Poseidon: the silicon substrate brain that runs the rest of the Mickai cooperative on operator-personalised hardware, filed at the UK IPO as patents 53 to 57.

A 26th brain joins the Mickai cooperative. It is not a specialist. It is the silicon they all run on.

Patent 02 specifies the cooperative architecture: an Arbiter at the centre, a Router decomposing complex tasks, a Reasoning brain that thinks, a Planning brain that simulates, and specialists across Agent Tooling, Knowledge and Memory, Artifacts, Vinis Voice, and the Governance Layer. Each brain is scoped, identified, signed, and audited independently. The composition is the patent. What was missing until 19 May 2026 was the substrate underneath the composition. The silicon the cooperative actually executes on. Today that gap closes. Mickai files patents 53, 54, 55, and 57 at the UK Intellectual Property Office, four filings that together specify the Sovereign AI SoC: an operator-personalised silicon root of trust at first power-on, host-acceptance attestation inversion, SIOS state-bundle migration with on-silicon audit chain continuity, and operator-controlled distribution endpoint bootstrap. The chip has a name. Poseidon. King of the silicon sea on which the rest of the cooperative runs.

Why Poseidon

Poseidon ruled the sea in Greek myth. He held the trident. He commanded depths that no surface power could touch. He answered to no terrestrial ruler. The brain Mickai filed today does that exact thing in silicon. The other brains in the cooperative are the surface intelligence. They reason. They decide. They speak. Each is a specialist in some cognitive domain. None of them owns the hardware they execute on. Poseidon owns the hardware. The keys live in operator-personalised silicon. The SIOS bundle is bound to the chip. The audit chain is rooted in the chip's identity. When the cooperative takes an action, Poseidon attests it. When the action is recorded, Poseidon signs it. The cooperative answers to the silicon. The silicon answers to the operator.

The naming convention in the Mickai cooperative until now has tracked the cognitive function: Arbiter, Router, Reasoning, Planning, Voice Biometric, Audit Ledger, Identity, Quorum, Permissions, Revocation. The names describe what each brain does. Poseidon does something different. Poseidon does not have a cognitive function. Poseidon is the substrate that has any of the cognitive functions possible at all. Naming the substrate as a god rather than a function marks that distinction. The cognitive brains carry the names of the functions they perform. The substrate brain carries the name of the power that lets the functions exist.

Five structural inversions against every prior secure-enclave design

Secure enclaves exist. Intel SGX. Apple Secure Enclave. AMD SEV. ARM TrustZone. Microsoft Pluton. Apple T2. Each is a real piece of shipping silicon. None of them is Poseidon. The difference is structural. Existing secure enclaves are built on five assumptions about who owns what. Poseidon inverts each of them. The result is a chip that looks superficially familiar to anyone who has read a TPM 2.0 specification and structurally completely different to anyone who has tried to deploy one in a sovereign AI workload.

Inversion one. Operator as root of trust.

In a conventional secure-enclave architecture the chip vendor is the root of trust. The chip is provisioned at the foundry with a key whose private half the vendor can in principle access, whose public half is endorsed by the vendor's certificate authority, and whose attestation chain terminates at a vendor-operated server. The operator who deploys the chip in a regulated workload is downstream of the vendor's trust position by construction. Mickai patent MWI-PA-2026-053, on the UK IPO register at GB2611698.8, inverts this. The silicon ships from the foundry with an empty identity store. At first power-on at the operator's premises, the operator presents an operator-generated module-lattice public key to the unit through a personalisation interface. The unit performs a one-shot irreversible fuse-burn binding of that public key into the silicon's identity store. From that moment the chip's cryptographic identity is the operator's identity. The vendor cannot reissue it. The vendor cannot reset it. The vendor is downstream of the operator's trust position, structurally and irreversibly.

Inversion two. Host attests to the silicon, not the other way.

