AIR-GAP TRANSPORT · step ② of 4

The 6-byte packet, over the Air

An estate state-event is six bytes. Signed, verified before it is ever parsed, and pushed over a bidirectional channel with no HTTP. Here it is, measured in real wire bytes — and honest about the one thing that does not compress.

coordinate 31× delta 145× signed-per-packet 3.28×

The six bytes

ops·tresb₀b₁κ

Byte 0 opcode · byte 1 two 4-bit node indices · byte 2 an 8-bit capability bitmask · bytes 3–4 a uint16 budget (little-endian) · byte 5 the primorial-fold κ-witness. On the wire it travels signed: [sourceId:1][payload:6][signature:64] = 71 bytes. The codec and the signature-first gate are SENTINEL's live, mutation-gated kernel — reused here, not re-invented.

Measured: the byte-ratio per event type

Real UTF-8 bytes, counted on the wire by the kernel below. This is the number the 15× test never measured.

eventJSONbytescoordinate1-byte deltasigned/packet
capability_delegation186631×—3.99×
gate_verdict171628.5×—3.77×
heartbeat136622.67×136×3.28×
pipeline_step145624.17×145×3.41×
antibody136622.67×—3.28×

Read it honestly: the 6-byte coordinate beats self-describing JSON 31–31×, and a recurring deterministic step sent as a 1-byte delta hits 145× — the receiver recomputes the step locally. But sign every packet and the 64-byte Ed25519 signature dominates: just 3.28× apples-to-apples. The 42–100× is real only when one handshake signature authenticates a whole session and coordinates then stream over it.

The Shannon floor — what cannot compress

irreduciblesize
Ed25519 signature64 Birreducible — one signature per (key, message)
SHA-256 hash32 Birreducible — a hash IS maximum entropy
novel human prompt / authored text—sits at its own entropy floor; keep JSON only here, at the human display boundary
idle

Live: 6-byte packets over a WebRTC DataChannel

Two tabs, no server. One tab opens the DataChannel, the peers trade SDP over a same-origin BroadcastChannel (STUN only — no TURN, no relay), then push signed 6-byte packets. The receiver pushes the signature first: a forged packet is dropped before its payload is ever parsed.

disconnected

Send a 6-byte event

Received

open the channel in this tab, then click Join in a second tab of the same page…

Open this page in two tabs. Click Open channel here, Join there. Byte counts shown are real: 6-byte payload vs the JSON the same event would be.

Acoustic FSK — the 6 bytes as sound

The packet becomes an audio chirp: each byte's bits ride two tones (FSK). A second device's mic hears it and executes. Here it is measured in loopback — encoded to audio samples and demodulated back — so the codec is proven to survive the air without needing a mic.

idle

The transports — measured vs design-only

WebRTC DataChannel — bidirectional, no HTTPMEASURED (live, two tabs)
Acoustic FSK — speaker → mic, offlineMEASURED (loopback)
NFC — tap, two offline devices sync in msDESIGN (Web NFC, Android only)
LoRa — ~$15 antenna, 10-mile city link, 6B clears the ~51B capDESIGN (needs a radio)
AM/FM/Ham — FSK broadcast to 10,000 offline nodesDESIGN (needs a radio)

A 6-byte packet clears LoRa's ~51-byte max-range cap effortlessly, so the design is sound — but nothing here claims a radio ran. Measured means it ran in this browser.

The Human Door

On an incompressible edge — money, legal, irreversible — the transport will not auto-execute. KESTREL pushes a HALT_SIGN (0x0E) packet; the UI renders a confirm; the human signs; the signed token passes back down to resume. A capability delegation that touches the ledger or a key, or spends over the auto-ceiling, stops at the door automatically.

The immune layer & the reroute trigger

A novel breach broadcasts a 6-byte geometric antibody coordinate; every node adjusts its lattice in real time — no 50MB patch. An unauthorised intent is never returned an error (that confirms a real door was found); it is rerouted into a zero-budget phantom cell where, with no capability budget, lateral movement is mathematically impossible.

Simon's open question — reroute now, or watch the maze first? Answered by tiering the trigger: a crypto failure (forged, unknown-source, replay) seals now — a forger carries zero intelligence and every millisecond near real state is risk. A policy failure from an authenticated source (budget-exceeded, resource-denied, off-κ) goes to the maze for a few observed intents first — the key is real, so the insider's lateral-movement intent is worth fingerprinting, and it is safe to watch because the phantom's zero budget means they can pivot nowhere.

Every number on this page is generated by the mutation-gated kernel fallairgap.mjs (built on sentinel.mjs), inlined below and re-run in your browser. · source · SENTINEL · MIT for the code.
The 6-byte Primorial-Fold codec is the Konomi architecture, created by Thomas Frumkin (used with permission); the opcode/LIGHT lineage carries from SENTINEL. Built by Kar.