimate that carries its own error bound and tells an operator how much to trust it.

• Position held without satellites
• Inertial propagation, terrain reference and opportunistic signals fused
• Every estimate carries its own error bound

A vehicle drives into a valley and loses its satellite signals. Its position is held on inertial, and the error bound grows, to about sixty metres, on the operator’s display instead of being hidden. At the bridge a known landmark is matched and the bound shrinks back to twelve. The operator always knows how far to trust the position. Here, a confident wrong answer is more dangerous than an honest uncertain one.

An append-only trail of every consequential action an autonomous system takes: what was proposed, what was known at the time, who released it and when. Accountability is a property of the architecture rather than a report generated later.

• Every consequential action appended to a trail that cannot be edited
• What was proposed, what was known, who released it and when
• Built in from the first line rather than reconstructed

At 14:00 an uncrewed platform proposes to survey route B. The proposal goes onto a trail that cannot be edited, together with what the platform knew at that moment: wind at 14 knots, battery at 78 per cent. At 14:02 the duty officer releases it, and the release goes on the trail too. At 16:20 an attempt to edit the proposal is refused and recorded. When the review asks who knew what, and who released it, the answer comes from the record, not from a report written afterwards.

Runways, taxiways, bridges and port aprons captured from the air and the ground into a measured model at first light. Damage is mapped and sized, the usable strip or route is identified, and the repair list goes to the engineers who decide it.

• Captured from the air and the ground at first light
• Every point of damage mapped and sized
• The usable strip or route identified
• The repair list handed to the engineers who decide

After an overnight earthquake, an airfield’s runway has to be assessed before relief flights can land. Two capture passes at first light map eleven points of damage and size each one. The model shows a strip of 1,500 by 23 metres that is clear once two holes are filled, and the engineers have the repair list, with quantities, by 07:30. The first relief aircraft lands before noon.

The civil authority’s requests, from shelters, hospitals and care homes, matched to the vehicles, crews and engineering teams sent to help, with each task tracked until it is closed. Residents are reached by message in their own language, and the authority sees what has been done without asking.

• Civil requests matched to vehicles, crews and engineers
• Every task tracked until it is closed
• Residents reached by message in their own language
• The civil authority sees progress without asking

A river is forecast to break its banks overnight. The civil authority asks for help with a care home of thirty-two residents, sandbags for a pumping station and water for a shelter. The requests are matched to two high-clearance trucks, an engineer section and a water bowser, and residents in the flood zone get a message in their language telling them where to go. By midnight the care home is evacuated, the pumping station is protected and every task is closed on the authority’s board.