Independent third-party citations, academic references, and professional community recognition of AUTHREX governance research. These references were generated organically, without solicitation, by researchers, academic journals, defense communities, and media outlets across multiple countries. Separately, the applicant has published three peer-reviewed journal articles and ninety-two original opinion and analysis pieces across nineteen professional and national outlets, and serves as a peer reviewer for three journals, with one completed review published under his own name and independently listed on his ORCID record.
Dhanasar Framework Analysis:
Under Prong 1, independent citations demonstrate substantial merit. Under Prong 2, unsolicited third-party references confirm the applicant is well positioned to advance the proposed endeavor. Under Prong 3, international recognition across defense, governance, and academic communities confirms national interest benefit.
A public comment by the applicant (Docket NHTSA-2026-0529-0007, Apr. 27, 2026) is cited by name in an official U.S. Federal Register notice: NHTSA, "Incident Reporting for Automated Driving Systems (ADS) and Level 2 Advanced Driver Assistance Systems (ADAS)," 91 FR 30789 (May 26, 2026). The notice references public comments received on its automated-vehicle incident-reporting collection; among the submissions referenced are those of Virginia DOT, the Alliance for Automotive Innovation, and Consumer Reports. The citation is permanent and independently verifiable through the Office of the Federal Register and govinfo.gov.
"From Frontier to Shadow AI: A Simmering Threat to Assurance and Security in Critical Infrastructure," an empirical study of 27 Australian critical-infrastructure organisations, cites the applicant's SSRN paper The strategic convergence: AI has outpaced human clearance models (SSRN 5940814) as reference [41]. The applicant's work is cited twice in the body: on how shadow AI operates at the interaction layer, distinct from traditional shadow IT, and on shadow AI as an insider-risk condition driven by optimisation-oriented workarounds. View on arXiv.
arXiv PreprintJuly 2026
Cited in an arXiv preprint on unsupervised tunnel detection in ground-penetrating radar
Junaid, Khan & Ahmed · arXiv:2607.04882 · Submitted 6 July 2026
"Unsupervised Detection of Underground Tunnels in Ground-Penetrating Radar Using Depth-Restricted Reconstruction Scoring," a field study by researchers at Sir Syed CASE Institute of Technology (Islamabad, Pakistan) and the University of Strathclyde (Glasgow, UK), cites the applicant's SSRN paper Strategic Subterranean Domain Awareness: A Comprehensive Technical and Operational Evaluation of Next-Generation AI-Fused Counter-Tunnel Architectures (SSRN 6046594) as reference [1]. The applicant's work is cited twice in the body: on the limits of conventional pipeline monitoring as early warning against clandestine tunnel excavation, and on why intrusion tunnels pose a different detection problem from buried pipes and cables in scale, depth, and rarity. View on arXiv.
Federal Technical EvaluationJune 2026
White paper favorably evaluated by the Air Force Research Laboratory under a competitive Broad Agency Announcement
AFRL/RFC, Rome Research Site · Official memorandum of June 24, 2026 · BAA FA8750-24-S-7003 (CANVAS)
The Air Force Research Laboratory’s Information and Spectrum Warfare Directorate issued a formal memorandum responding to the applicant’s white paper, “Conditions-Based Authority Governance and Assurance for the Virtual C2 Layer: Verified Delegation, Authority Tradeoff Analysis, and Intent-Constraint Validation,” submitted under Broad Agency Announcement FA8750-24-S-7003 (CANVAS: Coordinating Austere Nodes through Virtualization and Analysis of Streams). The memorandum, signed by the Chief of the Multi-Domain C3 Division, states that the white paper “has been favorably evaluated” and that the effort described “is of interest to the Air Force,” while declining to fund it at this time due to budget constraints, noting that a formal proposal may be requested if the funding situation changes, and encouraging submission of additional white papers in areas of demonstrated capability. The memorandum documents an arms-length technical evaluation by a federal research laboratory of the applicant’s authority-governance research as applied to the virtual command-and-control layer. It is recorded here as an official evaluation outcome; it does not constitute AFRL endorsement of, or affiliation with, the research program, and no funding was awarded.
Conference PresentationSeptember 2026
Accepted presenter, NDIA Emerging Technologies for Defense Conference and Exhibition
National Defense Industrial Association (NDIA) · Washington, DC · Presentation scheduled September 2026
The applicant has been accepted to present at the National Defense Industrial Association’s Emerging Technologies for Defense Conference and Exhibition in Washington, DC, in September 2026. Acceptance to present at a national defense-industry technical conference places the runtime authority-governance research before an audience of defense program offices, primes, and technology evaluators through a selective program-committee process.
International EngagementJuly 2026
Verification working papers circulated to CCW state delegations; invited consultation with the Netherlands Ministry of Foreign Affairs
United Nations Convention on Certain Conventional Weapons (CCW) framework · July 2026
The applicant’s verification and compliance-attestation working papers for autonomous systems (Zenodo DOIs 10.5281/zenodo.21307610 and 10.5281/zenodo.21307785) were circulated to state delegations within the CCW framework ahead of the Seventh Review Conference, and the applicant received an invited technical consultation with the Netherlands Ministry of Foreign Affairs team supporting the Chair of the Group of Governmental Experts (July 2026). The papers address verification and compliance attestation, consistent with the program’s governance-and-assurance-only scope; circulation and consultation are documented engagement and do not constitute adoption of, or governmental endorsement of, the applicant’s work.
Written technical responses received from the RAND Corporation and NASA
RAND Corporation; National Aeronautics and Space Administration · Correspondence on file, 2026
In response to the applicant’s technical outreach, researchers at the RAND Corporation and at NASA provided substantive written technical responses engaging with the runtime authority-governance research; the RAND response confirmed the work’s relevance to the recipient’s research area and noted internal distribution to colleagues. The correspondence is retained on file and is available for verification in appropriate contexts. These responses document professional engagement with the work by researchers at the named organizations and do not constitute endorsement by, or affiliation with, either organization.
Peer-Reviewed Journal ArticleJuly 2026
Peer-reviewed article published in the Journal of Hardware and Systems Security (Springer)
Journal of Hardware and Systems Security (Springer Nature) · Vol. 10, Art. 17 · Received 4 June 2026, accepted 14 July 2026, published 21 July 2026 · Sole author: Burak Oktenli
Springer’s Journal of Hardware and Systems Security published the applicant’s peer-reviewed article “SATA: Sensor Attestation and Trust Anchoring: A Formally Specified, Simulation-Evaluated Continuous-Trust Protocol for Autonomous-Systems Sensor Edges” (DOI 10.1007/s41635-026-00190-4). The article specifies a TPM 2.0 hardware-anchored protocol that computes a continuous trust scalar from a sliding window of cryptographically committed sensor-attestation records, combining six replay-resistance barriers (ECDSA P-256 signature, 256-bit CSPRNG nonce, TPM monotonic counter, PCR quote, per-sensor sequence, and hardware tick-clock age) with a stated-and-proved signature-barrier unforgeability bound under a formally defined A1/A2 adversary model, and a weighted Dempster-Shafer fusion layer providing Byzantine fault tolerance while preserving the ignorance-versus-distrust distinction. The protocol’s state machine is verified by TLA+ bounded model checking across 18,892 distinct reachable states with zero violations of eight safety invariants, complemented by a 10,000-run Monte Carlo conformance-and-sensitivity campaign with bit-exact reproducibility; the reproducibility artifacts are openly deposited on Zenodo (DOI 10.5281/zenodo.18936251) and are content-addressable through published cryptographic hashes. This is the peer-reviewed instantiation of the SATA architecture within the applicant’s runtime authority-governance research program, and it constitutes independent scholarly validation of that work through formal peer review.
SSRN dissemination metrics: 17 public papers, 8,308 downloads, author rank in approximately the top 0.5 percent
SSRN (Elsevier) · Author ID 9424552 · Snapshot of July 21, 2026
The applicant’s SSRN author record lists 17 publicly distributed working papers spanning authority governance for autonomous systems, AI-enabled command and control, critical-infrastructure resilience, space and quantum-communications governance, and counter-tunnel and undersea detection analysis. As of July 21, 2026, the papers have accumulated 8,308 downloads and 5,604 abstract views in aggregate, with the most-viewed paper, “Strategic Assessment: The Operationalization of Artificial Intelligence in U.S. Defense Doctrine,” exceeding 1,200 views and 740 downloads. SSRN ranks the applicant 14,540th of 2,819,733 registered authors, placing him within approximately the top 0.5 percent of authors on the platform by SSRN’s ranking methodology. These figures are point-in-time values from SSRN’s public author record and change as the platform updates.
Translated into Albanian and republished by a Balkan geopolitics institute
Instituti Shqiptar për Gjeopolitikë (Albanian Institute for Geopolitics) · Pristina · Analysis section · August 22, 2026
The Albanian Institute for Geopolitics, a non-governmental research institution founded in 2021 and based in Pristina, translated the applicant’s Eurasia Review analysis of drone-war testing standards into Albanian and republished it in full in its Analysis section, crediting the original outlet in the byline, linking his author page there, and marking the translation as the institute’s own work. The institute states that it conducts interdisciplinary research in geopolitical and historical studies and European and Euro-Atlantic integration, and that its membership comprises scientists, publicists, and journalists drawn from Kosovo, North Macedonia, Albania, Slovenia, Switzerland, Germany, Austria, and the United States. The applicant’s analysis appears in the same section as the institute’s coverage of regional security questions and alliance posture. This is the first recorded instance of his work being translated into another language and republished in full by a research institution, and it is a distinct form of third-party use from syndication or excerpting, since translation requires an editorial judgement that the argument is worth carrying to a readership that would not otherwise reach it, and the institute performed and credited that work itself. His full author biography was carried in translation alongside the article.
Third peer-reviewed journal article published, in a third discipline
Digital War (Springer Nature / Palgrave Macmillan) · Volume 7, article 6 (2026) · Published 31 August 2026 · DOI 10.1057/s42984-026-00113-1
Digital War, a Springer Nature journal published under the Palgrave Macmillan imprint in the field of digital conflict and war studies, published his article “The authority gap: why meaningful human control fails at the tier where it is signed” on 31 August 2026, ten days after acceptance, as volume 7, article 6 (2026), with a registered digital object identifier and his ORCID attached to the record. The article carries his Georgetown University affiliation, is designated an Original Paper, declares no conflict of interest, and cites twenty-two sources including work by the leading critical scholars of meaningful human control, United Nations expert-group papers on lethal autonomous weapons, and a General Assembly resolution. The significance for this record is threefold. First, it is his third article accepted by a peer-reviewed journal in three months. Second, it is his third distinct discipline, following a sensor-attestation protocol in a hardware-security engineering journal and a causal-mechanism specification in a security-theory journal, which establishes that the underlying research has been found publishable by reviewers in engineering, in social-scientific security studies, and now in war studies. Third, and most directly, the subject is his central claim rather than an application of it: where meaningful human control fails is a question about the tier at which authority is actually signed, which is the distinction between capability and authority that his architectures formalise and his deposited specifications mechanise. The applicant’s published commentary has argued that position across defence, engineering, scientific and policy venues throughout the year; its publication in a peer-reviewed war-studies journal places the same claim before referees in the discipline that owns the term. The article’s contribution is to explain a documented phenomenon rather than to restate it: a substantial critical literature has shown that human control over such systems is often closer to meaningless than meaningful, and he argues that this hollowness has an identifiable ARCHITECTURAL source. Authority is distributed across computational tiers, and the human signature attaches at a terminal tier downstream of the tiers where classification, proportionality and collateral-damage estimation are computed, so the endorser cannot review machine-paced, opaque reasoning within the decision window. He names the result the TERMINAL-SYSTEMIC AUTHORITY GAP, in which control is formally present yet substantively hollow. He distinguishes military decision systems from civilian algorithmic systems by development context, legal framework and deployment practice, reframes control as a property of the authority architecture governed across the full life cycle rather than as a moment of human endorsement, and draws implications for design, oversight and accountability while explicitly declining to assume that design alone can carry the burden. The keywords assigned to the published record include authority architecture and governance engineering, the terms he uses for his own research programme.
Live interview on France 24 English as an expert on autonomous weapons
France 24 English · Live from Washington · August 2026 · On-screen identification: “Burak Oktenli, Independent Researcher on AI Governance and Autonomous Systems”
France 24, the French state-funded international news broadcaster, invited the applicant onto its English-language channel for a live interview about a reported autonomous drone strike in Ukraine and what it indicates about the state of autonomous weapons. He appeared live from Washington opposite the studio anchor in Paris and was identified on screen by name and by the description independent researcher on AI governance and autonomous systems. This is a different class of recognition from the citations recorded elsewhere on this page: a broadcaster with a global audience selected him as the expert to explain a developing story in his field, in real time and without the opportunity to revise.
His argument on air followed the position established across his published work. He held that the familiar demand for a human to remain in the loop is already obsolete for this class of weapon, since such systems navigate by onboard camera precisely because the radio link can be jammed, so the absence of a link is the design goal rather than a defect and there is no operator supervising the flight. From that he drew the consequence that the human decision cannot occur during the mission and must instead be made before launch, in the form of limits the machine carries with it. The limit he specified is an abort condition: if the integrity of the system’s sensors, or the evidence supporting its target, falls below the level that justified the mission, its permission to strike should lapse, the weapon should disarm, and the flight should end away from people. He was explicit that this cannot be a switch a person presses, because there may be nobody on the other end, and must instead be a boundary built into the machine beforehand, with the supporting evidence recorded so that anyone can afterwards reconstruct why the system was permitted to act. He added that the hardware is the more troubling element, since the module involved was a commercially available component costing a few hundred dollars rather than military equipment, and concluded that changing warfare does not require human-level artificial intelligence but only inexpensive machines performing narrow lethal tasks without supervision.
The formulation he used to summarise the episode, that the machine did not become intelligent but that authority moved, is his research thesis compressed into a sentence, and the abort condition he described on air is the permission-lapse structure his architectures specify and his deposited formal models mechanise: authority that expires when the evidence supporting it fails, without requiring an operator to intervene, and leaves a record that can be reconstructed.
Academic CitationAugust 2026
Cited in a peer-reviewed journal article published by Wiley
Middle East Policy · Original Article · 2026 · DOI 10.1111/mepo.70106 · Endnote 43
A peer-reviewed article in Middle East Policy, published by Wiley on behalf of the Middle East Policy Council, cites the applicant’s Geopolitical Monitor analysis “The Reciprocity Inversion: How Ukraine Became the Gulf’s Counter-Drone Lifeline” at endnote 43. The citation supports a substantive factual claim in the body of the article rather than a passing reference: the authors state that emerging partnerships have acquired a longer-term and reciprocal character, with ten-year security agreements concluded with two Gulf states in which advanced air-defence missiles are sought in exchange for counter-drone expertise, and attribute that reading to the applicant’s piece. It sits in a sequence of endnotes drawn otherwise from wire services, think-tank research and defence trade press, and it is the source carrying the reciprocity argument that the surrounding sentence advances. The authors are an artificial-intelligence and technology initiatives librarian at a United States research university and a professor of security studies at a European university, and the work is supported by a European research fund. This is the applicant’s first recorded citation in a peer-reviewed journal article issued by a major academic publisher, as distinct from the preprints, student-edited journal and government record documented elsewhere on this page.
