Sovereignty Research

Research Paper · January 2026

Why Civil Control of Dual-Use Connectivity Will Fail in UK Waters

Civil registration and whitelisting regimes cannot contain adversarial use of commercial LEO connectivity once that connectivity becomes indispensable for unmanned maritime operations. Drawing on Ukraine, Russian adaptation, and Turkey, this paper argues the UK is approaching — though has not yet crossed — the same threshold.

Civil Governance Model
Whitelisting · Identity-based
  • Post-factum registration: identity-based approval granted at enrolment, not continuously validated
  • Terminal leakage: registered devices enter unmonitored supply chains and occupied zones
  • Adaptation asymmetry: adversaries iterate faster than regulators can update whitelists
  • Sovereignty vacuum: commercial operators pressured to assume responsibilities beyond their mandate
  • Legal friction only: stronger consumer safeguards slow institutional response without preventing misuse
Threshold
Indispensability
Threshold
When LEO connectivity becomes non-substitutable, civil control fails structurally
cross
Regime-Appropriate Control
Sovereignty-by-design · Role-based
  • Role-based authorisation: connectivity governed by mission role, not terminal identity alone
  • Zone-specific policy domains: defined maritime zones carry distinct access and continuity rules
  • Continuous re-authentication: validity is dynamic and revocable at any point in the mission cycle
  • Sovereign escalation rights: clear chain from commercial operator to state authority
  • Terminals as regime artefacts: treated as governed objects within a sovereignty regime, not consumer products
01
Connectivity is the Binding Constraint
The most important enabler of unmanned maritime strike systems is resilient LEO connectivity, not hull design or onboard autonomy.
02
Civil Whitelisting Fails at the Threshold
Once connectivity becomes non-substitutable, identity-based registration cannot prevent adversarial use — it adds friction for legitimate users only.
03
The UK is Approaching, Not Yet Crossing
Dense maritime traffic and proliferating small autonomous vessels mean an indispensable connectivity regime could emerge suddenly.
04
Legal Protections Increase Friction, Not Effectiveness
Stronger consumer-oriented safeguards slow institutional response without addressing the structural problem of adversarial misuse.
05
Regime Control Requires Institutional Separation
Connectivity in defined maritime zones should be a regime artefact: role-based authorisation, dynamic zones, re-authentication, and sovereign escalation.
06
Contrast Cases Sharpen the Argument
Turkey's pre-emptive exclusion of maritime LEO connectivity shows how early sovereignisation through exclusion avoids reactive crisis management.
🇺🇦
Threshold Crossed
Ukraine — Reactive Crisis
Emergency adoption created legitimacy before governance. Starlink became mission-critical for C2, artillery coordination and drone operations before any formal framework existed. Geofencing conflicts, coverage blackouts and SpaceX sovereignty disputes followed.
Institutional separation — Starshield — emerged after the fact, under operational pressure. Governance caught up to dependency, not the reverse.
🇬🇧
Approaching Threshold
United Kingdom — Narrow Window
High-density Channel waters, critical offshore infrastructure and rapid proliferation of unmanned surface craft create the conditions for sudden indispensability. The UK has not yet crossed the threshold but faces structural replication risk if it waits for an operational trigger.
Timing, not intent, is decisive. The window to build regime-appropriate governance before dependency hardens is present now and will not remain open indefinitely.
🇹🇷
Pre-emptive Exclusion
Turkey — Sovereignisation First
Turkey acted before indispensability was reached by excluding maritime LEO connectivity from uncontrolled commercial access in strategically sensitive zones. Control was exercised while the state retained initiative, not after dependency had locked in.
Pre-emptive exclusion avoided the reactive governance crisis seen in Ukraine. Sovereignty was designed in, not retrofitted under pressure.
Terminals as Regime Artefacts
Connectivity in defined maritime zones should be treated as a governed object within a sovereignty regime — not a consumer product. Four design elements are required.
Sovereignty-by-Design
Role-Based Authorisation
Access governed by mission role and current operational context, not terminal identity at enrolment.
Zone-Specific Policy Domains
Defined maritime zones carry distinct access rules, coverage limits, and continuity obligations.
Continuous Re-Authentication
Validity is dynamic and revocable throughout the mission cycle, not a one-time grant at registration.
Sovereign Escalation Rights
A clear, pre-defined chain from commercial operator to state authority with explicit override powers.
1
Emergency
Adoption
Rapid deployment before governance framework exists
2
Operational
Lock-in
Habits, procurement and doctrine adapt to the system
3
Threshold
Crossed
Withdrawal carries systemic operational consequences
4
Terminal
Leakage
Registered devices enter unmonitored supply chains
5
Adversary
Adaptation
Opponents iterate faster than regulators can update lists
6
Sovereignty
Pressure
Commercial operators forced into sovereign-like decisions
7
Regime
Crisis
Institutional separation required under operational pressure
Govern connectivity before indispensability becomes dependency. The UK has a narrow window to act. Once the threshold is crossed, governance must be retrofitted under pressure — as Ukraine demonstrates. The regime-appropriate alternative requires action now.
Maritime Security Dual-Use Governance Sovereignty-by-Design

