01 / Overview · What is the RPOW Gateway?

A proof of concept for scoped, transactional admission.

The RPOW Gateway demonstrates an admission protocol that provides scoped access to restricted resources using Bitcoin transactions over a Lightning node. A successful admission does not grant universal trust: it creates a narrow, time-bound lease for a specific person, network, client, and service.

The transaction acts as an accountable signal within a larger control system. Identity, policy, device state, segmentation, audit, and operator authority remain essential. The prototype asks whether access can carry an explicit cost, a defined scope, and an observable lifecycle—from admission through session end.

Bounded scopeEconomic signalOperator controlAuditable lifecycle
Admission protocol // live model
01IdentityCard + policy
request
02RPOWScoped admission
lease
03ResourceNetwork + service
Session lifecycle
  1. Card + PIN verifiedidentity
  2. Policy evaluated for network-1allow
  3. Lightning hold placed100 sats
  4. Lease issued: client + servicescoped
  5. Out-of-scope service requestdeny
  6. Card removed · session endedreturned
Lightning hold 100 SATS Returned at session end
Department of War, U.S. Pacific Command, and Supra Coder logos, in that order

02 / Strategic imperative · Why build it?

Cyberspace needs controls that impose consequence—not just another credential check.

A conceptual synthesis informed by research on physical constraint and power projection in digital systems, alongside technical assessments of contested operational environments. This prototype is independent research; the framing below is not an official Department of War position.

I / Challenges

Challenges

What current access models leave unresolved

  • Digital probes can be cheap, repeatable, and globally distributed.
  • Credentials often imply more trust than the immediate task requires.
  • Defenders must correlate identity, session, network, and payment evidence after the fact.
II / Objectives

Objectives

What the gateway is designed to test

  • Bind admission to a specific identity, destination, and duration.
  • Add an accountable economic signal without replacing zero-trust controls.
  • Give operators immediate authority to observe, suspend, revoke, and investigate.
III / Why you should care

Why you should care

Criteria for an operationally useful result

  • Bounded: compromise does not become unrestricted movement.
  • Measurable: each decision produces reviewable telemetry.
  • Reversible: human operators retain the final enforcement action.

03 / Questions answered · The test, in plain language

Three questions that determine whether the idea matters.

01How does the RPOW Gateway protect DoW assets in cyberspace?

It places a policy-enforcing admission layer in front of protected resources. Access is constrained by identity, card possession, network policy, destination, and session duration. A Lightning-backed hold adds an accountable transaction to the decision, while segmentation and operator controls limit what an admitted user can reach.

02Does it actually work?

The proof of concept demonstrates the full control loop: authenticate, evaluate policy, create a scoped admission, expose only the approved client and service, collect AU-6-relevant telemetry, and end or revoke the session. That proves technical feasibility in the lab—not production readiness, universal security, or formal authorization.

03Can access be bounded, observable, and economically accountable at the same time?

That is the central experiment. RPOW connects a measurable transaction to a narrow access lease and a complete operator-visible lifecycle. The result gives defenders one record that can link who entered, what they were allowed to use, what occurred, and how the session ended.

04 / Operator telemetry · Information available to cyber operators

A shared view of access, security events, and enforcement.

Inside an RPOW-protected network, operators can review admission decisions, active sessions, AU-6 security events, network enforcement, and audit health—then suspend or revoke access from the same operational context.

Public demonstrationSimulated telemetry only · No operational systems or live security data exposed

See it run.

Live Kibana Canvas presentation using synthetic demonstration events only. Operational evidence remains inside the protected environment.