Quoted on where responsibility for autonomous systems properly sits, in a syndicated feature
TomDispatch feature by a bylined contributing writer · Carried by The Intercept on August 26, 2026, by CounterPunch and Popular Resistance on August 27, and by ZNetwork on August 30
A bylined feature on the governance of autonomous weapons, distributed by the syndication service TomDispatch and carried by The Intercept and subsequently by CounterPunch, Popular Resistance and ZNetwork, cited and directly quoted the applicant’s Articles of War analysis. The article identifies him by name as an independent researcher on artificial-intelligence systems and their governance, names the publication in which the analysis appeared, and uses his argument as the authority for the central legal question the feature raises: where responsibility lies for the actions of an autonomous system when no individual operator directed a particular engagement. It reports his position that existing law continues to apply when machines make battlefield decisions, and quotes him directly to the effect that such law must “be applied earlier, at the point where the architecture of a swarm is chosen, rather than after a strike when the question of responsibility has already become difficult to answer.” The feature also sets the underlying proposition in display type, stating that true responsibility for the actions of an autonomous swarm is properly located much earlier in the sequence, at the point where such a system is first conceived and designed. This is the applicant’s architectural-accountability argument used as load-bearing authority rather than as illustration, and its syndication across more than one general-readership publication is the widest circulation his legal analysis has received. It is recorded as a single citation carried by multiple outlets rather than as multiple citations, since one writer quoted him once and the syndication service distributed that article onward. This record notes the citation and the argument quoted; it takes no position on the wider contents, characterisations, or editorial judgements of the article in which the citation appears.
Recommended to a professional readership by a law-of-armed-conflict scholar
Public note by a United States law professor who directs an international and comparative law centre and publishes on the law governing armed conflict · July 26, 2026
A United States law professor specialising in the international law of armed conflict, who directs an international and comparative law centre and writes a public commentary series on legal responses to crisis, posted a note recommending the applicant’s Articles of War analysis to his readership. He described it as an excellent piece on the accountability problems that arise under international humanitarian law from the design choices and deployment methods of drone swarms in armed conflict, and summarised its structure accurately, noting that the applicant examines three distinct ways swarms have been deployed and how each affects the difficulty of making after-the-fact determinations about human judgment and accountability. The recommendation is unsolicited, made under the scholar’s own name on a public and dated platform, and demonstrates engagement with the argument rather than mere circulation of a link, since it restates the analytical structure of the piece correctly. It is recorded here as a professional recommendation rather than a formal scholarly citation, since it is not a reference in a peer-reviewed work and the site does not present it as one. Its weight lies in the reviewer’s standing: the applicant’s piece appeared in the legal-analysis journal of a military academy institute and turns on questions of international humanitarian law, and the person recommending it teaches and publishes in exactly that field.
Selected seven times, four with original analytical commentary, by an Indian strategic-studies repository
Indian Strategic Studies · Curated research portal on military strategy, multi-domain operations, cyber warfare and open-source intelligence · Seven selections between June and September 2026
Indian Strategic Studies, a curated digital repository and research portal maintained by a retired Indian Army major general who formerly served as senior directing staff at his country’s National Defence College and specialises in electronic warfare, signals intelligence, cyber and communications, has selected seven of the applicant’s pieces between June and September 2026, each carried under a credit line naming the original outlet and the author. The first three were accompanied by editorial summaries written by the curator. The four most recent, two of them carried within five minutes of each other on the same morning, go further and add original analytical commentary extending the applicant’s arguments, followed by a strategic question posed to the portal’s readership and the curator’s own assessment in reply. On the navigation-integrity analysis he reasoned that separating verification of signal origin from validity of the resulting position shifts the bottleneck in automated decision loops from signal processing to the delegation of command authority, that automated systems lacking defined confidence-degradation parameters will either fall back on last-known values or suspend sensor fusion entirely, and that command architectures receiving low-latency updates without explicit integrity flags are exposed to automation bias, concluding that without system-enforced degraded modes commanders will absorb navigation uncertainty rather than interrupt tempo. On the testing analysis he reasoned that delegating terminal guidance to onboard processing upon link degradation changes the engagement timing and spatial boundaries defenders must plan against, and that evaluating such hybrid control loops requires multi-spectral stress testing across degraded navigation and visual deception rather than the static electromagnetic thresholds by which proving grounds have traditionally measured success, concluding that raw interference power will yield to rapid sensor fusion at the tactical edge. On the machine-speed escalation analysis he reasoned that embedding automated decision engines into existing autonomy policy shifts the operational locus from deliberate human planning toward parameters fixed in software beforehand, that sub-second sensor processing leaves no practical window for a commander to review a target validation, and that authority therefore migrates from the officers presiding over operations to those who configured the engagement logic, concluding that without mandatory latency buffers the ability of senior commanders to halt an automated sequence erodes structurally. On the cyber-resilience analysis he reasoned that where an intrusion reaches low-level firmware or cryptographic roots the standard incident-response protocol becomes self-defeating, since the attacker has compromised the attestation mechanism itself rather than merely extracted data, and that update channels can become distribution vectors for the very thing they are meant to remedy; he then put the trade-off to readers as a choice between delayed containment under human authorisation loops and automated over-isolation of critical command nodes, assessed that uncontrolled autonomous remediation is the more severe systemic risk because it can sever command links instantly, and concluded that strictly bounded authority envelopes will be necessary to prevent automated defence software from causing unintended disruption. That conclusion adopts the applicant’s own construct and requirement as the curator’s analytical answer. A curator returning to an author’s work seven times, writing original analysis on top of it, and inviting a professional readership to debate the result, is a substantially stronger form of engagement than selection alone.
Featured by the Resilient Navigation and Timing Foundation
Resilient Navigation and Timing Foundation · Blog · August 21, 2026
The Resilient Navigation and Timing Foundation, a United States scientific and educational charity that advocates on positioning, navigation and timing resilience and convenes an international advisory council, corporate members and an annual leadership summit, featured the applicant’s RealClearDefense analysis on its blog the day after publication. The foundation’s editor introduced it under the publication’s standard framing, describing it as an article about authentication and confidence in navigation and timing solutions and adding that many factors go into the safe and resilient use of such signals, so that ignoring or misjudging one could produce disaster. The item is noted as having been brought to the foundation’s attention by its own readers, which indicates the analysis circulated within the professional community before the foundation carried it. The feature places the applicant’s argument before the specialist constituency that sets and consumes navigation-resilience requirements, alongside the foundation’s coverage of aviation-safety interference bulletins, national receiver programmes and satellite-navigation policy. The foundation’s page headline attributes the article to a different defence publication; the piece was in fact published by RealClearDefense, whose author page the foundation’s own byline link correctly points to, and this record follows the canonical source.
Op-ed published in Eurasia Review, replying to a writer who had cited him
Eurasia Review · September 1, 2026 · Authored by Burak Oktenli · Second piece published that day
Eurasia Review published the applicant’s opinion piece “The Next Autonomous-Weapon Failure May Be a Drone That Obeys Every Rule,” his forty-fifth contribution to the outlet and the second he published that day. It is notable in this record for CLOSING A CITATION LOOP: the syndicated feature recorded elsewhere on this page, which quoted his Articles of War analysis on where responsibility for an autonomous system’s actions properly sits, is answered here directly. He names its author, credits her argument that lethal systems are outrunning the institutions expected to hold humans accountable, restates what she took from him accurately, and then advances the position rather than merely accepting the compliment, writing that she is right that accountability begins earlier than the instant a weapon strikes and that the next step is to make that insight executable. A third party used his work; he replied in print and extended it. His argument sets aside the rogue-machine framing as the least useful image in the debate. A weapon does not need to rebel to escape meaningful human control; it may only need to follow its instructions perfectly after the conditions that justified them have disappeared. He illustrates with a mission in which the communications link drops, navigation confidence deteriorates, and obscuration or deception degrades the sensor picture, so the software switches to onboard guidance and continues exactly as designed: nothing has escaped, nothing has acquired a motive, the system may be functioning precisely as specified, and the governance question is whether it should still possess the same authority. He then distinguishes degrees of delegation that are usually collapsed together, from recommending a target, to ranking targets, to selecting an object, to completing an engagement after losing contact with the responsible human authority, adding that a swarm creates a further layer because a lethal outcome may emerge from interaction among several machines rather than one identifiable decision point. The design principle he states is that PERMISSION SHOULD FOLLOW EVIDENCE, so authority contracts step by step as the link is lost, as navigation integrity falls below its validated threshold, as sensors disagree, and as conditions move outside the validated operating domain, which he contrasts with a single binary switch marked autonomous or not, on the ground that authority should be dynamic because the evidence supporting it is dynamic. He credits an existing national directive with recognising part of this logic in requiring appropriate levels of human judgment, realistic-condition performance, and operation within stated time, geographic, environmental and operational parameters, while arguing the engineering principle should be made unmistakable, and states the failure mode in one line: the loss of evidence should never silently produce the inheritance of authority. His second principle is an asymmetry, CONTRACT QUICKLY AND RECOVER DELIBERATELY. If a link returns after thirty seconds, full authority should not return with it, because one restored signal does not establish that the conditions supporting the original permission have been restored; recovery should require pre-defined evidence such as multiple independent sensor confirmations, re-established navigation integrity, authenticated communications or renewed human authorisation, scaled to the consequence. Permission should be easy to lose when its supporting evidence fails and harder to regain. He also dismantles the phrase human in the loop by asking whether the operator has enough time, can examine the evidence beneath a recommendation, can see uncertainty rather than a confidence score, can determine whether apparently corroborating sensors depend on the same underlying source, and can stop the process without an operational penalty large enough to make approval the expected default. Where those answers are no, the human is present while substantive control has migrated elsewhere. The contribution to the diplomatic debate is his conversion of a normative principle into verification questions that do not require inspecting classified algorithms or model weights: which classes of action require fresh human authorisation, under what evidence conditions permissions must narrow, what happens when communications, navigation or sensing degrade, whether a system may continue selecting or engaging after entering an uncertain environment, what must be true before higher permissions return, and whether an audit record can reconstruct what the system was allowed to do, what evidence supported that permission, and which human authority approved the boundary. He argues these are testable, requiring a system to demonstrate that certain transitions are allowed and others impossible under declared conditions, which makes authority architecture relevant to arms-control verification and not only to design. He rejects both familiar slogans as insufficiently precise, and closes on the observation that a future failure may involve no malfunction at all: the machine follows every instruction, its sensors degrade as anticipated, its fallback activates correctly, it remains entirely inside the constraints humans gave it, and civilians are still harmed because those constraints allowed too much authority to survive the disappearance of the evidence supporting them.
Eurasia Review · September 1, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “AI Is Giving the Kill Chain a False-Precision Problem” under its Analysis designation, the eighteenth of his contributions to carry that label and his forty-fourth for the outlet. He opens on a targeting cell receiving a degraded frame in which a reconstruction layer denoises and sharpens an image that the raw sensor did not clearly resolve, and states the governing question: not whether the enhanced image looks plausible, but whether the sensor ever measured the detail that now appears decisive. He establishes the operational stakes from programmes of record rather than speculation, citing a defence ministry’s battlefield platform analysing over one hundred thousand video streams monthly against a dataset of five million annotated frames, an alliance targeting project seeking to cut information-to-decision latency by more than half, a national investment exceeding one billion pounds in a digital targeting web, and an army programme ingesting space, high-altitude, aerial and terrestrial sensor data. He then does something the record should note: he EXPLICITLY DISCLAIMS the stronger inference those examples might invite, writing that none of them proves generative reconstruction is being used for lethal targeting judgments and that it would be irresponsible to imply otherwise, and resting his case instead on the more basic fact that algorithmically processed sensor data is entering decision chains at greater scale, from more sources, and at higher speed. The technical core is that reconstruction is an inverse problem in which a degraded measurement does not correspond to one unique scene, so several materially different scenes can fit the same observation and the method must fall back on learned priors, regularisation, training data or shape assumptions. He is careful that this is not automatically a flaw, since every reconstruction method uses assumptions and modern methods recover useful structure. The governance failure begins where model-supplied specificity becomes visually indistinguishable from sensor-derived evidence, and he supports it with published findings: work on generative super-resolution identifying realistic-looking details unsupported by the input, computational-imaging research showing non-physical predictions beyond the conditions where the inverse mapping is recoverable, and documented cases in medical imaging where reconstruction created plausible but false anatomical features. He names the failure FALSE PRECISION, a narrow, confident-looking product produced from evidence that still supports meaningful alternatives, and identifies the dangerous case precisely: not an absurd hallucination, which invites scepticism, but a plausible discriminating feature the model supplies because it fits the learned prior. His second move is the one that connects to his research programme: inside a research notebook false precision is an uncertainty problem, while inside a military system it becomes a PROVENANCE problem, because at each handoff the receiving people and machines move farther from the original sensor until a reconstructed detail crosses an organisational or national boundary and arrives looking like observed fact. He extends an alliance data-quality framework’s recognition of lineage into what he calls EPISTEMIC PROVENANCE, not only where a product came from but which parts of its apparent specificity were measured and which inferred, and he links it explicitly to his own earlier published argument that agreeing feeds inheriting a common upstream source constitute a corroboration trap, naming false precision its complement: one inferred detail propagating through several products until repetition makes it look independently established, so that the chain has not discovered more evidence but only moved the same inference farther from its origin. His four requirements are a PROVENANCE OF SHARPNESS preserved in machine-readable form and surviving every copy, fusion, model handoff and coalition transfer, with the explicit note that a single confidence score is insufficient because it describes the model’s output under its own assumptions rather than proving the measurement contained the displayed detail; exposure of material alternatives where several reconstructions are consistent with the data and would lead to different judgments, rather than forcing one photogenic winner; AMBIGUITY TESTING that asks not whether a model usually gets the answer right but whether it recognises when the evidence does not justify a unique answer, with a specified test battery and a pass condition covering whether confidence falls appropriately and whether downstream software preserves the uncertainty; and unresolved output able to generate a new collection requirement, so that the architecture makes it easier to ask for evidence than to manufacture specificity. He closes on the coalition dimension, proposing that evidentiary lineage become part of interoperability through a minimal shared schema preserving the sensor-to-inference boundary, since allied architectures need not share algorithms but do need a common way to say which feature was measured, which was inferred, and which uncertainty remains unresolved, and he states the standard in one line: commanders do not need the sharpest image a model can produce, but the sharpest image the evidence can defend.
