Mission domain · Published capability
SATCOM Resilience: the mission cannot depend on the link
Satellite links are jammed, spoofed, and congested in exactly the fights where they matter most. A system that stops thinking when the link drops has built its single point of failure into orbit.
DaggerOS™ is air-gapped by architecture, so it does not depend on a satellite link to hold the operator picture or to decide. When SATCOM is available it is one input among many; when it degrades, the operator keeps a full local picture and keeps deciding. BlackEcho™ reasons entirely on-box, with no call that needs to reach a satellite.
How DaggerOS handles it
Resilience here is a consequence of the core design, not a feature bolted on. Because the decision core runs on-box with zero external calls, losing the link does not blind the operator or stall BlackEcho. The link becomes an asset to monitor — is it degraded, congested, or denied? — rather than a lifeline. The Human Gate and the decision record work identically whether the link is up or down.
Related subsystems
- DaggerOS — holds the full picture and decision authority on-box, link or no link.
- BlackEcho — reasons locally; no recommendation depends on reaching a satellite.
- Human Gate — the single authorization point, unchanged when connectivity drops.
Standards touched
Security controls are engineered to NIST 800-53 and the NIST RMF 800-37 process, and cyber-survivability aligns to DoDI 8530.01. Decision authority is held to DoDD 3000.09 whether or not the link is present.
Where it fits
SATCOM resilience matters to any force operating in contested or disconnected theaters. It is evaluated by program offices, SOF elements, and coalition partners planning for denied communications. See gps-denied operations and the coalition partners view.
Evidence
Roadmap. Air-gap independence from external links is a core property of the demonstrated system, but SATCOM-specific resilience handling is a planned surface and is marked honestly as not yet shown on its own.
FAQ
What happens to DaggerOS when the satellite link drops?
Nothing structural. The picture, BlackEcho, the Human Gate, and the record all run on-box, so a lost link does not blind the operator or stop decisions.
Does DaggerOS require SATCOM to function?
No. It is air-gapped by architecture with zero external calls. SATCOM, when present, is one input to monitor — never a dependency.
Is losing the link treated as an event?
Yes. Degradation or denial of the link is itself information the operator sees in context, informing how much to trust any inputs that did rely on it.