Operator-Personalised Silicon Root of Trust at First Power-On.

Sovereign AI accelerator chip personalised to operator keys at first power-on, not at fabrication. 20 claims.

A method of personalising a sovereign AI accelerator hardware unit at first power-on. The silicon's cryptographic identity store is left empty of identity material at fabrication. At first power-on at the operator's premises, an operator-generated module-lattice signing public key is presented to the unit via a personalisation interface. The unit performs a one-shot irreversible binding of the said public key into the silicon's identity store under a fuse-burn primitive. Thereafter the unit refuses any subsequent personalisation attempt and uses the bound public key as the silicon's identity in all attestation, key-derivation, and signing operations. The silicon's cryptographic identity is the operator's identity, not the manufacturer's. First of the Mickai Sovereign AI SoC quartet. Filed 19 May 2026 as GB2611698.8.