Eurasia Review · August 31, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “We Can See Earth’s Past, We Cannot Send It a Message,” his forty-sixth contribution to the outlet. Its method is the one that recurs across his scientific writing: take a proposal that sounds plausible for a few seconds, identify precisely which step fails, and then ask what survives the failure. He separates two questions routinely conflated, recovering information that was already emitted in the past, which is ordinary physics, and sending newly created information to an event that has already occurred, for which established physics supplies no mechanism. The first he grounds in the delay inherent in every astronomical observation and in the light echo, where part of a stellar outburst travels directly to an observer while another part scatters from surrounding dust and arrives later, and he isolates the point most easily missed: the scattered light has not travelled backward through time but forward for longer. He then turns the problem around, noting that electromagnetic radiation which left the planet decades ago did not cease to exist and continues outward, so that if some of it later interacted with suitably positioned matter and a fraction were redirected back, it could be received long after emission. That, he argues, would not be retrocausal communication but ASTRONOMICAL ARCHAEOLOGY, the universe returning information the planet itself placed into its own future light cone. He observes that a modern astrometric catalogue containing positions and motions for nearly two billion sources does not supply a convenient reflector but does something more useful, converting a geometrical question that once belonged to speculation into one that can be confronted with real catalogues, which he describes as how a strange idea becomes a research question. The refutation is causal rather than technical: a message first exists at the moment it is chosen, a transmitter can send it to a later event, a reflector can pass it to another later event, and a computer of any kind can process information only after that information is available to it, so adding stages changes direction, wavelength, encoding, power or trajectory without making the destination occur before the selection. A mirror reverses a beam’s spatial direction, not the ordering of cause and effect, and an optimiser can find the best route available without creating a route the causal structure does not provide. He closes the same door on quantum arguments, noting that the standard teleportation protocol still requires classical information to reach the receiver before the state can be reconstructed, and setting a strict test for any effect described with temporally suggestive vocabulary: can an experimenter choose a classical message now and cause that choice to become accessible at an earlier event? If not, whatever occurred is not communication with the past. He adds a caution that belongs to his wider argument about claims, that scientific vocabulary can become more powerful in public discussion than the physics it originally described. Having established the prohibition he treats it as productive rather than terminal, listing the lawful problems that remain, including long-range optical communication, machine-assisted pointing and relay scheduling, photon-counting sensitivity, reconstruction of faint delayed radiation by distributed telescopes, and archives deliberately created to be recovered decades later, and he anchors the direction in a completed deep-space optical demonstration that transmitted high-definition video across tens of millions of kilometres and later operated across hundreds of millions. The formulation that carries beyond the subject is his distinction between limitations that are optimisation problems and limitations that define the set over which optimisation is permitted to operate, with the corollary that causal order is not another tunable engineering parameter. That is the same distinction he drew between a physical ceiling and an engineering inefficiency in his work on exotic propulsion and on tuning against physical limits, applied here to the boundary between the physically forbidden and the merely difficult.
Op-ed published by The Defence Horizon Journal, a new outlet
The Defence Horizon Journal · August 31, 2026 · Authored by Burak Oktenli · Nineteenth outlet to publish his work · Standing author page
The Defence Horizon Journal, a defence publication that operates an editorial office and a peer board and maintains a standing author page for him, published the applicant’s analysis “The Alliance Has No Common Answer to a Machine-Speed Question,” his first placement with that outlet and the nineteenth publication to carry his work. The piece is structured to the journal’s format, opening with an abstract, an explicit problem statement, and a “so what” section stating the recommended action. Its argument is the applicant’s central research claim applied to alliance governance. He credits the alliance with three years of work on the technical scaffolding for fielding autonomous systems across member states, including an autonomy implementation plan, principles of responsible use, and a cadence of interoperability exercises, and grants that it has largely succeeded at interoperability understood as an engineering property, meaning allied machines can operate as one. His claim is that it has not resolved a harder property, authority: when an autonomous system proposes a lethal action faster than a human can meaningfully review it, and two allies operating the same kill chain hold different national thresholds for permitting that action, whose threshold governs, and who is accountable when they disagree. He grounds the divergence in documented policy rather than hypothesis, citing one member state’s coalition agreement rejecting systems that operate entirely without human control alongside another’s directive permitting them subject to appropriate levels of human judgment, a standard its own guidance describes as deliberately flexible, and noting that the allies do not share a vocabulary, since expert bodies have worked in terms of meaningful human control while one member rejects the phrase. He illustrates the mechanism with a distributed strike sequence in which a loitering munition selects and strikes independently, a human-confirmed follow-up occurs, and a decoy draws air defences that another autonomous system destroys, observing that the chain works precisely because its timing is compressed below a deliberate human decision cycle, so a shared network does not pause at a national boundary to ask which standard applies. The distinction he draws is between adversary-facing escalation through misperception and what he names ESCALATION BY DIFFUSION within an alliance, in which an action taken at one member’s permissive threshold on a shared system commits the coalition to consequences its more cautious members never authorised, so that the cautious ally discovers after the fact that it was party to a strike its own rules would have forbidden, because the system was interoperable and the authority was not. He anticipates the obvious objection, that the chain of command resolves this, and answers that machine-speed autonomy is precisely the condition under which the commander’s deliberate decision has been compressed out, noting that allied joint targeting doctrine is a phased process built around commander decision points, which is the tempo autonomous engagement is designed to outrun. He also identifies three plausible loci of command responsibility that are not designated in advance: the state whose platform executed the strike, the state whose sensors cued it, and the commander whose network configuration fixed the engagement threshold. His three commitments require no new institutions: treat authority as a graded, declared property, so that before fielding an interoperable capability each state declares in machine-readable form the threshold at which its rules permit autonomous lethal action and the shared system defaults automatically to the most restrictive declared threshold, on the principle that an alliance is only as permissive as its most cautious member consents to be; make every engagement leave an authority record logging at the moment of action which threshold applied and under whose authority, noting that the technology exists while the requirement to use it does not; and treat threshold disagreement as a planning input rather than an operational surprise, so that coalition exercises rehearse what happens when allied authorities do not align as well as whether allied systems interoperate. He proposes that the standardisation machinery already certifying technical interoperability be extended to certify authority interoperability, making a declared threshold, an authority record, and a rehearsed disagreement procedure as much a condition of fielding on allied networks as a common data format. The piece unites the two lines the applicant has developed all year: graded, declared, machine-enforceable authority with a tamper-evident record, and the alliance-assurance argument that technical interoperability can advance faster than reciprocal confidence in the authority rules the software enforces. His closing formulation, that an alliance able to make its autonomous systems act as one without agreeing whose finger is on the trigger or how fast it may move has built a machine-speed question it has not given itself a way to answer, states that union in a sentence.
Eurasia Review · August 28, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “COVID Had Quarantines and Vaccines. A Cyber Pandemic Could Infect the Cure.,” his forty-third contribution to the outlet. The thesis stated in the title identifies a disanalogy that the familiar public-health comparison tends to obscure: the countermeasures deployed against a biological outbreak sit outside the reach of the pathogen, whereas the machinery for detecting, coordinating and remediating a large-scale digital incident can share infrastructure, software lineage and dependencies with the thing it is responding to. The argument draws on three requirements established in his own verified published work. The first is his dependency argument, that channels sharing a common ancestor do not supply the independent evidence a naive count implies, since components inheriting the same reference or software family fail together, so agreement or availability cannot be assumed from apparent redundancy. The second is the continuity requirement he set out for allied technology access, that planning name pre-identified alternative systems, local fallbacks, degraded operating modes and data portability rather than assuming a service remains reachable. The third is his revocation requirement, that a legitimate decision to restrict, suspend or revert authority must be capable of becoming an actual change in system behaviour, on the principle that governance without an executable path to revocation is advice. The domain is cyber crisis response rather than autonomy, and the entry records it on that basis.
RealClearDefense · August 27, 2026 · Authored by Burak Oktenli
RealClearDefense published the applicant’s op-ed “A Quantum Advantage Is Not a Defense Capability Until It Survives the Whole System,” his eighth contribution to the outlet, which maintains a standing author page for him. He opens by naming a translation problem: physics papers can demonstrate a real advantage under carefully defined conditions, while defence organisations do not buy error exponents, witness values, or laboratory plots but systems. He takes quantum illumination as his worked example precisely because the science is both real and frequently overstated, citing the original theory showing that correlated signal-idler architectures could improve target discrimination in noisy and lossy regimes, later work quantifying a substantial error-exponent advantage under specific Gaussian-state assumptions, and experiments demonstrating correlation-enabled gains in optical and microwave systems, each referenced to its published source. His conclusion from that literature is stated carefully: those results justify serious research, and they do not establish that a deployable long-range quantum radar can defeat stealth aircraft at tactically useful ranges. He then examines the microwave demonstration most often invoked in the debate, noting that it used a short laboratory-scale configuration and a digital receiver and showed that the concept can improve binary target discrimination under particular conditions, while leaving unsolved military aperture, atmospheric loss, clutter, mobility, latency, countermeasures, target cross section, and long-range idler storage, and he frames this not as a reason to dismiss the technology but as a reason to measure the right thing. His prescription is a NO-FREE-ADVANTAGE RULE under which every claimed quantum gain is reported beside the total system cost required to produce it, illustrated in both directions: a theoretically meaningful improvement is not yet mission value if obtaining it requires a receiver that destroys bandwidth, cannot operate at useful temperature, imposes prohibitive storage loss, or demands size and power incompatible with the platform, while a modest gain may be operationally valuable where transmit energy must remain extremely low or where a different error mechanism gives commanders useful diversity, so the demand is for end-to-end gains rather than spectacular ones. From this he derives FOUR ACQUISITION GATES: physical advantage, whether the quantum resource beats an optimised classical physical baseline under matched constraints; integrated advantage, whether that gain survives real source, channel, detector, calibration, timing and processing losses; assurance advantage, whether the system can detect that the conditions supporting its quantum claim no longer hold and degrade safely; and mission advantage, whether the assured system improves a mission-relevant outcome enough to justify lifecycle cost and complexity, with the observation that a programme passing the first gate has demonstrated physics rather than a fieldable capability. He insists the classical baseline be the best relevant architecture under matched bandwidth, energy, aperture, observation time and false-alarm constraints, and for learning systems a tuned classical model with equivalent data partitions, leakage controls, compute budgets and operational metrics, warning that otherwise a programme can manufacture an advantage simply by choosing the wrong opponent. The third gate is where this piece connects most directly to his research programme, since he extends the same discipline to machine learning used inside quantum systems, crediting calibration, state reconstruction, syndrome decoding, anomaly detection and sensor fusion as promising because they are measurable, and then stating the constraint that a learned confidence score should not be allowed to hide a failing clock, invalid calibration, lost correlation, or a degraded sensor state, which is his standing requirement that a system report the evidentiary condition of its own output rather than a score that conceals it. He closes by arguing the approach protects quantum research rather than slowing it, since the most damaging outcome would be to convert legitimate laboratory progress into inflated operational promises, spend heavily against them, and then conclude the field failed when engineering reality arrives.
Eurasia Review · August 27, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “AI Can Discover New Materials Faster Than Science Can Validate Them” under its Analysis designation, the seventeenth of his contributions to carry that label, his forty-second for the outlet, the second piece he published on that date, and the tenth in a sequence on machine-assisted scientific inference. The thesis stated in the title concerns the asymmetry between the rate at which candidates can be generated and the rate at which they can be confirmed. It applies the promotion boundary established across that sequence in his own verified published work: a system may propose candidates, rank hypotheses, quantify uncertainty and recommend what to examine next, while moving from a proposed candidate to an established result requires controlled measurement, discriminating tests, independent replication, and a theory that predicts something new, none of which faster generation can supply. It carries the related requirements he has published in the same sequence, that an unresolved status remain a legitimate output rather than being forced into a conclusion, that the extent of an automated search belongs in the claim that search produces, and that a declaration standard is incomplete without a rule governing when to stop. The domain is materials research rather than governance or assurance, and the entry records it on that basis.
Eurasia Review · August 27, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “What the Next Collider Can Really Give the World Beyond Particle Physics,” his forty-first contribution to the outlet. The thesis stated in the title asks what a very large scientific instrument actually delivers beyond the science it is built to do. It applies the accounting discipline he has developed across his published work in several fields: that a claim of advantage or value is meaningful only against a stated, optimised and resource-matched comparison rather than against whatever alternative is nearest to hand; that an unmeasured term must remain visible as an unknown instead of inheriting full performance by silence, which was the error he named in examining exotic-propulsion claims; and that the conditions under which a result was obtained belong in the claim it supports. The subject is scientific-infrastructure investment rather than autonomy or assurance, and the entry records it on that basis.
Eurasia Review · August 26, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “Ratcliffe’s Moscow Visit Highlights the Strategic Value of Intelligence Backchannels Across Eurasia” under its Analysis designation, the sixteenth of his contributions to carry that label, his fortieth for the outlet, and the fifth piece he published on that date, his highest single-day count on record. The subject is intelligence diplomacy rather than technical governance, and the piece is notable in this record chiefly for the evidentiary discipline it applies to a story built on an undisclosed agenda. He states repeatedly and explicitly what the public record does and does not establish, declining to present the visit as evidence of any particular mission, noting that a senior official’s public characterisation narrows the plausible framing without revealing the substance, and observing that the temptation is to turn an undisclosed agenda into a definitive story. From the verifiable facts he draws a narrower conclusion: whatever the agenda, the channel exists and is treated as potentially valuable. His analytical frame is that intelligence relationships matter not because officials can secretly negotiate settlements but because, where formal diplomacy is weak, such channels can carry warnings, clarify intentions, test whether an apparent opening is genuine, and reduce the chance that ambiguous actions become uncontrolled escalation, a function he notes is identified in published legislative research on foreign intelligence relationships. He distinguishes deconfliction from negotiation, treating practical measures around a delegation’s physical presence as risk management rather than evidence of political bargaining, and sets a role-clarity principle: use such channels to improve strategic understanding while keeping consequential policy decisions inside established diplomatic and allied processes, since the strongest backchannels reinforce the wider decision architecture rather than compete with it. He grounds the argument in precedent rather than assertion, examining an earlier mission by a predecessor that did not prevent the event it warned against, and drawing the limit precisely: a channel can transmit information accurately but cannot force the recipient to change policy, though it can still remove one form of uncertainty by making a consequential message difficult to misread. He extends the analysis to other theatres and to the strategic-stability environment following the expiry of the last bilateral treaty limiting deployed strategic forces, arguing that stability is becoming multipolar and that the problem is not simply more weapons but fewer mature risk-reduction mechanisms among some states that possess them, so high-risk relationships need redundant channels as decision timelines shorten. Two formulations connect this piece to his technical work. The first is his statement that the objective is not trust but controlled uncertainty, which is the same position he argues in verification, where the aim is to reduce the amount of trust a claim requires rather than to manufacture trust. The second is his observation that the most useful outcome of such a contact may be a reliable negative answer, which is the argument he makes for scientific practice, that a null result closing a possibility is a product rather than a failure. Applying both to intelligence diplomacy, in a piece that refuses to over-read its own subject, demonstrates the same epistemic standard operating outside his technical field.
