A proof of concept for scoped, transactional admission.
The RPOW Gateway demonstrates an admission protocol that provides scoped access to restricted resources using Bitcoin transactions over a Lightning node. A successful admission does not grant universal trust: it creates a narrow, time-bound lease for a specific person, network, client, and service.
The transaction acts as an accountable signal within a larger control system. Identity, policy, device state, segmentation, audit, and operator authority remain essential. The prototype asks whether access can carry an explicit cost, a defined scope, and an observable lifecycle—from admission through session end.
Cyberspace needs controls that impose consequence—not just another credential check.
A conceptual synthesis informed by research on physical constraint and power projection in digital systems, alongside technical assessments of contested operational environments. This prototype is independent research; the framing below is not an official Department of War position.
I / Challenges
Challenges
What current access models leave unresolved
Digital probes can be cheap, repeatable, and globally distributed.
Credentials often imply more trust than the immediate task requires.
Defenders must correlate identity, session, network, and payment evidence after the fact.
II / Objectives
Objectives
What the gateway is designed to test
Bind admission to a specific identity, destination, and duration.
Add an accountable economic signal without replacing zero-trust controls.
Give operators immediate authority to observe, suspend, revoke, and investigate.
III / Why you should care
Why you should care
Criteria for an operationally useful result
Bounded: compromise does not become unrestricted movement.
Measurable: each decision produces reviewable telemetry.
Reversible: human operators retain the final enforcement action.
03 / Questions answered · The test, in plain language
Three questions that determine whether the idea matters.
01How does the RPOW Gateway protect DoW assets in cyberspace?
It places a policy-enforcing admission layer in front of protected resources. Access is constrained by identity, card possession, network policy, destination, and session duration. A Lightning-backed hold adds an accountable transaction to the decision, while segmentation and operator controls limit what an admitted user can reach.
02Does it actually work?
The proof of concept demonstrates the full control loop: authenticate, evaluate policy, create a scoped admission, expose only the approved client and service, collect AU-6-relevant telemetry, and end or revoke the session. That proves technical feasibility in the lab—not production readiness, universal security, or formal authorization.
03Can access be bounded, observable, and economically accountable at the same time?
That is the central experiment. RPOW connects a measurable transaction to a narrow access lease and a complete operator-visible lifecycle. The result gives defenders one record that can link who entered, what they were allowed to use, what occurred, and how the session ended.
04 / Operator telemetry · Information available to cyber operators
A shared view of access, security events, and enforcement.
Inside an RPOW-protected network, operators can review admission decisions, active sessions, AU-6 security events, network enforcement, and audit health—then suspend or revoke access from the same operational context.