Overview

This paper examines why civil registration and whitelisting regimes cannot contain adversarial use of commercial low-Earth-orbit (LEO) connectivity once that connectivity becomes indispensable for unmanned maritime operations. Drawing on lessons from Ukraine, emerging Russian doctrine, and a contrast case in Turkey, it argues that the United Kingdom is approaching — though has not yet reached — the same threshold. The UK’s high-density waters, critical offshore infrastructure and rapidly evolving unmanned threats create a situation in which consumer-style governance will replicate the failure modes seen elsewhere.

The authors show that unmanned surface and semi-submersible craft are moving toward “smart and affordable mass” driven by iterative design and software updates, not by naval shipyards. The decisive enabler is low-latency, resilient LEO connectivity. Once the system crosses the indispensability threshold, civil whitelisting — identity-based, post-factum control — fails structurally: terminals leak, adversaries adapt faster than regulators, and commercial operators are pressured to assume sovereign responsibilities. The UK therefore has a narrow window to act before dependency hardens.

Why this paper matters

This is not a niche maritime dispute. It demonstrates how dual-use connectivity becomes a coercive instrument when civil governance models lag behind operational realities. The argument is predictive: similar dynamics will appear in other high-traffic waters and in terrestrial contexts where low-cost, networked systems depend on commercial infrastructure. By connecting the UK case to broader questions of sovereignty, indispensability, and platform sovereignty, the paper helps policymakers and investors anticipate when consumer markets turn into regime-critical chokepoints.

Key claims

  1. Connectivity is the binding constraint. The most important enabler of unmanned maritime strike systems is resilient LEO connectivity, not hull design or onboard autonomy.
  2. Civil whitelisting fails at the indispensability threshold. Once connectivity becomes non-substitutable, identity-based registration cannot prevent adversarial use; it simply adds friction for legitimate users.
  3. The UK is approaching, but has not yet crossed, this threshold. Dense maritime traffic and the proliferation of small, autonomous vessels mean that an indispensable connectivity regime could emerge suddenly.
  4. Legal protections alone increase friction, not effectiveness. Stronger consumer-oriented safeguards do not address the structural problem; they slow institutional response without preventing misuse.
  5. Regime-appropriate control requires institutional separation. Connectivity in defined maritime zones should be treated as a regime artefact subject to role-based authorisation, dynamic zone policies, continuous re-authentication and clear sovereign escalation rights.
  6. Contrast cases sharpen the argument. Turkey’s pre-emptive exclusion of maritime LEO connectivity shows how early sovereignisation through exclusion can avoid reactive crisis management.

What you’ll find inside

  • A technical and operational overview of unmanned maritime systems, including the shift toward “smart and affordable mass”
  • A detailed account of the Ukrainian experience with Starlink, Russian adaptation, and the limitations of civil whitelisting
  • An analysis of structural replication risk in the UK maritime environment and why timing, not intent, is decisive
  • A contrast case describing Turkey’s pre-emptive exclusion posture and its relevance to the Channel
  • A governance design proposal for role-based authorisation, zone-specific policy domains, continuous validity checks and preventive exclusion
  • A conclusion that reframes terminals as regime artefacts and aligns the proposal with existing UK defence and regulatory doctrine

Read this paper if you are working on

  • Maritime security and unmanned systems
  • Governance of dual-use technology
  • Sovereignty-by-design and regime segregation
  • Policy design for emerging chokepoints
  • Legal frameworks for commercial connectivity services