Eurasia Review · August 26, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “Bill Gates Is Right About AI Governance: Institutions Need Systems They Can Actually Govern” under its Analysis designation, the fifteenth of his contributions to carry that label, his thirty-ninth for the outlet, and the fourth piece he published on that date. Responding to a widely circulated memo by a prominent technology figure calling for new national and international machinery to manage the artificial-intelligence transition, he accepts the institutional diagnosis as persuasive and identifies the problem underneath it: institutions cannot effectively govern systems that were never engineered to be governable. He makes that concrete in three failures, that a regulator cannot supervise a consequential automated decision if the system cannot reconstruct how it was produced, an oversight body cannot enforce a human-approval requirement if the architecture permits that step to be bypassed, and an international agreement cannot impose a meaningful limit if there is no practical way to determine whether it was followed. He names the missing discipline governance engineering, and notes that while the memo does not use the term it reaches the institutional half of the same problem, so that governance can no longer be treated only as policy written around a machine because some of it has to be built into the machine. He then extends the memo’s notion of work deliberately reserved for people into HUMAN RESERVED AUTHORITY, meaning decisions societies keep under human control even when a machine can produce an answer faster or more accurately, illustrated across medicine, credit, and public benefits, where diagnostic accuracy does not settle whether a system should deny treatment, predictive accuracy does not settle whether it should independently terminate access to credit, and efficient detection does not settle whether it should cut off support without meaningful appeal. His central analytical move is the separation of capability from authority: a model can classify, predict, rank, recommend, or generate without changing anything, and consequences begin only when an output crosses an interface carrying permission, so the critical boundary is not between human and machine intelligence but between prediction and permission. From that follows his AUTHORITY ENVELOPE, a defined description of what a system may do, under which conditions, with which data and tools, for whom, and with what level of human supervision, under which some actions remain technically impossible without human authorization, others are delegated only inside bounded operating conditions, and low-consequence reversible actions may be automated freely. He specifies what institutions must be able to inspect, listing model and configuration versions, data and decision provenance, the authority granted to the system, evaluation results, meaningful audit trails, and records of material changes, together with defined escalation paths and mechanisms for correction, rollback, or shutdown when the evidence supporting deployment no longer holds, observing that without this governments can create elaborate offices that issue rules yet cannot determine whether deployed systems followed them. He addresses the durability of approval directly, describing what he calls the stale-approval problem: models are updated, pipelines move, vendors alter services, tools are connected, a system authorized to summarise acquires recommendation functions, a recommender later gains execution privileges, and human review disappears because it slows the workflow, so that the approval remains while the system that earned it effectively disappears. His requirement is that authorization attach to a defined configuration and operating context, identifying the model version, data regime, intended use, external tools, permitted authority, deployment environment and monitoring assumptions that justified it, with material change triggering renewed evaluation, which he frames not as obstruction but as basic assurance, since evidence establishes confidence in something specific and changing the thing may mean the evidence no longer describes it. He then raises the question he says policy neglects, which is not who may authorize deployment but who can take authority away, and requires a REVOCATION ARCHITECTURE in which a legitimate institutional decision to restrict, suspend, revert or terminate authority is capable of becoming an actual change in machine behaviour, stating the principle that governance without an executable path to revocation is advice. On the international layer he warns that a model assuming every state can independently inspect the internals of frontier systems would reproduce the capacity imbalance it is meant to manage, and that the answer is not to export one jurisdiction’s regulatory code but to develop a COMMON EVIDENCE GRAMMAR, a set of comparable questions any state can ask about what system was operating, what it was authorized to do, what evidence supported that authority, whether its configuration materially changed, whether human approval was required, what happened during a consequential action, and which institution could intervene. For security-sensitive systems where unrestricted transparency is unrealistic he points to narrow proofs rather than full disclosure, through cryptographic attestation, tamper-evident logs and standardised audit records, which he says changes the object of negotiation from a request to be trusted into a demonstration about the specific rule agreed. The piece is notable in this record as a SYNTHESIS: it explicitly draws together four of his own earlier analyses in the same outlet, on governance gaps across eight industries, on rules requiring a capable forum able to demand and evaluate evidence, on frontier-model access among allies, and on verification through narrow proofs, and assembles them into a single named framework. His closing formulation is that the next generation of these systems should be not merely more intelligent or more autonomous but more legible, bounded, auditable and revocable, and that the decisive question may be whether humans remain capable of deciding which powers machines are allowed to exercise.
Eurasia Review · August 26, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “The New U.S. Science Strategy Is Quietly Redrawing Eurasia’s Innovation Map” under its Analysis designation, the fourteenth of his contributions to carry that label, his thirty-eighth for the outlet, and the third piece he published on that date. It analyses the national science and technology strategy issued in August 2026, the same document whose critical and emerging technologies list names autonomous agent identification and authentication as a subfield. His reading is that the strategy is being understood too narrowly as a list of technologies to lead, when its more consequential move is to connect those technologies to the machinery deciding who may build, test, finance, share, secure, and integrate them, through workforce policy, reformed research infrastructure, targeted funding, public-private partnership, participation by nontraditional performers, tighter research security, and greater use of allied capability. On that reading the country is not defining a technology portfolio but the architecture of a trusted innovation network. He argues the European debate is miscast as a choice between strategic autonomy and dependence, since the real question is whether a partner can preserve industrial and political sovereignty while remaining interoperable with a system whose evidence standards, research-security rules, software architectures and supply-chain expectations are becoming more demanding, and he makes the failure concrete: components from several countries may be technically compatible and still create friction if their evidence standards, certification records, software-change controls, provenance rules or authority limits cannot be recognised across borders. The prize, he concludes, is not technological uniformity but reciprocal trust at the interface, meaning common evidence formats, mutual recognition of testing where appropriate, transparent supply-chain assurance, and enough architectural openness that a partner can integrate without surrendering control of its own system. He observes that allies in the Indo-Pacific are becoming co-development and co-testing nodes rather than customers, and draws the strategic implication for smaller states that a country need not reproduce an entire technology stack to matter, since owning a difficult sensor niche, a trusted manufacturing process, an alternative navigation capability, a test environment, a software-assurance capability or an irreplaceable workforce can make it indispensable inside a distributed system. He also identifies the cost of the same strategy, noting that stronger research security, tighter protection of sensitive data, modernised export controls and restrictions on high-risk entities create a second geography layered on the first, a geography of trusted access in which security alignment increasingly affects the transaction cost of innovation. The passage of greatest significance for this record is where he states his own research principle in the first person, writing that in his work on governance engineering he treats authority not as a permanent attribute but as something granted, bounded, monitored, degraded, and recovered according to evidence, and then scales that principle deliberately from machines to institutions: a trusted network should not require blind trust among allies but should reduce the amount of trust that has to be assumed, a partner should be able to show where a component came from, what test it passed, what data it can access, what software changed, what authority a machine retains under degraded conditions and what happens when a trust condition fails, and a network that can only operate when every participant is fully trusted is fragile while one that can grant bounded access, detect failure, isolate a compromised element, preserve unaffected functions and restore participation when evidence supports it is strong. He states plainly that this is as true for multinational technology ecosystems as for autonomous machines. His four recommendations follow from it: make test evidence portable across trusted environments; design partnership programmes for specialised contributors rather than only national champions, so a small company or independent laboratory can contribute a verifiable component without first becoming a defence conglomerate; treat talent policy as national-security infrastructure, since the limiting resource in these fields is often people rather than equipment; and apply resilience to the innovation network itself, so that a supply-chain compromise, export-control dispute, data-security incident or political disagreement produces scoped restrictions, fallback suppliers, auditable interfaces and restoration procedures rather than collapsing every technical relationship around it. That last recommendation is the recovery discipline of his formal work stated at the level of alliances, and the piece as a whole is the clearest published statement of the applicant’s own framing of his research programme.
Eurasia Review · August 26, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “The Quantum Sensor Arms Race Has an Alliance Accounting Problem” under its Analysis designation, the thirteenth of his contributions to carry that label, his thirty-seventh for the outlet, and the second piece he published on that date. He opens on the observation that the quantum sensor race is becoming an alliance acquisition problem before it becomes a battlefield one, writing against an executive direction to identify next-generation quantum sensor projects for priority fielding, flight trials of a quantum inertial-navigation system by one ally, trilateral testing of quantum clocks intended to inform navigation where satellite reference is unavailable, and alliance work making quantum sensing and timing part of maintaining technological competitiveness. He credits the underlying physics as serious and locates the strategic problem one step later: allies do not always mean the same thing when they say a sensor has demonstrated an advantage, since one programme may report laboratory sensitivity, another navigation drift over a trial, a third a modelled detection gain, and a fourth size, weight, power and cost, all four being technically correct while describing very different levels of military usefulness. That, he argues, produces an accounting problem in which partners can reach different procurement and threat-assessment decisions from the same underlying science. His central claim is that a component-level gain is not a deployable advantage, because a military does not field a sensitivity curve but a sensor package together with calibration equipment, environmental controls, processing, software, power, maintenance, trained operators, platform integration, and a fallback path for when the new technology is unavailable, and he insists every one of those belongs in the comparison alongside state preparation, calibration time, optical or microwave loss, vibration and thermal control, availability, maintenance burden, platform motion, data processing and lifecycle cost. He adds the requirement that the classical alternative receive a fair budget rather than being represented by whatever device already sits on the procurement shelf, since the same money might instead buy a better clock, improved filtering, more sensors, a longer integration window, additional aperture, or stronger data fusion, and frames this not as an argument against quantum investment but as a rule for knowing what the investment actually buys. He identifies assured positioning, navigation and timing as the clearest near-term test case because the operational problem is already defined, noting that quantum clocks and inertial sensors need not defeat every classical navigation architecture but must preserve useful navigation and timing where the normal external reference is denied, and he reframes the alliance question in mission terms: how much drift is acceptable over the relevant period without satellite reference, how long calibration takes before a mission, how often recalibration is required, what happens under vibration, temperature change, magnetic interference or platform manoeuvre, and what classical fallback remains if the quantum layer fails. His proposed readiness grammar has four parts: compare complete mission systems under matched resources so that preparation, calibration, power, platform burden, maintenance, availability and lifecycle cost do not disappear outside the comparison; report advantage at the level relevant to the mission, since component improvement is scientific evidence while mission improvement is the acquisition claim; identify the failure boundary, meaning the efficiency, noise, calibration, environmental or resource conditions under which the advantage disappears, so a programme manager knows not only where the technology wins but where it crosses back below the best conventional alternative; and ask whether the capability can be integrated and supported across national forces, since a sensor depending on national-only calibration infrastructure, proprietary interfaces, or a maintenance chain unavailable to partners may be a useful sovereign capability without being an alliance-wide one. He notes that none of this requires publishing classified performance figures, since the accounting method can be harmonised without exposing sensitive thresholds. His closing argument is that bad accounting becomes bad strategy, because a laboratory gain read by another party as a deployable capability lets threat assessments move faster than the technology, producing a familiar dynamic in which analysts adopt a high-end interpretation, acquisition organisations fund counters, and allies duplicate programmes to avoid appearing behind, so that a technically real but operationally narrow advance becomes a broad force-planning assumption. The piece joins the applicant’s baseline-discipline argument to his alliance-assurance argument, applying to allied readiness the requirement he has stated in strategic assessment, procurement, navigation engineering, and research planning: a claim of advantage is meaningful only against a stated, resource-matched comparison, and the conditions of a demonstration belong in the claim it supports.
Eurasia Review · August 26, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “AI Can Find the Anomaly, It Cannot Tell You What Caused It” under its Analysis designation, the twelfth of his contributions to carry that label, his thirty-sixth for the outlet, his eightieth original commentary placement, and the ninth in a sequence on machine-assisted scientific inference. His opening claim is that the most consequential failure of an automated system may not begin with a fabrication at all, but with a correct result promoted into a stronger claim than the evidence supports. He traces the mechanism precisely: one model flags an unusual pattern, a retrieval system finds similar incidents or papers, another model ranks possible explanations, and a language model turns the chain into a polished alert, so that what began as “this input is unusual under my current baseline” arrives as “the probable cause has been identified” without any stage having needed to invent a fact, each having only strengthened the wording slightly. He names the underlying category error, that anomaly detection is not root-cause analysis, scientific identification, fraud attribution, medical diagnosis, or threat confirmation, but a way of deciding where to look next, and formalises it as the distinction between a relationship and an identity: a detector answers the bounded question of whether an observation differs from the representation, reference distribution, and threshold it was given, and that score does not establish why the observation is unusual, nor that the baseline is complete, the instrument and data pipeline healthy, the input still inside the conditions on which the model was validated, or the leading explanation better than ordinary alternatives. He adds that the extent of the search changes the meaning of the result, since a striking local finding becomes much less surprising once the full space of windows, features, thresholds, locations and settings is counted, and notes that a national risk-management framework already treats validity, reliability, transparency and continuing measurement as system-level properties, which is the right frame because a detector’s output becomes meaningful only with the context that makes the score interpretable. The analytical core is his LADDER OF LINGUISTIC PROMOTION, in which “unusual under this baseline” becomes “anomalous”, then “consistent with”, then “evidence for”, then “caused by”, while the baseline, threshold, data-quality warning, search scope, missing evidence and alternative explanations fall away, leaving a fluent summary that looks more complete than the detection that produced it. He shows the same structure across four institutional settings, where a security system may correctly flag unusual traffic without proving intrusion, a financial model may correctly detect an abnormal transaction without identifying fraud, an intelligence workflow may correctly surface an unusual pattern without establishing hostile intent, and a medical monitor may correctly identify a deviation without proving a diagnosis, and locates the institutional danger at the handoff, the moment a machine-generated score becomes a ticket, report, warning, briefing, or automated action. His governing sentence is that the system which searches for novelty should not also hold unconstrained authority over the vocabulary of causality. He identifies a second trap in synthetic training data, since a model may learn artifacts distinguishing one simulator, generator, rendering process or pipeline from another rather than the mechanism the team intended to detect, citing published work on models that perform well by relying on unintended cues while standard metrics remain satisfied, and states the rule that synthetic data can train the search but cannot prove the cause, so a real observation resembling a simulated world justifies follow-up without establishing that nature produced it by the same mechanism, leaving the result a candidate rather than an identity until measured evidence distinguishes the real alternatives. His remedy is explicitly not another confidence score but an EVIDENCE BOUNDARY between detection and explanation, in three parts: the evidence packet should travel with the alert, preserving model and version, baseline, threshold crossed, validated operating domain, search scope, data-quality and calibration status, and the evidence still missing, since a score without that context is not portable evidence; generated language should be bound to an explicit evidence state, so that terms such as unusual, requires investigation, or consistent with a declared hypothesis are permitted under defined conditions while confirmed, caused by, identified or discovered require additional evidence the detector cannot manufacture from its own score; and unresolved should be a legitimate output, with the system identifying what further observation would discriminate among leading explanations, who owns that investigation, and what result would weaken or falsify the preferred interpretation, so that generative fluency does not fill the gap where evidence does not yet exist. He argues these controls preserve rather than diminish the value of detection, since anomaly detection should create an investigation queue rather than an automated conclusion, and warns that the more automated the pipeline the less likely downstream users are to see the original caveats, and the more fluent the generated explanation the easier it becomes to mistake narrative coherence for causal proof. His closing formulation states the boundary in one line: the detector can say that something does not fit, and the investigation still has to say what happened.