Conventional attestation runs the other way. The silicon attests to the host. The host then forwards the attestation, signed by the chip, to a remote verifier. The verifier asks 'is this chip what it claims to be' and trusts the chip's answer because the chip is endorsed by the vendor. Mickai patent MWI-PA-2026-054, at GB2611699.6, reverses the asymmetry. The host attests to the silicon. On insertion of a removable Poseidon unit into a candidate host, the unit transmits a challenge nonce signed under the unit's operator-bound key. The host returns an attestation response: trusted-boot measurements, currently-loaded operating-system hash, TPM quote. The unit evaluates the response against an operator-signed host-acceptance policy stored on the unit. If the host meets the policy the unit unseals the operator's SIOS state for use on that host. If the host does not meet the policy the unit refuses and emits a structured rejection record. The evaluation is performed without any network call to any third party. The chip is the policy enforcement point. The host is the supplicant. Self-marking-its-own-homework is impossible by construction at the silicon layer.

Inversion three. SIOS state bundle resident on silicon.

Conventional secure-enclave designs treat the enclave as a small, trusted execution environment in which secrets can be unsealed and small computations performed. The application proper runs outside the enclave on the host. The enclave is a co-processor. Mickai patent MWI-PA-2026-055, at GB2611701.0, places the Mickai Sovereign Intelligence Operating System bundle inside the unit's protected boundary. The bundle comprises the operator-owned hash-linked audit-chain head pointer in MWI-PA-2026-022 (OAR) format, the operator-signed policy bundle, model selection preferences, and agent personality identifiers. The bundle does not move into the host's general-purpose memory in the open. The host coordinates I/O. The silicon executes the SIOS. The audit chain is rooted in the chip's measurements, not the host's word for it.

Inversion four. Audit chain persists across hosts.

If the silicon executes the SIOS, what happens when the operator moves the silicon to a new host? Conventional designs treat this as a re-attestation event. The chip starts fresh. The audit chain resets. The history is lost or archived in a way that requires the operator to trust the archival vendor. Mickai patent MWI-PA-2026-055 also includes the migration primitive directly. The chip carries its own audit-chain head across host boundaries. On removal the host-side bundle is cryptographically zeroised. On insertion into the next accepted host the unit unseals the bundle into host memory under session-encrypted transport, the audit chain head pointer is preserved, and every subsequent decision appends a typed event to the same continuous chain. A regulator inspecting the audit trail in 2031 cannot tell which physical host signed which record. The chain attests to the silicon, not to the chassis. This is the structural property that makes the operator's compliance posture portable across hardware refresh cycles, across data-centre migrations, across geographic relocations.

Inversion five. Operator-controlled distribution endpoint.

Conventional vendor-managed silicon is provisioned, updated, and revoked through a vendor-controlled distribution endpoint. The vendor pushes a firmware update. The vendor revokes a key. The vendor's distribution server is the single point of trust for the chip's evolution over its lifetime. Mickai patent MWI-PA-2026-057, at GB2611702.8, puts the distribution endpoint under operator control. At personalisation the operator writes into the unit's secure boot ROM a single trust anchor: the public key of a distribution endpoint operated under the operator's exclusive control. At first boot the unit performs a mutual-attestation handshake with the operator's distribution endpoint, downloads driver image and runtime artefact signed under the operator's distribution key, and records canonical hashes on the unit. Thereafter the unit boots in an air-gap operating mode. Local-only integrity check. No network egress required. Updates are operator-driven and optional. The unit may be operated indefinitely without further vendor interaction.

The cognitive cooperative runs unchanged on Poseidon

A reasonable question for any operator who has already deployed the Mickai SIOS in software is whether the silicon migration requires rebuilding the existing brains. It does not. The cooperative architecture filed under patent 02 is hardware-agnostic by claim. The Arbiter routes the same. The Router decomposes the same. The Reasoning brain reasons the same. Vinis speaks the same. The Audit Ledger appends the same. What changes is the substrate. The brains that used to run on commodity x86 or ARM CPUs now run inside Poseidon's protected boundary. The keys that used to live in TPM 2.0 on the operator's motherboard now live in operator-personalised silicon on the Mickai chip. The audit chain that used to be rooted in TPM measurements is now rooted in Poseidon's own root key. The operator gets the same cognitive surface with a stronger silicon foundation.

This matters for procurement. An NHS Trust that has deployed the Mickai SIOS in software for a clinical decision-support workload does not have to repurchase the SIOS to adopt Poseidon. The Trust replaces the host hardware with a Poseidon-equipped host. The SIOS bundle migrates onto the chip. The audit chain continues uninterrupted. The clinicians see no change in the user-facing experience. The Information Governance team sees a stronger evidence chain for any future Caldicott audit, MHRA inspection, or coroner's inquest. The Trust's compliance posture is now portable across any hardware refresh cycle the IT department subsequently runs.

