LAYER 0

Layer 0 AI Security: Hardware Enforcement at the Energy Path

Layer 0 AI Security: Hardware Enforcement at the Energy Path

by Michael Bridges, Founder, Sovereign Kinetic

Layer 0 is the physical enforcement boundary between authorization and energy or actuation. The software stack can authorize an action; Layer 0 determines whether the machine can physically execute it. Every layer above it decides in software. Layer 0 is where a decision becomes conduction: where energy is permitted to reach an actuator, a data bus, or a compute rail, or is physically denied.

The stack above, the boundary below

Layer 4 is the AI model and its policy. Layer 3 is identity and authorization. Layer 2 is runtime and agent control. Layer 1 is compute and attestation. Layer 0 is energy-path enforcement, the layer that acts on the machine itself. Every layer above Layer 0 can be spoofed, exploited, or talked into a rogue action, because each one is software making promises about other software. Layer 0 is the only layer whose decision is enforced by physics rather than by code.

Permission as physics

The governed energy path is normally dark: a series interrupter built on enhancement-mode wide-bandgap FETs is non-conductive by default. A galvanically isolated hardware arbiter issues a cryptographic authorization token renewed 100 to 1,000 times per second, the Sovereign Heartbeat. Conduction exists only while verification succeeds. Loss, corruption, replay, or timeout of the heartbeat severs the energy path with a target response under 1.2 milliseconds, within a configured timeout window of 1.0 to 5.0 milliseconds, independent of the host operating system.

Stop, Kill, and Dynamic Switch

STOP is not a software command; it is a physical state transition. STOP is a controlled transition to a safe state: authorization is revoked and the gate opens.

KILL is the immediate removal of authorized conduction where the governed architecture permits it: a critical condition triggers hardware enforcement and the energy path is physically interrupted. DYNAMIC SWITCH continuously evaluates authorization and operating conditions and maintains, changes, or removes conduction accordingly.

No valid authorization, no permitted conduction.

Detection and forensics at the rail

Instruction-to-wattage anomaly detection monitors the energy signature of computation in real time, so a shift from an authorized workload to a malicious one is visible at the rail itself. Every arrest event is recorded by a hardware-isolated forensic notary: a write-once ledger, galvanically isolated from host memory, that issues an immutable arrest certificate documenting the conditions that preceded the intervention.

A patent-pending architecture

This architecture is patent-pending. The core filing is US non-provisional application 19/559,330, the FARADEX Architecture, extended by continuation-in-part filings.

The filed claim language behind the terms used on this page, including the normally-dark interrupter, the Sovereign Heartbeat, instruction-to-wattage anomaly detection, and the hardware-isolated forensic notary, is documented on our patent portfolio page.

Nothing is issued; verify filings against USPTO Patent Center before relying on them.

The choice in front of us

Between a model and the world there has to be one layer that does not reason, does not update, does not persuade or get persuaded, and does not share a failure domain with anything above it. A layer where authorization is physics. The machines are getting bodies. Let’s make sure permission comes first.

Michael Bridges is the founder of Sovereign Kinetic LLC. FARADEX is patent-pending; this essay describes filed applications and design intent.