Eurasia Review · August 25, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Nobody Audits the Clock,” his thirty-fifth contribution to the outlet and the third piece he published on that date. The thesis stated in the title names timing as a dependency that sits beneath measurement and correlation while rarely being examined in its own right. It draws together two strands established in his own verified published work. The first is his dependency argument, in which channels sharing a timing source do not supply the independent evidence a naive count implies, since sensors, platforms or analytic products inheriting time or position from the same reference have errors that move together, so agreement downstream cannot establish that the upstream reference was correct, and a confidence system counting feeds without tracing shared ancestry prices an echo as evidence. The second is his navigation-integrity argument, in which authentication of a source is distinct from the validity of the solution built on it, verification happens at moments while the dependent process runs continuously, and a system must therefore carry both provenance and a current integrity assessment rather than assuming the second follows from the first. He has also deposited a technical note on the interval between authentication marks, which formalises how far a platform may drift before a stated tolerance ceases to hold. Applying that line to timing as a scientific and infrastructural input rather than a navigation one extends an argument he has developed in engineering and alliance registers into a general question about what a shared reference silently guarantees.
Techstrong.ai · August 25, 2026 · Authored by Burak Oktenli
Techstrong.ai published the applicant’s op-ed “Quantum Computers May Need AI Before AI Needs Quantum Computers,” his second placement with that publication, which maintains a standing author page for him. The piece inverts the usual framing of the relationship between the two technologies, accepting that a sufficiently capable quantum machine might one day outperform conventional systems on learning problems while arguing that the stronger near-term evidence runs the other way. His grounding claim is that quantum hardware has an observability and operations problem before it has a superiority problem: devices are noisy, calibration drifts, cross-talk and leakage produce error patterns that simplified models do not capture, measurement reveals only part of the underlying state, and error-correction systems emit syndrome streams that must be interpreted quickly enough to keep a computation alive. He identifies these as high-dimensional pattern-estimation and control problems at which ordinary machine learning is useful, and supports the claim with published results rather than assertion, citing neural-network representation of quantum many-body problems, neural-network quantum-state tomography reconstructing states from measurement samples, a learned error-correction decoder demonstrated on experimental superconducting-processor data and scaled in simulation to larger code distances, and subsequently reported below-threshold memories with real-time decoding. From that last result he draws a counter-intuitive consequence: better hardware may increase rather than eliminate the demand for intelligent classical infrastructure, since larger machines generate more calibration, monitoring, decoding, and control work. The methodological core is that each of these functions has a measurable target and a serious baseline, which he enumerates as reduced calibration time, improved reconstruction fidelity, lower logical error, cut decoder latency, and earlier fault detection. He then applies the same standard in the opposite direction, holding that learning on classical inputs and outputs faces a different burden of proof because access to a large state space does not automatically produce a useful advantage when a system must still train, generalise, survive hardware noise, encode the data, perform enough measurements, and return an answer before overhead erases the gain, and noting published work showing that gradients can become exponentially small for broad classes of parameterised circuits. His constructive proposal is to separate three investment cases that a single label conceals: machine learning used to operate quantum hardware, where he says the clearest practical evidence already exists; learning on intrinsically quantum data, where preserving quantum information before measurement may create opportunities absent from ordinary datasets; and quantum acceleration of classical learning tasks, which he says should face the strictest end-to-end comparison against optimised classical systems including encoding, training, measurement, latency, and cost. The governing rule he states is that evidence in one category must not be used to advertise maturity in another, so a learned decoder lowering quantum error is not evidence that a quantum network will beat conventional hardware on a business dataset, and a small kernel experiment is not evidence that a device can be calibrated and operated reliably at production scale. He asks that every project state which of the three problems it is solving, what baseline it must beat, and which bottleneck remains outside the demonstration. That requirement is the baseline discipline he set out five days earlier for strategic technology assessment, applied here to research and investment planning: a claim of advantage is meaningful only against a stated and competitive comparison, and the conditions of a demonstration belong in the claim it supports.
Eurasia Review · August 25, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “NATO’s Next Supply Chain Vulnerability Has No Factory Floor” under its Analysis designation, the eleventh of his contributions to carry that label, his thirty-fourth for the outlet, and the second piece he published on that date. The thesis stated in the title is that the alliance supply-chain exposure now forming is not a manufacturing one. It develops the ownership-architecture position established in his own verified published work, under which compute, energy, data pipelines, integration, cyber assurance, retraining, model monitoring, operator support, software updates, export restrictions and the cost of leaving a supplier sit offstage during a demonstration while determining whether a capability remains usable afterwards, so that a force unable to retrain a model without foreign cloud access, patch it without a proprietary toolchain, validate a new version without external support, or move the workload when export controls change holds less sovereignty than a benchmark comparison suggests, and vendor dependence becomes a form of strategic dependence. It also extends three further requirements verified in his prior work: that models, safeguards, data sources and interfaces evolve after certification so material change must trigger defined retesting, notification, and the ability to restore a previously approved version; that continuity planning include pre-identified alternative systems, local fallbacks, degraded operating modes and data portability; and that technical interoperability can advance faster than reciprocal confidence in the authority rules the software enforces, leaving allies technically connected but operationally asynchronous. The piece applies that line to the alliance as a supply-chain question rather than a procurement or fielding question.
Eurasia Review · August 25, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Science Has Discovery Thresholds. It Also Needs Stop Rules.,” his thirty-third contribution to the outlet and the seventh in a sequence on machine-assisted scientific inference developed over thirteen days. The thesis stated in the title is that a standard governing when a result may be declared is incomplete without a rule governing when to stop looking. It is the counterpart to positions he has already established in the same sequence: that discovery is a status conferred by evidence meeting a stated standard rather than a conviction that something has been found; that the extent of an automated search belongs in the claim that search produces; and, most directly, his rule that an information diagnostic, its threshold-selection procedure, and the acceptable error criterion be fixed on development or calibration data and applied unchanged to untouched cases, since a criterion adjusted once the outcome is known becomes a form of post-selection. Applied to stopping, that rule implies a declaration threshold reached by continued searching rather than by accumulated evidence is not the same result as one reached under a pre-specified rule, which is the distinction the piece names. The requirement recurs throughout his published work in other registers, from the demand that a claim carry the conditions under which it was obtained to the insistence that a baseline is part of a claim rather than a footnote to it.
Eurasia Review · August 24, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “AI Agents Are Getting Wallets: Security Needs to Follow the Money,” his thirty-second contribution to the outlet. The thesis stated in the title concerns what changes when software agents acquire the ability to move money, and it applies a requirement he had already set out in verified published work for federal artificial-intelligence deployment: that authority boundaries be defined per action class rather than per model, since reading a public dataset, writing to a production database, and initiating an external transaction carry different consequences and require separately bounded permissions. That earlier argument also specified session-level revocation propagating to tokens, credentials, delegated jobs, and downstream automations, and a prohibition on downstream software continuing as though a withdrawn permission were still in force. His standing distinction between capability and authority applies directly here, since a model in a repository has possibilities while an agent holding credentials, network access, and now payment instruments exercises authority whose limits must be enforceable rather than assumed. The piece extends that line from public-sector deployment to commercial transaction systems.
RealClearDefense · August 20, 2026 · Authored by Burak Oktenli
RealClearDefense published the applicant’s op-ed “Trust the Signal, Doubt the Position,” his seventh contribution to the outlet, which maintains a standing author page for him. Written against recent departmental awards for an assured positioning, navigation and timing device at scale and for advanced navigation for unmanned aircraft and launched effects, and against next-generation maritime and aviation receiver-card agreements intended to give weapons-system integrators more resilient timing and positioning in contested environments, the piece accepts those investments as aimed at the right battlefield problem and then states the question it says belongs in the requirements documents: when a receiver is genuine and the signal source can be authenticated, what exactly must the platform do once the navigation solution itself becomes doubtful. His governing distinction is that authentication establishes provenance while navigation integrity governs whether the position, velocity or timing solution in use right now remains fit for action, so a system can succeed at the first task while confidence in the second is already degrading. He grounds this in civil navigation, noting that an open-service navigation message authentication capability passed its first operational anniversary and lets a receiver verify that navigation information came from the constellation and was not altered in transit, that its roadmap points toward future ranging-signal authentication, and that the regional aviation regulator updated its interference bulletin after reviewing recent jamming and spoofing events. The lesson he draws for acquisition is that verification happens at moments while navigation happens continuously, since between cryptographic checks a receiver keeps computing, autopilots keep flying, timing systems keep synchronising and weapons and autonomous platforms keep consuming outputs, so a successful authentication cannot reach backward and undo an operational decision made during an interval when the solution had already become unreliable. From that he argues a specification saying only that a system supports authentication describes a capability and says very little about behaviour under pressure, and poses the harder questions a serious requirement should answer, including the age of the last successful authentication, what independent evidence is checking the current solution in the meantime, whether the downstream mission system receives an explicit integrity state and uncertainty estimate rather than a position that looks as confident as it did ten minutes earlier, and what happens when the evidence supporting that solution falls below a defined threshold. His three proposed changes are a continuous integrity state that travels with the navigation output, carrying the age and status of the last successful verification, the current integrity assessment, an expression of uncertainty and a reason code when confidence has been downgraded, propagating all the way to whatever is making the decision; specified behaviour when confidence runs out, under which a platform may shift to an alternate source, enter a declared degraded mode, constrain autonomous action, request operator confirmation, or abstain from providing a solution for a class of decisions, with downstream software barred from quietly preserving the last good value or substituting a nominal default and continuing as though nothing had changed; and acceptance testing of the interval rather than only the authentication event, measuring how quickly a degraded solution is recognised, how the system behaves during false alarms, whether declared degraded modes actually engage, and whether consuming systems honour an invalid or uncertain navigation state. He closes on ownership, observing that constellation operators, receiver manufacturers, platform integrators, software teams, program offices and mission owners each hold one piece of the assurance chain and that a requirement belonging to everyone in general belongs to no one in practice, and on the standard that assured navigation should tell a commander not only whether the signal came from a trusted source but when the answer built from that signal has stopped earning trust. The piece is the defense-acquisition statement of the argument he published in a navigation-engineering trade venue the previous day, making it the second instance in four days of one requirement written separately for the two communities that would have to enforce it.
Eurasia Review · August 22, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Discovery Is a Rank, Not a Feeling,” his thirty-first contribution to the outlet, the third piece he published on that date, and the sixth in a sequence on machine-assisted scientific inference developed over ten days. The thesis stated in the title is that discovery is a status conferred by evidence meeting a stated standard rather than a conviction that something has been found. It develops the promotion boundary he established earlier in the same sequence, under which an automated system may detect patterns, rank hypotheses, quantify uncertainty, and recommend follow-up observation, while moving from an unexplained signal to a claimed mechanism requires controlled measurement, discriminating tests, independent replication, and a theory that predicts something new, none of which better pattern recognition can supply. Treating discovery as a rank rather than a feeling is the graded-authority structure of the applicant’s own research applied to scientific claims: a claim occupies a level determined by the evidence supporting it, and promotion to a higher level requires evidence of a specified kind rather than increased confidence.
Eurasia Review · August 22, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “Open Societies Cannot Win an Information War by Becoming Closed Ones” under its Analysis designation, the tenth of his contributions to carry that label, his thirtieth for the outlet, and the second piece he published on that date. The thesis stated in the title is that closing an open society in response to information competition sacrifices the property that competition is meant to defend. It applies a position he has developed in his own published work on verification and disclosure, in which full transparency is explicitly rejected as a remedy on the ground that states will not and should not publish sensitive material, while the constructive objective becomes reducing the amount of trust a narrow claim requires rather than manufacturing trust wholesale. In that earlier verified argument the useful question was reframed from whether a party will reveal how its systems work to which limits it is willing to prove, for what period, using what evidence, and under what challenge procedure, on the reasoning that smaller questions are easier to negotiate; and in his verified work on strategic technology assessment he made the parallel case that the remedy for ambiguity is disciplined declaration of the terms of comparison rather than either disclosure of everything or disclosure of nothing. The piece extends that bounded-disclosure position from technical verification to the political question of how open societies conduct themselves under information pressure.
Eurasia Review · August 22, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “The Most Important Number in Corporate AI Is the One Companies Rarely Report,” his twenty-ninth contribution to the outlet and the first of his recent sequence addressing corporate practice rather than governmental or scientific institutions. The thesis stated in the title identifies a disclosure gap, that the figure which would most reveal a company’s actual position on artificial intelligence is the one it does not publish. It applies to corporate reporting the requirement he has developed across his published work, that a reported figure carries the conditions under which it was obtained and is incomplete without them, and that accuracy reported alone says nothing about the cases a system should have declined. In his own verified argument for scientific practice he proposed that teams report abstention rates alongside accuracy and track how those rates change under distribution shift, on the reasoning that a system which almost never declines may look decisive while quietly forcing unfamiliar inputs into familiar categories; in his verified argument for procurement he required that a claim be distinguished from proof that a control actually worked under test; and in his verified argument for strategic assessment he held that a baseline is not a footnote to a claim but part of it. The piece extends that line to the disclosures companies make about the systems they deploy.
Géopolitique Profonde, a French-language geopolitics publication, built an article on the applicant’s Geopolitical Monitor analysis of quantum benchmarking, published the same day under a named staff writer and attributing the argument to him directly in the body text. The article follows the structure of his analysis: the executive action on quantum information science and the rival state’s five-year designation as the occasion, the reframing from who leads to what the comparison is against, the quantum illumination case with its scientific grounding and its operational objections covering range, aperture, atmospheric loss, clutter, target cross section, bandwidth, power, mobility, storage and receiver complexity, the quantum machine-learning case, and his rule that no capability be called superior unless the comparison is explicit, optimised and resource-matched, presented in the article as the rule he proposes and reproduced with its specifications for each of the three fields. His formulation that an arms race becomes dangerous when the benchmark is easier to beat than the adversary is set as a display quotation, and the piece closes by citing his original article as its source. The applicant’s argument is reproduced accurately and attributed by name throughout. The article is published behind a subscription wall, so the full text may not be readable without an account.