Retail position and product line

Poseidon ships as a removable AI accelerator carrying the operator-personalised silicon root of trust. The retail price band is GBP 1,500 to 3,000 per unit at general availability, with operator licensing for per-chip activation included. The unit economics target hardware gross margin of 52 per cent at volume. The chip is the single largest revenue line in the Mickai LTD five-year proforma, with the Sovereign Hardware pillar (Poseidon SoC and Sovereign Hardware Workstation combined) representing approximately fifty per cent of Year-5 consolidated revenue.

Hyperscaler licensing is the upside leg. Patent 57 (operator-controlled distribution bootstrap) covers the case where a hyperscaler integrates the Poseidon attestation primitive into a cloud-AI offering and wishes to retain operator-controlled distribution semantics for their regulated customers. The licence terms are per-chip with a per-region royalty floor. The substrate position is defensive. Any AI vendor wanting regulator-defensible silicon for sovereign workloads must license from Mickai or build around four filed primitives that close the design space.

What Poseidon means for British procurement

Crown Commercial Service framework RM6263 and its successors permit the inclusion of silicon-attestation requirements in AI procurement contracts. The Cabinet Office Procurement Policy Note on AI Tools (PPN 02/24, with successors expected through 2026 to 2028) is explicit that operator-attested AI tooling is the preferred posture for any workload handling personal or sensitive data. Poseidon meets the spirit of that guidance at the silicon layer, not just at the software layer. A procurement officer specifying Poseidon-equipped tooling for an NHS Trust, a Ministry of Defence operational deployment, or a financial regulator's supervisory analytics workload is asking for the strongest cryptographic position currently available on the British market.

The named inventor of record on patents 53 to 57 is the same individual who is the named inventor on the other thirty-six Mickai filings. The portfolio is on the UK IPO public register at numbers GB2607309.8 to GB2611702.8, with the Sovereign AI SoC quartet at GB2611698.8, GB2611699.6, GB2611701.0, and GB2611702.8. The Mickai trade mark is separately registered at UK00004373277, classes 9 and 42. The company is incorporated at Companies House under number 17166618.

How to engage

Poseidon is in the closing weeks of UK IPO Stage 1 prosecution. The next milestone is Stage 2 fee payment by 16 April 2027, which preserves the priority date for international expansion under the Patent Cooperation Treaty. The chip itself is in late-stage architectural specification with tape-out targeted for the second half of 2027 and general availability planned for late 2028. Engineering partnerships, foundry conversations, and lead-customer engagements are open. The conversation is direct, via press@mickai.co.uk. The named inventor answers.

“Conventional secure-enclave designs put the vendor at the root of trust and the operator at the bottom of the chain. Poseidon puts the operator at the root and refuses to trust anyone else without operator-signed permission. The chip is the policy. The host is the supplicant. The cooperative answers to the silicon. The silicon answers to the operator. That is what sovereign means at the hardware layer.”

Sources and references

• Mickai patent portfolio, mickai.co.uk/patents (40 filed UK patent applications, 1,112 claims, named inventor Micky Irons / Mickarle Wagstaff-Irons, recorded at numbers GB2607309.8 to GB2611702.8).
• MWI-PA-2026-053 / GB2611698.8, operator-personalised silicon root of trust at first power-on.
• MWI-PA-2026-054 / GB2611699.6, host-acceptance attestation inversion for removable sovereign AI accelerator.
• MWI-PA-2026-055 / GB2611701.0, SIOS state bundle migration with persistent on-silicon audit chain.
• MWI-PA-2026-057 / GB2611702.8, operator-controlled distribution endpoint bootstrap with air-gap operating mode.
• Mickai patent 02 (cooperative architecture).
• Mickai patent 22 / GB2610413.3 (Open Inter-Vendor Audit Record format).
• Poseidon brain page, mickai.co.uk/brains/poseidon-brain.
• Mickai trade mark UK00004373277 (separate registration, classes 9 and 42, 15 April 2026).
• Crown Commercial Service framework RM6263 and successors.
• Cabinet Office Procurement Policy Note 02/24 (AI tools).