Secure Communications Loadout
Deliverable SYS-003. Structure per cc02-standards/SYSTEM-STANDARD.md. Every component traces to a design basis (NEED/REQ) and to an acceptance criterion.
1. Purpose and Design Basis
1.1 Scope and Objective
The Secure Communications Loadout (v2) provides a standardized hardware and software suite for detail operators. It establishes privacy-first mobile handsets and resilient satellite backhaul to maintain secure voice, data, and situational awareness communications under local network blackouts or intercept conditions.
1.2 Design Basis
This system replaces standard commercial cellular devices with hardened, de-Googled handsets and local encrypted mesh capabilities. It protects operator geolocation metadata, blocks IMSI-catcher tracking, and secures communications backhaul utilizing private satellite constellations.
1.3 Needs
- NEED-SYS-003-01: Operators require end-to-end encrypted voice and data communications during transit and advances.
- Source: Team Leader (RF)
- Context: Standard cellular networks are prone to interception and regional blackouts.
- NEED-SYS-003-02: Systems engineer requires automated and cryptographically secure phone zeroization and remote wipe capability.
- Source: Systems Engineer (CS)
- Context: Lost or captured handsets must not expose operational keys or contacts.
1.4 Requirements
- REQ-SYS-003-01 (Traceability: NEED-SYS-003-01): The mobile handset shall run GrapheneOS to enforce application sandboxing and eliminate Google Play Services telemetry [VR-SYS-003-01].
- Verification Method: Inspection (I)
- REQ-SYS-003-02 (Traceability: NEED-SYS-003-01): Handsets shall enforce end-to-end encrypted messaging and voice channels using the Signal protocol over all backhaul networks [VR-SYS-003-02].
- Verification Method: Test (T)
- REQ-SYS-003-03 (Traceability: NEED-SYS-003-01): The satellite backhaul terminal shall support automatic failover from cellular WAN within 15 seconds of signal loss [VR-SYS-003-03].
- Verification Method: Demonstration (D)
- REQ-SYS-003-04 (Traceability: NEED-SYS-003-02): Handsets shall execute automatic cryptographic wipe (zeroization) after 10 consecutive failed PIN attempts or a remote duress trigger [VR-SYS-003-04].
- Verification Method: Test (T)
2. Architecture As Built
+-------------------------------------------------------------------------+
| SYS-003 Secure Communications Loadout |
| |
| [Hardened Handset] <--- WiFi/USB ---> [Satellite Backhaul / Router] |
| (GrapheneOS/Signal) (Starlink Mini / cellular failover) |
| | |
+----------------------------------------------------|--------------------+
v
Encrypted Sat WAN
3. Components and Bill of Materials
| Component | Spec | Vendor / Link | Price | Tier | Status | Traceability |
|---|---|---|---|---|---|---|
| Handset | Google Pixel 8 5G 128GB (renewed), GrapheneOS | Amazon | $259.00 | startup-now | SELECTED | REQ-SYS-003-01 |
| Satellite backhaul | Starlink Mini portable terminal kit (dish, integrated router, PSU) | Starlink | $199.00 | startup-now | SELECTED | REQ-SYS-003-03 |
| Backhaul power (vehicle) | USB-C PD trigger cable, 140W, 18AWG, waterproof (STARGEAR class) | Amazon | $36.00 | startup-now | SELECTED | REQ-SYS-003-03 |
| Backhaul power (portable) | 99Wh bidirectional 100W PD power bank, airline-compliant (CTmods) | CTmods | $189.00 | startup-now | SELECTED | REQ-SYS-003-03 |
| Satellite service | Starlink Regional Roam, 100GB, single continent, pausable (Standby $0) | Starlink | $55.00/mo (active months) | startup-now | SELECTED | REQ-SYS-003-03 |
| Satellite service | Starlink Global Roam, no continent lock, no trip-length cap | Starlink | $165.00/mo | growth | DEFERRED | REQ-SYS-003-03 |
| Satellite backhaul (2nd unit) | Starlink Mini terminal kit, redundancy for two-vehicle detail | Starlink | $199.00 | growth | DEFERRED | REQ-SYS-003-03 |
Prices are vendor list as of 2026-07-05; source links in the program cost model (BIZ-013). Regional Roam covers US/Canada/Mexico on a North America-registered account; Starlink coverage for Costa Rica under Regional Roam is unresolved as of the pricing date, so Costa Rica deployments assume Global Roam for the trip months (risk logged in BIZ-013). Startup one-time subtotal per loadout: $424.00 plus $259.00 per handset issued.
4. Build and Deployment
4.1 Handset Provisioning
- Obtain OEM unlocked Google Pixel 8 handsets per the BOM spec.
- Flash GrapheneOS utilizing the web USB installer from a secure administrator workstation.
- Configure the operating system without Google Play Services or account linkage.
- Pre-install Signal Messenger, ATAK-CIV, and Telegram.
4.2 Satellite backhaul Deployment
- Provision the Starlink Mini terminal kit using the vehicle-mounting bracket.
- Connect the terminal power supply to the vehicle 12V auxiliary system or portable battery bank.
- Configure the Starlink WAN profile to prefer satellite backhaul, with cellular fallback configured via the integrated router WAN port.
5. Hardening Baseline
- Handset OS Hardening: Enable LTE-only mode to prevent 2G/3G downgrade attacks; restrict USB connection state to charging-only when locked; configure auto-reboot timer to 180 minutes to clear RAM keys; enforce 8-digit numeric PIN [REQ-SYS-003-01, REQ-SYS-003-04].
- Network Interface Hardening: Enforce Signal app-level PIN and registration lock; set up wireguard VPN tunnel to route all traffic through a secure private gateway; disable Wi-Fi/Bluetooth auto-enable features [REQ-SYS-003-02].
- Satellite terminal Hardening: Change default administration passwords; disable SSID broadcasting; restrict Wi-Fi access via WPA3-Personal with a 20-character randomized passcode; bind administration interface access to wired Ethernet connections only [REQ-SYS-003-03].
6. Integration Points
- Inputs: Requires
ART-engagement-order(Provides the authorized deployment schedule and regional coordinates). - Produces For:
SYS-009(Handset is distributed to operator individual loadout). - Proposed Seam: Communicates with
EP-011(Communications Plan) to feed the radio net discipline and satellite terminal custody log.
7. Acceptance Tests
| Criterion | Method | Expected Result | Reference |
|---|---|---|---|
| REQ-SYS-003-01 | Inspection | Confirm Google services are absent and application sandboxing is active on the handset. | VR-SYS-003-01 |
| REQ-SYS-003-02 | Test | Verify that Signal messenger traffic is fully encrypted via packet capture. | VR-SYS-003-02 |
| REQ-SYS-003-03 | Demonstration | Cut cellular connection and verify satellite backhaul traffic resumes within 15 seconds. | VR-SYS-003-03 |
| REQ-SYS-003-04 | Test | Perform 10 failed PIN entries and confirm that GrapheneOS successfully executes secure user storage wipe. | VR-SYS-003-04 |
8. Run and Maintenance Handover
- Operational Check: Conduct daily pre-mission comms check (Signal and ATAK link) from the handset.
- Update Cadence: Update GrapheneOS and pre-installed application versions weekly while connected to secure administration network.
- Ownership: Systems Engineer (CS) for security updates; Operations Manager (BR) for terminal asset tracking and billing management.
END OF SYSTEM
Model wiring
Generated from cell frontmatter at publish time.