Geopolitical Monitor · Opinion · August 21, 2026 · Authored by Burak Oktenli · Seventieth commentary placement
Geopolitical Monitor published the applicant’s opinion piece “The Quantum Arms Race Has a Baseline Problem,” his eighth placement with the outlet, which maintains a standing author page for him, and his seventieth original commentary placement. Written against an executive action directing the maintenance of strategic technical advantage in quantum information science and the identification of next-generation quantum sensor projects for fielding, and against a rival state’s designation of quantum technology among the future industries it intends to cultivate in its current planning cycle, the argument holds that the familiar question of who is ahead has become dangerously incomplete without the harder question, ahead of what. His central claim is that a country can win the quantum race on paper by racing the wrong classical competitor, since a claim of quantum advantage is meaningful only relative to the system it beats: measured against an outdated classical sensor, a poorly tuned classifier, or a weak receiver, an advantage may be scientifically measurable while strategically misleading, so that a quantum result can be real and strategically irrelevant at the same time. He works the point through two cases. In quantum illumination he credits the underlying science as serious, citing the original proposal to use quantum correlations to improve photodetection in noisy conditions, later theoretical work showing substantial advantages against an optimized coherent-state benchmark in a specific low-brightness high-noise regime, and subsequent optical and microwave experiments demonstrating correlation-enabled detection gains under controlled conditions, and then insists that a laboratory detection advantage is not the same claim as a long-range operational radar advantage once range, aperture, atmospheric loss, clutter, target cross section, receiver complexity, bandwidth, power, mobility, and storage enter the military comparison, so the benchmark cannot stop at the physics experiment if the strategic claim concerns a fielded sensor. In quantum machine learning he notes demonstrated quantum-enhanced feature-space methods on superconducting processors while arguing that the existence of a large state space does not establish useful superiority, since training difficulty, measurement cost, data loading, hardware noise, and the quality of the classical comparison can determine whether any advantage survives. His stated rule is that no quantum capability should be called superior unless the comparison is explicit, optimized, and resource-matched, which he specifies domain by domain: for sensing, matched energy, bandwidth, aperture, observation time, environmental noise, and false-alarm constraints; for machine learning, identical train-test partitions, leakage controls, compute budgets, and operational metrics; and for computing, counting data loading, measurement, error correction, classical control, and the best classical approximation likely to exist when the system is fielded. The geopolitical consequence he draws is that strategic competition amplifies technical ambiguity, since a breakthrough announced against a weak benchmark leaves a rival unable to judge how weak it was, so analysts may treat a headline claim as a plausible upper bound, acquisition officials may fund a counter-capability, and leaders may assume an emerging vulnerability, producing an arms-race dynamic driven partly by incompatible comparisons rather than comparable capabilities, an argument he compresses into the observation that an arms race becomes dangerous when the benchmark is easier to beat than the adversary. He explicitly rejects full technical transparency as the remedy, accepting that states will not and should not publish sensitive performance data, and proposes instead internal and allied baseline discipline, under which every major program identifies the classical system it is trying to beat, the resources held constant, the variables excluded from the comparison, and the conditions under which the claimed advantage disappears, and under which allied assessments of foreign claims ask the same questions before converting a scientific result into an estimate of military capability. He notes that partners evaluating the same experiment on incompatible baselines can reach different conclusions, so shared benchmarking methods would require agreeing on what counts as a fair contest rather than sharing every classified measurement, and credits the executive action for already directing a national capability to develop tools for assessing quantum-computing performance while arguing that the logic should extend across strategic quantum technologies, since benchmarking must mature alongside hardware. The formulation that the baseline is not a footnote to the claim but part of the claim is the applicant’s measurement thesis stated for strategic technology assessment, and it is the same requirement his own formal work applies to its results, where a stated figure carries the conditions under which it was obtained.
Eurasia Review · August 20, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “The Machine Can Be Tuned, the Nucleus Cannot Be Persuaded,” his twenty-eighth contribution to the outlet and the fifth piece he published on that date. The thesis stated in the title separates what an optimiser can adjust from what it cannot, holding that a machine and its settings are tunable while a physical constraint is not open to negotiation. It continues two claims established in his own published work: that better mathematics can use the information available more efficiently but cannot manufacture information an experiment never recorded, since a resolution limit and an information floor are properties of the measurement rather than of the analysis applied to it; and that a quantity representing a physical ceiling should not be treated as an efficiency capable of improvement, which was the accounting error he named in his examination of exotic-propulsion claims, where an unmeasured term must remain visible as an unknown rather than inherit full performance by silence. The piece belongs to the sequence on machine-assisted scientific inference he has developed across the preceding week, in which each entry states one requirement in a different register, that a system must report what its evidence does and does not support.
Eurasia Review · August 20, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “The Next Flash Crash May Happen on a Battlefield,” his twenty-seventh contribution to the outlet and the fourth piece he published on that date. The thesis stated in the title takes the automated-market analogy seriously as a warning about military systems interacting at machine speed, where automated participants responding to one another can drive an outcome no participant intended and no human can interrupt in time. It develops two claims verified in his own published work: that the realistic danger in machine-assisted command is quiet rather than dramatic, since one automated function hands a recommendation to another as timelines compress, confidence scores become operational facts, and a nominal human checkpoint arrives after the software has already shaped the available choices; and that a decision aid compressing variables of different strategic meaning into a single figure can look precise while concealing the structure of the situation, so a representation must preserve the type of pressure each observation carries rather than averaging them. It also extends the line of his deposited research on decision compression and escalation risk in machine-assisted command, which is published under its own identifier and listed among his works, making this the public-facing statement of an argument he has developed formally.
Eurasia Review · August 20, 2026 · Analysis designation · Authored by Burak Oktenli · Translated and republished in Albanian
Eurasia Review published the applicant’s piece “Ukraine’s Drone War Is Rewriting What ‘Tested’ Means” under its Analysis designation, the ninth of his contributions to carry that label and his twenty-sixth for the outlet. The argument rejects the framing of fibre-optic control against autonomy as competing answers to one question, observing that the two solve different failures: a fibre link preserves a reliable human connection through heavy jamming, while automatic terminal guidance preserves useful action when that link cannot be held. He documents that the defending force is scaling both at once, noting procurement of several hundred thousand fibre-optic drones in a single year with the great majority of that annual volume received again within the following four months, alongside interceptors that combine remote control with an automatic terminal-guidance mode taking over the final approach after target acquisition. From this he draws the operational lesson that war punishes technological monocultures, and punishes confidence earned under conditions an adversary is free to change. His central claim is that a clean test result is not a portable property of the machine but evidence bound to an environment, so the range problem is no longer whether a system hits the target but whether the conditions under which the result was obtained resemble the conditions in which the system will be trusted to act. He credits current institutional direction, noting that the service test and evaluation command has opened ranges and test infrastructure more aggressively to developers and that an all-domain warfighting centre has been designated as a hub for advanced drone and counter-drone training, while arguing that realism must change more than the scenery on the range: it must change what a passing result authorises. His three requirements follow. Every test result should travel with an operational envelope stating the visibility, target movement, electronic interference, navigation quality, communications state, and adversarial behaviours represented in the evaluation, since a confidence figure without those conditions invites users to treat performance as a property of the model rather than of the model operating inside a tested environment. Operational freedom should expand with evidence, so that a system performing well only in permissive conditions may still be useful but under tighter human supervision and narrower independent authority, with broader autonomy becoming appropriate only once the same system demonstrates reliable behaviour under the interference, deception, and uncertainty expected in the intended theatre, which he presents as a way to field quickly without letting a laboratory result acquire battlefield authority it has not earned. And front-line acceptance and rejection should become part of the test record, since a soldier abandoning an advanced capability for a simpler one is evidence of a mismatch between specification, environment, and mission, while retaining a machine-assisted function under a particular combination of jamming, weather, and target behaviour is equally evidence, so procurement needs a formal path for converting both into revised scenarios, software changes, and acceptance criteria. He grounds the urgency in tempo, observing that the defending force’s innovation cycle now runs faster than the peacetime validation cycle of many allied forces and that a guidance method or countermeasure can change materially between the writing of a requirement and a production decision, so static certification cannot keep pace with a battlefield that continuously rewrites the threat model and test evidence must instead be treated as living evidence, updated when the environment changes, narrowed when an adversary exposes a weakness, and strengthened when a system survives a harder condition than before. He closes on the observation that a realistic range cannot reproduce war but can do something more useful than pretending otherwise, namely make clear which parts of war a system has survived and which remain untested, and states the resulting rule for military technology as confidence moving only as fast as the evidence moves. This entry is enriched from the institute-produced Albanian translation of the full article rather than from the English original, which the outlet does not serve to automated retrieval; the argument structure and the factual anchors are recorded, while no translated phrasing is presented as the applicant’s exact English wording.
Eurasia Review · August 20, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “AUKUS Should Give Australia the Right to Test What It Is Asked to Trust” under its Analysis designation, the eighth of his contributions to carry that label and his twenty-fifth for the outlet. The thesis stated in the title is that a partner asked to depend on allied systems should hold the right to verify them independently. It applies to a trilateral security and technology partnership the argument he has developed across his alliance writing over the preceding weeks: that a smaller partner unable to retrain, patch, revalidate, or migrate a system without external permission holds less sovereignty than a capability comparison suggests, so vendor and supplier dependence becomes a form of strategic dependence; that technical interoperability can advance faster than reciprocal confidence in the authority rules enforced by the software; and that reciprocal recognition between allies requires a fielding assurance standard each side can actually test rather than an assurance each side is asked to accept. Those three claims are drawn from his own verified published work on allied fielding assurance, on sustainment and ownership architecture, and on rules for restricting frontier-model access to partners, and the piece extends them to a named partnership rather than introducing a new argument.
Eurasia Review · August 20, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “AI Can Find the Weird, It Cannot Tell Us What It Is,” his twenty-fourth contribution to the outlet and the fourth in a sequence on machine-assisted scientific inference published within six days. The thesis stated in the title draws the boundary between detecting that an observation is anomalous and establishing what it is. It develops the promotion line he set out earlier in the same sequence, under which an automated system may detect patterns, rank hypotheses, quantify uncertainty, and recommend follow-up observation, while moving from an unexplained signal to a specific physical mechanism requires controlled measurement, discriminating tests, independent replication, and a theory that predicts something new, none of which better pattern recognition can supply. Read together, the four pieces state one requirement in successive registers, that a system must report what its evidence does and does not support: an unresolved state where no known class fits, an information floor below which a stated tolerance is unattainable, an accounting for the extent of the search that produced a finding, and a boundary between flagging an anomaly and explaining it. That is the same discipline his formal work applies to his own published results, where a model is labelled faithful only where it can support a claim about the implemented system.
Eurasia Review · August 19, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “When Machines Search for Discoveries, Science Has to Count the Search,” his twenty-third contribution to the outlet and the third in a sequence on machine-assisted scientific inference published within five days. The thesis stated in the title is that when an automated system searches a very large space of candidates, the extent of that search is itself part of the evidential claim and must be carried into how a finding is reported. It continues a line he has set out in the two preceding pieces of the sequence: that a system should be able to report an unresolved state rather than force an observation into the nearest known class; that the information a measurement supplies can collapse faster than a model’s confidence score, so confidence is evidence about the model rather than automatically about the experiment; and that apparent agreement among channels sharing a calibration, a pipeline, or a training lineage does not supply the independent evidence a naive count would imply. Taken together the three pieces state a single requirement in successive forms, that the conditions under which a result was obtained belong in the result, which is the same requirement his formal work applies to his own published findings.
GPS World · Opinions · August 19, 2026 · Authored by Burak Oktenli · Eighteenth outlet to publish his work
GPS World, the trade publication serving the satellite positioning, navigation and timing profession, published the applicant’s opinion piece “Signal Authentication Is Not Navigation Integrity,” his first placement with that outlet, the eighteenth publication to carry his work, and the second of two pieces published on the same day. Writing for an engineering readership rather than a policy one, he credits the deployment of open-service navigation message authentication as real progress, notes that the agency operating it has been careful and honest about scope in stating that the service does not prevent spoofing or protect against jamming but mitigates its impact by letting systems identify unauthenticated navigation data, and then draws the distinction the piece exists to make: authentication answers where a signal came from, while integrity answers whether the navigation solution in use right now should still be trusted. His central structural observation is that verification happens at moments while navigation happens continuously, since a receiver confirms provenance only when the cryptographic material allows it and goes on computing and delivering a position several times a second in between, while autopilots, timing distribution and autonomous platforms consume that output continuously rather than at authentication intervals. From this he draws the consequence that nothing about a later successful check reaches backward, so a confirmation at one moment says nothing about the interval that preceded it and does not undo an operational decision taken during that interval on a solution that had degraded, which requires the system to carry two distinct states, signal provenance and solution validity, with the second governing whether the output is safe to act on. He is careful to note that this gap reflects no defect in authentication but is a property of any intermittent verification applied to a continuous process. He then identifies what he calls the checkbox problem, that a specification line requiring equipment to support authentication describes a capability rather than a behaviour, and lists the questions such a line leaves unanswered, including how long the receiver has been operating since its last successful verification and whether anything downstream knows, what independent evidence the current solution is checked against in the meantime, what happens when confidence falls and who is told, and whether the system enters a declared degraded mode or keeps presenting a confident-looking answer. His three proposed requirements are a continuous integrity state rather than a binary flag, carrying the age of the last successful authentication, source status, current integrity assessment, an expression of uncertainty and a reason code when the solution has been downgraded, each of which he notes is useless if it stops at the receiver instead of propagating to whatever is making decisions; a defined behaviour when evidence runs out, under which the system downgrades the solution, states the limits of its use, and where necessary declines to provide one, with abstention specified as a legitimate output, and with downstream software explicitly prohibited from silently carrying forward the last valid value or substituting a nominal default, since otherwise the platform declines and something further along quietly fills the gap, reproducing the original risk with an extra layer of concealment; and certification that tests the interval rather than only the check, establishing how quickly a degraded solution is identified, how the operation behaves during false alarms, whether the declared degraded mode engages, and whether downstream consumers honour an invalid navigation state, together with named end-to-end ownership across constellation operators, receiver manufacturers, platform integrators and mission owners, on the reasoning that a requirement belonging to all of them in general belongs to none of them. The piece states in navigation-engineering terms the properties the applicant’s research specifies and his deposited artifacts formalise: abstention as a valid output, which his deposited technical notes on an information-based validity threshold and on a free-inertial displacement envelope between authentication marks address directly; the prohibition on a prior valid state persisting once its evidentiary basis has lapsed, which is the same requirement he set out for machine authority the same day in a military-professional venue; and a decision record carrying the age, source and confidence of the evidence supporting an action.
