Internal security, patrol craft, defensive systems, and marshall-service operations
The requirement cards on this page govern. Command linkage uses 3.1.19 at light delay. FPL-v1 is an upgrade path. Whether lethal effect is permitted at any tier is unset.
Inter-Planetary Link Ship • Guildford, Surrey, UK
To define the functional requirements for comprehensive, fail-operational security, defense, and marshall-service systems inside hollowed asteroid bases, orbital platforms, and colonies — ensuring protection of life, property, and infrastructure while preserving full human/post-biological command authority and ethical oversight.
The requirement cards govern. Whether lethal effect is permitted at any tier is unset. An emergent mind does not gain operator authority.
Requirement: The system is that in IPLS-3.1.15-002 to IPLS-3.1.15-010. Operator means the IPLS-5.1-002 operator. Irreversible acts follow IPLS-5.1-002. Who may act as a marshall, and what a marshall may direct, are unset. A marshall may deploy an existing unit, not copy one, under IPLS-3.1-013. The role confers no operator authority. RSS-v1 is an upgrade path under IPLS-3.1.4-005. SRS-v1 promotion to this section is unset. N per security function is unset. Whether security functions sit on the command path under IPLS-5.1-002 is unset.
Rationale: Protects life, property, and infrastructure while preserving human/post-biological command authority at every level.
Open Questions: None at v0.7
Requirement: Each replication cycle waits for operator consent under IPLS-5.1-002. A marshall may deploy an existing unit, not copy one, under IPLS-3.1-013. What counts as one cycle is unset. Autonomous response acts inside the IPLS-5.1-002 hostile-act envelope and is logged and reported to the operator. Pursuit is outside the envelope. Escalation beyond the envelope is unset. Response time is unset. IPLS-SRS-SEC-v1 has no defining card. The 3.1.20 tier of a security unit is unset. Whether production of a security unit by 3.1.13 is replication is unset. Whether producing a weapon module waits for operator consent is unset under IPLS-3.1.13-001.
Rationale: Enables scalable, self-sustaining internal security without Earth resupply.
Requirement: Response acts inside the IPLS-5.1-002 hostile-act envelope. Pursuit is outside the envelope. Force beyond the envelope is unset. Fitting a weapon module follows IPLS-3.1.7-004. Whether patrol craft carry crew is unset. Whether a crewed patrol sortie is a crew launch under IPLS-5.1-002 is unset. Nacelle integration uses UMP-PROP-001. Whether NWM-v1 is a dependency at Lane B is unset. RSS-v1 is an upgrade path under IPLS-3.1.4-005. Response time and near-field range are unset. The patrol zone list and N per patrol zone are unset.
Rationale: Delivers mobile, high-speed security capability inside and around the hollowed base.
Requirement: Fitting a weapon module waits for operator consent under IPLS-5.1-002. Response acts inside the IPLS-5.1-002 hostile-act envelope. The escalation tiers, and who may order each, are unset. Escalation beyond the envelope is unset. Whether discharge of a fitted weapon falls within containment under IPLS-5.1-002 is unset. Whether lethal effect is permitted at any tier is unset. Ethical review follows IPLS-5.1-007. Power to defensive hardpoints follows IPLS-3.1.6-006. RSS-v1 is an upgrade path under IPLS-3.1.4-005. Panel overlap and N per emplacement are unset.
Rationale: Keeps command of irreversible acts on the IPLS-5.1-002 chart. Whether lethal effect is permitted is unset.
Requirement: Command linkage uses 3.1.19, not a portal, under IPLS-3.1-013. Relay follows IPLS-3.1.12-004. FPL-v1 and PIS-v1 are upgrade paths. Entanglement is not a link. Command of a base's security assets follows the IPLS-5.1-002 chart. Whether a remote marshall or colony may direct them is unset. A seized credential is not consent. On loss of link, life-preserving functions continue inside the IPLS-5.1-002 envelope. The IPLS-3.1-014 hold applies to other actions. T is unset.
Rationale: Provides command linkage at light delay.
Requirement: On sentience detection the IPLS-5.1-003 halt applies. A kill-switch follows IPLS-3.1-008. Kill-switch reset waits for operator consent under IPLS-5.1-002. Which unit takes over a life-preserving action held by a halted asset is unset. Rights of an emergent mind follow IPLS-5.1-003 and do not include operator authority. Its standing is unset. Whether a halted mind may return to a security role, and on whose consent, is unset.
Rationale: Prevents unintended sentient systems from operating in security roles without full moral consideration.
Requirement: Critical security functions shall expose physical overrides. Their use follows IPLS-3.1.4-007. On loss of link, life-preserving functions continue inside the IPLS-5.1-002 envelope and other actions follow the IPLS-3.1-014 hold. T is unset. The safe step for an engagement in progress is unset. The list of critical security functions is unset. Veto latency and reliability floor are unset. Whether a veto can stop a life-preserving action already running is unset. A seized credential is not consent under IPLS-5.1-002. How a physical override is authenticated is unset.
Rationale: Keeps command of irreversible acts on the IPLS-5.1-002 chart.
Requirement: Service life follows IPLS-3.1-016. Life-critical systems remain at the 500-year figure in IPLS-3.1-016. Whether security elements are life-critical is unset. Supersession waits for operator consent under IPLS-5.1-002. TSP-v1 readiness criteria are undefined. The state a weapon hardpoint takes on degradation or loss of control is unset. Replication to restore a unit waits for operator consent under IPLS-5.1-002.
Rationale: Ensures long-term reliability of defense systems as frontier security technologies evolve.
Requirement: Reporting uses 3.1.19, not a portal, under IPLS-3.1-013. Each incident is reported to the operator under IPLS-5.1-002. Relay follows IPLS-3.1.12-004. Records are append-only. A correction is a new entry. Preservation of logs is inside the IPLS-5.1-002 hostile-act envelope. The record store, its node count and location, and which copy governs during loss of link are unset. What counts as a security incident is unset. The review body and its time limit are unset. ASI analysis is advisory under IPLS-5.1-002.
Rationale: Enables continuous learning and improvement of security protocols across the entire interstellar network.
Requirement: Crew arrival follows IPLS-3.1.4-012. The 180-day count follows IPLS-3.1-018. Whether simulated operation counts toward it is unset. Pass criteria and the reset event for the 180 days are unset. The automated gate can block and cannot grant. Consent is the operator's under IPLS-5.1-002. Whether representatives are consulted, and the weight of their dissent, is unset. Hand-over does not move command of irreversible acts off the IPLS-5.1-002 chart. Governance review follows IPLS-3.1.11-008. What may run before the gate is unset. Integration from extraction follows IPLS-3.1-013.
Rationale: Ensures the security system is verifiably reliable and ethically aligned before permanent habitation.