Sovereign AI for Critical National Infrastructure

Why critical infrastructure cannot rent its intelligence

A power grid, a port, an air traffic system and a defence network share one uncomfortable trait. When they fail, the failure is public, physical and immediate. So the people who run them have always been careful about what they let inside the perimeter. They vet suppliers, they segment networks, they keep manual fallbacks. Then artificial intelligence arrived, and for a few years the only serious way to use it was to send your data to somebody else's data centre and trust the answer that came back. For most businesses that trade-off is acceptable. For critical national infrastructure it is not.

We built Mickai for exactly this problem. Mickai is a Sovereign Intelligence Operating System, a SIOS, held privately by our founder. It is not something you connect to over the public internet and hope stays available. It runs on the customer's own hardware, on premises and air gapped where the mission demands it, with zero data egress and no public cloud round trip. The intelligence lives where the assets live, behind the same fences and the same guards that already protect the turbines, the cranes, the runways and the radar.

Local control is an operational requirement, not a preference

In a control room, the question is never simply whether an AI is clever. The question is whether you can trust it when the network to the outside world is down, when an adversary is probing your edges, or when a regulator asks you to reconstruct exactly what happened at 03:14 on a specific morning. A model that only works while it can phone home is a single point of failure dressed up as innovation. Operators of critical infrastructure understand single points of failure better than anyone, because they spend their careers designing them out.

Sovereignty, in the way we mean it, is practical. It means the operator keeps the weights, the memory and the decisions inside a boundary they define. It means an outage on someone else's cloud, a change to someone else's terms of service, or a quiet shift in someone else's national jurisdiction cannot reach in and change how your grid balances load tonight. When we say local control, we mean the operator can pull the cable and the system keeps working.

What sovereignty looks like sector by sector

The angle is the same everywhere, but the pressure points differ. A few concrete pictures make it clearer.

• Energy. Grid balancing, demand forecasting, predictive maintenance on transformers and substations, and fault triage all benefit from fast reasoning over live telemetry. That telemetry describes the physical state of a nation. It should never leave the operator's estate to be reasoned over, and with Mickai it does not.
• Ports. A modern port is a choreography of cranes, yard moves, customs data and vessel schedules. AI can lift throughput and flag anomalies, but manifest and logistics data is commercially and strategically sensitive. Running the intelligence on the quayside, not in a distant region, keeps that advantage where it belongs.
• Aviation. Airspace management, ground operations and safety analysis demand determinism and a clear record. Guidance that cannot be audited, or that pauses because a link dropped, has no place near an approach. The reasoning has to be present, explainable and continuously available.
• Defence. Here the requirement is absolute. Air gapped by default, no egress, and a signed account of every action the system took. Intelligence that assists a mission must be as controllable and as accountable as the personnel and equipment around it.

Fifty brains under deterministic governance

Raw capability is not the hard part any more. Control is. Mickai runs 50 specialist brains, 25 domain and 25 operational, coordinated under deterministic governance rather than left to improvise. That distinction matters in an environment where a wrong move has physical consequences. A domain brain reasons about the problem in front of it. The operational brains decide what is allowed to happen next, in what order, and under whose authority. The behaviour is bounded on purpose, because the whole point of infrastructure is that it behaves the same way today as it did yesterday.

Underneath that sits memory the customer owns. The system learns from the operator's own environment, and that learning stays inside the operator's boundary. Nothing about your grid, your quay or your airspace becomes training material for a model that a competitor or an adversary might later query.

Every action leaves a signed record

Trust in critical infrastructure is built on evidence, not assurances. Every action Mickai takes produces a cryptographically signed audit record, what we call the Open Audit Record. It is not a log you have to take on faith and it is not something an operator, a supplier or an intruder can quietly edit after the fact. It is a verifiable account of what the system did and why, and it is signed with post-quantum cryptography using ML-DSA-65 so that the record still stands up years from now, against threats that do not exist yet.

“If a system is going to sit near a nation's power, ports, skies or defence, it has to prove what it did, not just claim it. A signed record on every action is the difference between an assistant and an accountable operator.”

That combination, air gapped operation, owned memory, deterministic governance and a signed record on every action, is protected by a substantial body of intellectual property. We currently hold 104 filed UK patent applications containing 2,340 claims, with full specifications, claims and figures, and we are building toward examination and grant. The specifications describe how the parts fit together, from the governance layer to the audit and signing scheme, so the architecture is documented rather than merely asserted.

Signal that this approach resonates

We are early, and we say so plainly. What we can point to is public signal. On Crunchbase our founder now ranks number 2, and the company Heat Score has reached 94 out of 100, climbing from single digits. We read that as a market beginning to accept a simple idea. The organisations that carry the most risk should not have to surrender control of their intelligence to use it. They should be able to own it.

The direction of travel

The next decade of infrastructure will be shaped by how much intelligence operators are willing to place near their most sensitive systems. If the only option is renting that intelligence from a distant cloud, most will hold back, and rightly so. Our work is to remove that trade-off. Bring the reasoning inside the fence, govern it deterministically, own the memory, sign every action, and let the operator pull the cable whenever they choose. That is what sovereign intelligence for critical national infrastructure means to us, and it is the standard we intend to keep raising as the grids, ports, runways and networks of the coming years are built and defended.