Analysis published by the Modern War Institute at West Point
Modern War Institute at West Point · Commentary and Analysis · August 19, 2026 · Authored by Burak Oktenli
The Modern War Institute at West Point published the applicant’s analysis “The First Clean Signal Is Not Permission to Fire: On Resilience and Governance of Autonomous Systems.” The institute maintains a standing author page for him, and the piece contributes to an ongoing professional debate hosted there, engaging two prior institute articles on commander’s intent for unmanned systems and on encoded boundaries for the autonomous battlefield. Its opening distinction is the foundation of the applicant’s research program stated for a military-professional readership: an autonomous weapon does not possess legal authority, since commanders and operators do, but every such system still has an engineering permission state, meaning the set of actions its software is allowed to execute without fresh human input, and on an electronic-warfare battlefield that permission state can itself become a target. He illustrates with a loitering munition inside a commander-approved engagement envelope whose datalink drops, whose satellite navigation becomes unreliable, and whose sensor picture degrades, so that the system correctly contracts its permissions, and then one condition improves: a clean position update arrives, a track stabilises briefly, the link flickers back. If the software treats recovery as the mirror image of failure, full permission can snap back the moment a single threshold crosses from red to green, which he frames not as a sensor problem but as a recovery problem, and one an adversary can manipulate. He credits existing doctrine and the direction of current work rather than claiming a vacuum, noting that departmental policy already requires appropriate levels of human judgment over the use of force, verification and testing against adaptive adversaries using realistic countermeasures, termination or additional operator input when an engagement cannot be completed within relevant constraints, and legal review before employment, and that newer test-and-evaluation procedures already direct testing against cognitive electronic attack, adversarial inputs, and degraded states across the life cycle. His claim is that the missing element is narrower and specific: the permission state over time is not yet an explicit standard test observable. He identifies the corresponding gap in professional debate, that recent work on integrating autonomous systems into targeting addresses withdrawing delegated execution authority when reliability degrades while leaving restoration unspecified, and warns that without a restoration rule a system can enter permission flapping, moving repeatedly between higher and lower action states as evidence hovers near a threshold, for which he proposes the operational equivalent of the hysteresis engineers already use to stop physical systems chattering at unstable boundaries. His principle is that a failed mandatory condition should contract the envelope immediately while re-expansion should require persistent valid evidence, independent corroboration, fresh operator input, or an appropriate combination, and he is explicit that the recovery rule should not be universal, since a short-range defensive system facing saturation differs from a loitering munition near civilians, a counter-drone interceptor, or a reconnaissance platform cueing indirect fires, so the requirement should specify the process rather than dictate a number. The four-part process he sets out is the closest published statement of his architecture in an operational register: define the evidence envelope for every action class, covering sensor health, target identity, navigation integrity, freshness, cross-modal consistency, geofences, protected-site constraints, and operator status, and expose those dependencies to legal and operational review before fielding rather than after an incident; distinguish contraction from recovery, so that mandatory failures take effect immediately while recovery requires evidence persisting long enough to show a valid operating condition has genuinely returned, because one clean frame should not erase a sustained period of corrupted evidence; bind the recovered permission to the evidence that earned it, so that if the sensor frame, model version, navigation solution, track, or policy state changes before execution the previous authorization does not float forward as though nothing had changed, and the executor can answer whether the action is still tied to the evidence state that justified it; and make the recovery gate a red-team target, so that testers plot the permission envelope during attack and establish whether authority contracts at the declared point, recovers too early, oscillates under pulsed interference, carries stale evidence across a version change, or lets a temporary clean interval restore permissions the broader evidence no longer supports. He answers the strongest objection directly, that an adversary knowing degraded observability narrows permissions will jam continuously to create sanctuary, replying that full authority under degraded evidence does not defeat electronic attack but simply converts uncertainty into permission, and proposing instead a designed degraded-mode floor in which a system may lose permission to engage while retaining permission to navigate, sense, preserve a track, reposition, relay data, or return to a designated area, losing only those permissions whose evidentiary premises have failed. He adds that intermittent interference is cheaper and harder to locate than continuous jamming, so a system restoring full permission after one favourable sample hands the adversary a control surface over when the machine is allowed to act. The correspondence with his formal research is direct and now independently checkable, since binding authorization to a specific evidence state, refusing to let a prior authorization persist across a change, and requiring graded contraction and deliberate re-expansion are the properties his authority architectures specify and his deposited TLA+ specifications mechanise, including the lease instance in which authority expires rather than being revoked. His closing formulation, that a weapon able to fight through jamming is resilient while a weapon that knows the first clean sample is not permission to shoot is governable, states the distinction his entire research program rests on.
Washington Examiner · Op-Eds · August 19, 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s op-ed “Trump Is Right to Send Allies the Bill. Cutting Our Own Drills Is the Wrong Currency,” his thirteenth placement with the outlet. The argument accepts the case for demanding more from allies and objects to the method of collection. He assembles three contemporaneous developments as evidence of what he calls the hidden bill from the recent conflict: a multibillion-dollar contract to expand cruise-missile production over seven years, a carrier dispatched from the Western Pacific to relieve another after a deployment exceeding eight months and 208 continuous days at sea, with service leaders acknowledging significant strain on personnel and families, and a stated decision to scale back joint exercises with an Asian ally on the grounds that it declined to assist in the Middle East and was not paying enough for American protection. From the first two he draws the conclusion that alliances cannot be one-way insurance policies and that the cost of sustained American power is paid in crew health, ship availability, munitions inventories, and industrial capacity. From the third he draws his objection. He argues that the annual peninsular exercises are not a gratuity handed to the host government, since they train American forces as well as allied ones in combined command and control, all-domain operations, interoperability, rapid response, and the transition of wartime operational control, so that cancelling them does not make the ally pay but makes American and allied forces less practiced against the adversary they exist to deter, while moving an Indo-Pacific asset into a Middle Eastern recovery cycle charges a Middle Eastern bill to an Indo-Pacific deterrence account. He is careful to bound the argument on both sides, stating that alliances are not blank checks in either direction, that a partner may decline a particular mission, and that declining does not end the burden-sharing conversation but changes the form of payment, with the operative question being what alternative contribution would leave the combined force stronger rather than merely registering political displeasure. His constructive proposal is an allied contribution ledger under which, for every major contingency, partners are offered a menu of contributions rather than a binary demand to join a fight or be penalised elsewhere, with candidate contributions including direct cost-sharing, expanded munitions production, shipyard and maintenance capacity, logistics and basing support, sanctions enforcement, air and missile defence, or a larger share of missions in their own region, and each judged against three questions: whether it adds deployable capacity, whether it shortens American recovery or replenishment time, and whether it reduces the need to pull forces from another theater. The governing principle he states is that allied burden-sharing must add capacity or reduce the American burden and must not transfer American risk from one theater to another. The piece is a measurement argument in a policy register, since its substance is a proposal to score alliance contributions against stated criteria rather than to settle them by assertion, which is the structure the applicant applies to readiness, campaign assessment, and assurance elsewhere in his published work. Its closing formulations, that an alliance is not charity and deterrence is not a debt-collection agency, and that the ally may owe more while the joint force should not pay the invoice, state the position in one line.
Eurasia Review · August 18, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Your Company Approved an AI System That No Longer Exists,” his twenty-second contribution to the outlet and his sixtieth original commentary placement. The thesis stated in the title concerns the gap between an artificial-intelligence system as approved and the system actually operating, and it extends a requirement he has set out in his earlier published work: because models, safeguards, data sources, and interfaces continue to evolve after certification, an approval can describe a configuration that no longer exists unless material change triggers defined retesting, notification, and the ability to restore a previously approved version. That governed-change requirement appears in his analysis of allied fielding assurance and in his treatment of contractual security obligations, and it is one of the properties his authority architectures specify and his deposited formal models mechanise. The piece applies it to organisational approval and adoption rather than to defence procurement, continuing a pattern in which the same assurance requirement is stated for successive domains.
Techstrong.ai · Features · August 2026 · Authored by Burak Oktenli · Seventeenth outlet to publish his work
Techstrong.ai published the applicant’s feature “The AI Kill Switch Act Needs a Containment Layer,” his first placement with that publication and the seventeenth outlet to carry his work. Responding to a bill introduced in early August that would require an off switch for artificial-intelligence systems in federal use, establish an oversight body, and remove tools failing to meet security standards, he credits the measure as a serious response to a real problem and then states his objection precisely: a kill switch is a control action, and control actions only work if the surrounding system is designed to make them effective. He identifies three structural gaps. The first is that an off switch presumes a clean shutdown point, whereas an agentic system distributes state across credentials, tokens, cached data, scheduled jobs, downstream automations, and external service calls, so that stopping the model does not necessarily stop the loop, and shutdown must propagate to everything the system has already set in motion. The second is timing: he cites a frontier developer’s public disclosure of an adversary using its coding tool in a largely automated intrusion campaign involving thousands of requests at multiple steps per second, and draws the conclusion that human review cycles measured in days cannot bound a failure that unfolds in seconds. The third is operational, since agencies are embedding these systems into ordinary operations through shared platforms, so an off switch as the primary safety mechanism forces a binary choice between mission continuity and safety, and an agency will hesitate to trigger it during an active operation. His proposal is a containment layer with four requirements: authority boundaries defined per action class rather than per model, so that reading a public dataset, writing to a production database, and initiating an external transaction are separately bounded; automatic scope reduction under uncertainty, so that anomalous behaviour, degraded inputs, or low confidence trigger a fail-closed pause, reversion to human approval, or degradation to read-only rather than continued operation; session-level revocation that propagates to tokens, credentials, delegated jobs, and downstream automations; and tamper-evident action logs held independently of the system being governed, so that investigators can reconstruct what the system did, under whose authority, and where it exceeded its boundary. Under that design the kill switch becomes the final escalation rather than the first line of defence. He maps these requirements onto existing federal instruments, noting that a national risk-management framework already describes response, recovery, and communication functions, that executive guidance already requires risk practices for safety-impacting and rights-impacting uses, and that current policy direction favours accelerating adoption, so the containment layer is the mechanism that lets those two goals coexist, and he asks Congress to require demonstration of bounded authority, automatic scope reduction, session revocation, and tamper-evident logging before deployment rather than after. The piece explicitly extends the applicant’s own prior argument, citing his Washington Examiner analysis of nuclear command systems in which authorization tokens with expiration windows and fail-closed transitions were proposed as the mechanism that makes human control real, and stating that the same architecture applies to federal artificial-intelligence deployment; it is therefore a cross-outlet development of a single published position, and the four containment requirements are the properties his authority architectures specify and his deposited formal models mechanise. His closing formulation, that a kill switch which cannot be reached in time is not a safety control but an after-action report, states the argument in one line.
Eurasia Review · August 18, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Every Measurement Has a Physical Limit: Scientific AI Pretends Otherwise,” his twenty-first contribution to the outlet and the second of two published there the same day. It is the fullest statement of an argument he has developed across several pieces and one deposited technical note, and it is grounded in established results rather than assertion. He opens with a nineteenth-century optical result establishing that resolution is constrained by wavelength and aperture, so that below the limit the difficulty is not a want of cleverer analysis because the measurement itself does not carry arbitrarily fine spatial information, and pairs it with the mid-twentieth-century statistical framework in which Fisher information places a lower bound on the variance attainable by an unbiased estimator, with the floor set by the measurement model, its sensitivity to the quantity estimated, and the noise. His conclusion from the pair is that better mathematics can use available information more efficiently but cannot manufacture information the experiment never recorded. The category error he identifies is confusing confidence in an answer with evidence that the measurement could identify the answer in the first place, since priors, regularisation, learned correlations, and familiarity with the training distribution can keep an output numerically stable even as the measurement geometry becomes weak, ambiguous, or nearly non-identifiable, and he compresses the point into the formulation that confidence is evidence about the model and not automatically evidence about the experiment. He illustrates with three ordinary cases, two astronomical sources blended until their signatures are nearly indistinguishable, a navigation receiver that has lost the geometric diversity needed to separate state variables, and two spectral components so similar that many combinations explain the same measured curve, noting that an algorithm still returns a number in each while the harder question is whether the data uniquely support it without leaning on assumptions that have silently become more important than the measurement, and observing that this matters most at the boundary of a claim, where information supplied by the measurement can collapse faster than a model’s confidence score does. He credits the existing machine-learning tradition of selective prediction, in which a system may abstain rather than predict on every case, while arguing that scientific inference needs a prior question about whether the instrument, geometry, noise level, and measurement model can identify the requested quantity at all, and draws a cultural example from structure prediction, where a widely used system publishes per-residue confidence and the research community has learned to treat limits on a model’s claim as information rather than embarrassment, with his own explicit caveat that a model-confidence score does not equal physical identifiability. His prescription is architectural rather than another score, since the established tools already exist in conditioning diagnostics, information and variance bounds, posterior-width analysis under declared priors, residual checks, and distribution-shift tests: a model may produce a candidate estimate, but release of a qualified scientific estimate should depend on evidence that the measurement supports it. That permission should be fail-closed, so an insufficiently informative experiment yields neither a mysterious null nor an invisible software exception but a structured abstention recording the quantity requested, which information condition failed, what threshold had been fixed, what data and configuration were used, and what new measurement would make the question answerable. He notes there is no universal numerical cutoff because different instruments lose information in different ways, so the principle travels while the threshold cannot simply be copied. The methodological insistence that most closely matches his own practice is his rule against tuning the abstention criterion after the fact: the information diagnostic, threshold-selection procedure, and acceptable error criterion should be fixed on development or calibration data and applied unchanged to untouched evaluation cases, since otherwise abstention becomes post-selection and the system learns to be humble only where the analyst already knows it was wrong. He converts this into a standard for journals, reviewers, laboratories, and funders, requiring that an AI-assisted method making physical estimates state the information limits of the measurement, show how those limits are checked at analysis time, report both error and coverage, and disclose when the system refuses to issue a qualified estimate, adding that a method answering fewer questions may be scientifically stronger if it can explain why the rejected questions were not answerable from the evidence. The correspondence with his deposited work is exact, since his technical note establishing an information-based validity threshold for orbital estimators specifies when measurement geometry has stopped supporting a stated tolerance and was deposited to accompany an argument for treating abstention as a valid output; the navigation case he cites here is that note’s subject. His closing formulation, that scientific AI is graded today on the questions it answers correctly and should also be graded on the questions it correctly refuses to answer, states the applicant’s standing thesis in its most general form.
Eurasia Review · August 18, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “Three Sensors, One Witness: The Corroboration Trap in Allied Intelligence” under its Analysis designation, the seventh of his contributions to carry that label and his twentieth for the outlet. The argument opens on a documented intelligence failure in which a post-war commission found that services sharing reporting without sufficient sourcing detail can unknowingly rely on the same underlying source and create false corroboration, which the applicant compresses into the observation that one voice can return through several channels looking like a chorus. He then sets that against current alliance modernisation, which calls for a digital backbone connecting sensors, decision-makers, actors, and effectors across national and organisational boundaries, an interoperable data-sharing ecosystem covering intelligence, surveillance, and reconnaissance, and cross-domain fusion with predictive analytics and machine-assisted decision support. He accepts that direction as strategically sensible and identifies its statistical side effect: interoperability can make systems more connected without making their errors more independent. His worked illustration is three allied feeds agreeing on a contact, one a radar track, one a machine-generated intelligence product, and one a partner’s fused picture, which may look like three witnesses while sharing a timing source, an upstream commercial image, a correction product, or a software family, so that part of their agreement is inherited and a confidence system counting feeds without tracing ancestry will price an echo as evidence. He grounds this in a concrete current condition, reported increases in satellite-navigation jamming and spoofing across several regions since 2022, noting that where sensors, platforms, or analytic products inherit time or position from the same degraded reference their errors move together, so agreement downstream does not prove the upstream reference was right, and extends the same logic to open-source and commercial material, where one video can be downloaded, cropped, reposted, translated, and summarised by dozens of accounts and one image can appear in many products, so that a pipeline counting products rather than origins turns one observation into a crowd, a problem machine learning accelerates because models built on overlapping data or a common family can fail in similar ways even when their outputs arrive through different interfaces. His technical point is that the mathematics is not new, since work on common process noise established that shared errors change the covariance of a fused estimate and covariance-intersection methods exist for unknown cross-correlations, so the missing discipline is not a theorem but carrying dependence information into the operational confidence score. He quantifies the cost with an equal-correlation example in which twenty-four channels at a common correlation of one half contain only about 1.9 independent channels’ worth of information about a shared quantity, observing that the hardware count remains twenty-four while the evidence count does not. His three prescriptions follow: map the pedigree, so a fused feed retains identifiers for its upstream observation, timing source, calibration reference, correction product, software or model version, and major processing steps, using an existing standard provenance vocabulary extended with the security and uncertainty fields military use requires; discount agreement between relatives, so feeds sharing a decisive ancestor raise confidence by less than genuinely independent ones and the consumer sees how much independent evidence the dependence model says the channels represent, since ten reports and ten independent witnesses are different claims; and red-team manufactured consensus, so exercises test not only whether an adversary can blind one sensor but whether a disturbance or false input at a shared layer can make many downstream systems agree on the same wrong answer, treating that as an attack on corroboration itself. He offers a positive contrast in a major international investigation whose strength came from examining different classes of evidence and being able to validate how each was obtained and how the pieces related, rather than from counting copies of the same report, and states the standard as independence being defensible rather than presumed. The piece is the direct development of a requirement the applicant identified in his own formal work, that deception detection must weight agreement and not only disagreement, and of the independence failure his formal models located, in which a bound derived from the same population it is meant to constrain produces confidence the evidence does not support. Its closing formulation, that the next major intelligence failure may come not from too little data but from counting the same evidence twice at machine speed and calling the result high confidence, states that defect class in operational terms.
Washington Examiner · Op-Eds · August 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s op-ed “Trump Handed Cops the Power to Jam Drones. Bad Software Could Ruin It,” his twelfth placement with the outlet. The piece completes an argument he opened in a widely syndicated analysis a few weeks earlier, which identified the missing authority layer in newly devolved counter-drone powers; this one specifies what that layer should require of the software. He accepts the devolution as correct, since no centralised control room can protect every prison, stadium, power plant, and public gathering, and credits the implementing interim rule as more serious than a licence to jam, noting that it requires training and certification, authorised technologies, an operations plan defining locations and time windows, federal coordination, airspace awareness, reporting, and a certified operator who retains professional judgment over whether to act. His argument is that those legal boundaries should move into the execution path itself. He illustrates with a drone approaching a correctional facility where radar, a radio-frequency sensor, and a camera all corroborate the track and the operator is certified under a valid plan, and observes that this is still not enough for a safety-critical system to assume every mitigation command is valid, since the drone can be real and the order can still be wrong. The distinction he draws is that a valid detection answers what is in the sky while authority answers who may do what about it, where, and for how long, and that the second set of facts should not live only in a training record, an operations plan, or an operator’s memory but should be machine-enforceable conditions on the command itself. His proposal is a two-key requirement. The first key is evidence: the target track should carry its identity, time, location, sensor support, and current confidence. The second is authority: the command should carry a verifiable credential proving that this operator or agency is authorised, at this location and time, to use this specific category of mitigation. Only when both refer to the same event should the command be executable, a condition he summarises in the line that a police badge should not become a root password for the sky. He is careful to bound the claim, stating that this does not turn legal judgment over to an algorithm and that the rule is right to preserve the certified operator’s independent judgment, and defining the software’s job narrowly as preventing an otherwise valid human decision from exceeding the authority that makes it lawful, so that if the operation has expired, the target has crossed outside the approved area, the wrong mitigation method is selected, or the credential is stale, the system refuses the command and says why. He then shows the proposal is close at hand rather than speculative, noting that the rule already generates most of the required data through operations plans specifying location and duration, identified system configurations and software versions, lead-agency coordination for overlapping operations, current certification for mitigation operators, and mandatory checks for known authorised aircraft, and that these safeguards are strongest when a machine can enforce them at the moment of execution, with the comment period still open for the agencies to tighten the design. The correspondence with the applicant’s research program is exact: binding a trust-assessed evidence record to a bounded, time-limited authority credential, and refusing execution with an explanation when either fails, is the structure his sensor-attestation and authority-allocation architectures specify and his published formal models mechanise, including the lease instance in which authority expires rather than being revoked.
Washington Examiner · Op-Eds · August 2026 · Authored by Burak Oktenli · Syndicated to MSN
The Washington Examiner published the applicant’s op-ed “The Pentagon Is Cutting Red Tape and Setting a Legal Minefield for AI Contractors,” his eleventh placement with the outlet, subsequently syndicated to MSN. The piece is written ahead of a statutory deadline requiring the defence department to report to Congress on how it secures artificial-intelligence and machine-learning systems, covering current practices, identified gaps, commercial runtime-security options, alignment with industry frameworks, and recommendations for further authorities or resources. He situates that deadline against two contemporaneous developments, an executive order accelerating AI-enabled cyber defence while explicitly rejecting a licensing regime for AI development, and the suspension of the second phase of a contractor cybersecurity certification programme pending a review intended to reduce compliance burden while preserving security, and reads the combination as a clear direction to move faster, cut bureaucracy, and keep the security requirement real. His test for the forthcoming report is that it identify which controls actually change operational risk, which can be measured continuously, and which should become enforceable contract terms, and his stated risk is that the review instead translates a new technology into familiar compliance language, leaving program managers with another checklist that says little about what happens when a model is manipulated at runtime. He notes that Congress has already supplied the structure through a companion provision requiring a risk-based security framework covering supply-chain risk, data poisoning, adversarial tampering, unintended exposure, continuous monitoring, and incident reporting, with direction to extend existing cybersecurity frameworks and amend acquisition regulation so that covered contractors must implement the resulting practices, and draws attention to the words he considers easy to miss, that the rules are to be narrowly tailored, calibrated to the specific technology and the contractor’s role, and designed with the cost of slowing development in mind. His substantive prescription is that requirements focus on evidence rather than attestation: a contractor developing or hosting a model for defence use should be able to show which data and model artifacts are protected, who can change them, how anomalous access is detected, what happens when the system receives manipulated input, whether runtime controls can restrict an unsafe action, and which telemetry survives for investigation, with the standard distinguishing a security claim from proof that the control actually worked under test. He then identifies the consequence that gives the argument its force, that prosecutors already pursue contractors who knowingly misrepresent cybersecurity compliance under existing false-claims law, with a recent settlement resolving allegations of knowing non-compliance with naval cybersecurity requirements, so that once AI-specific duties become contractual, false representations about those controls can create the same exposure. He immediately qualifies this rather than leaving it to alarm, noting that not every failure becomes fraud because the statute has a knowledge-and-materiality structure and such settlements remain highly fact-specific, and restating the point in its narrower and more defensible form, that AI-security assertions will no longer live only in slide decks and technical papers but may sit behind certifications, invoices, and claims for payment the government can later examine. The piece adds a legal-enforcement dimension to the applicant’s standing argument: where his earlier work asks whether an institution can evaluate the evidence a claim demands, this asks what happens when an unevaluable claim has been made under contract, and his central requirement, that a security claim be distinguished from proof that the control worked under test, is the assurance boundary his formal work applies to his own results.
RealClearScience · August 15, 2026 · Authored by Burak Oktenli · Sixteenth outlet to publish his work
RealClearScience published the applicant’s op-ed “Antimatter Starships Are Farther Away Than You Think,” his first placement with that outlet and the sixteenth publication to carry his work, appearing the same day as two further pieces elsewhere. Responding to a widely circulated question about whether antimatter could rescue interstellar travel, the argument is that such discussions begin one line too late: the familiar mass-energy relation states how much energy is released once matter and antimatter meet, while a starship must survive everything required before that meeting and everything that follows it, so the useful quantity is an end-to-end energy ledger running from the electricity that creates the antiparticles to the fraction of annihilation energy that finally becomes directed spacecraft momentum. He establishes a deliberately generous lower bound, calculating the kinetic energy needed to bring a one-tonne dry spacecraft to a tenth of light speed and the antimatter mass that would supply it under perfect conversion, then states plainly that this figure buys a single acceleration under impossible perfection and excludes propulsion losses, shielding, radiators, course corrections, payload growth, and braking at the destination. He sets that against published experimental throughput at a precision-physics facility and the total antiproton mass a full year of continuous operation would deliver, while explicitly cautioning that current throughput should not be read as a forecast of future industrial capacity because the facility exists for precision physics rather than fuel production, a hedge he states in his own voice rather than leaving to inference. The analytical core is the enumeration of nine further ledger lines after the headline figure, covering production, capture, deceleration, cooling, storage, conversion, shielding, thermal rejection, and operations, each carrying an efficiency, an energy cost, a mass penalty, or all three, with the observation that leaving one blank quietly assigns it perfect performance. He names the underlying error directly: specific energy is treated as though it were propulsive efficiency when it is closer to a physical ceiling. He then applies the same discipline to the most favourable published result in the field, noting that a simulation study of optimised nozzle geometry produced an impressive effective exhaust speed for charged annihilation products while qualifying that the nozzle acts only on charged products, so energy escaping through other channels does not become directed thrust and may reappear as radiation or thermal burden elsewhere in the vehicle, and observing that shielding and heat rejection are coupled because intercepted radiation deposits energy that must ultimately be radiated to space, making radiator temperature and area vehicle-design variables. His prescription is a publication rule: report the annihilation ceiling, then publish all nine deductions with an assumed or measured efficiency, an uncertainty range, and a mass consequence; show the acceleration case and the braking case separately; and identify which terms come from experiment, which from simulation, and which remain engineering assumptions, so that an unmeasured link stays visible as an unknown instead of inheriting complete efficiency by silence. He argues this would sharpen rather than deflate the field, because competing concepts could then be compared against one end-to-end standard and a breakthrough in one subsystem would no longer be mistaken for a breakthrough in the whole mission. The piece is the applicant’s assurance argument transposed to physical engineering, and its governing principle, that an unstated term inherits perfect performance unless it is made explicit, is the same principle underlying the faithfulness taxonomy in his formal work, where a model that silently discards a feature cannot support a claim about the system that retains it.
Eurasia Review · August 15, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “The Next Scientific Breakthrough May Depend on AI Saying ‘Unknown’” under its Analysis designation, the sixth of his contributions to carry that label, his nineteenth for the outlet, and the second of two pieces he published on the same day. It applies his assurance framework to scientific discovery, a domain distinct from the defence, alliance, space, and clinical settings in which he has made the argument previously. His opening case is an observation of a faint object in the early universe in which more than forty spectral lines from several independent indicators had to be assembled into a physical picture, with the reporting institution describing the result as the strongest evidence yet for the proposed interpretation, language he reads as deliberately preserving room for the evidence to move. The structural problem he identifies is that a conventional supervised classifier is trained on a closed set of categories while scientific data live in an open world, where a new observation may be an instrument artifact, a processing defect, a familiar source in an unfamiliar regime, a rare natural event, or a phenomenon existing models do not describe well, so that forcing every observation into the nearest known class turns a confident model into a filter against novelty. He supports this with two contemporary cases, an anomaly-detection system that screened roughly one hundred million archival image cutouts and surfaced rare candidates for human review while also producing false positives, which he treats as the point rather than a defect since an anomaly flag should create a queue for investigation rather than manufacture a discovery, and a set of particle-physics results in which four major experiments reported evidence that a state of matter previously thought to require collisions between very heavy ions may arise in lighter ones, illustrating that scientific categories move when measurements demand it and that an automated system built around yesterday’s boundaries must preserve the evidence that those boundaries may be wrong. From this he sets three requirements. The first is an explicit unknown state, in which unresolved is a legitimate output carrying positive probability that the current hypothesis set is incomplete, so that a system can report that the data fit no known explanation well enough, that uncertainty is too large, or that an observation lies outside the distribution on which the model was validated, which he argues is useful information because it identifies where additional measurement has the highest value. The second is multimodal corroboration across measurements carrying different noise and systematic errors, with candidate status triggering follow-up rather than closing the question. The third is dependency awareness, since two sensors can appear to confirm one another while sharing a calibration error, software pipeline, environmental disturbance, or training bias, so that multiplying their confidence scores as though independent creates certainty from duplicated evidence, and a system should preserve provenance, model cross-sensor dependence, carry uncertainty through every stage, and lower confidence when the independence assumption fails. He then draws the governance line at promotion: a system may detect patterns, rank hypotheses, quantify uncertainty, and recommend follow-up observations, while moving from an unexplained signal to a specific new physical mechanism requires controlled measurement, discriminating tests, independent replication, and a theory that predicts something new, none of which better pattern recognition can supply. His measurement proposal is that teams report abstention rates alongside accuracy, and track how that rate changes under distribution shift and whether rejected cases are enriched for instrumental failures or genuine anomalies, on the reasoning that a classifier which almost never says unknown may look decisive while quietly forcing unfamiliar observations into familiar categories. The correspondence with the applicant’s own deposited work is direct: his technical note on an information-based validity threshold for orbital estimators, which establishes when measurement geometry has stopped supporting a stated tolerance, was deposited explicitly to accompany an argument for treating abstention as a valid output, and the dependency-awareness requirement restates the independence failure his formal work documents, in which a bound derived from the same population it is meant to constrain produces confidence that the evidence does not support.
Eurasia Review · August 15, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “The Next Arms-Control Breakthrough May Be a Proof That Reveals Almost Nothing,” his eighteenth contribution to the outlet. Written against a period in which multilateral disarmament research bodies moved military artificial-intelligence governance from broad principles toward implementation, assurance, and confidence-building measures, the argument begins from a constraint rather than an aspiration: the hardest problem is no longer writing another principle but finding something rivals can verify without asking them to expose the systems they most want to protect. He states the ceiling plainly, that no major power will hand a rival its model weights, training data, intelligence feeds, command logic, or operational thresholds, and then makes the pivotal move, that verification does not always require seeing the thing being verified. His worked example is an exercise in which a state declares that its AI-enabled decision system cannot enter a high-authority mode unless two distinct human roles approve the transition and a minimum deliberation period has elapsed; a rival does not need to inspect the model that produced the recommendation, only evidence that the declared rule existed beforehand and that the system stayed inside it. The staged mechanism he proposes is a cryptographic commitment to the policy and configuration registered in advance, tamper-evident records binding each governed transition to time, authority, configuration, and the prior record, an independent verifier testing the agreed rule, selective disclosure of sensitive records, and, for especially narrow and stable claims, an eventual proof that the rule was satisfied without revealing the data used to prove it. The section that most closely matches the applicant’s stated methodology is his treatment of limits. He records that a cryptographic proof can establish only that a defined predicate was satisfied inside a declared boundary, and cannot establish that the underlying intelligence was correct, that humans exercised good judgment, that an action was lawful, that a state’s intent was benign, or that undeclared activity did not occur elsewhere, adding that a perfect proof of a badly chosen rule remains proof of a badly chosen rule and that these limits should be explicit rather than hidden. His institutional argument is that arms-control verification has always depended on institutions as much as instruments, and that military AI needs an equivalent architecture adapted to software, beginning not with a treaty requiring adversaries to open their source code but with a small proof catalog of properties strategically useful and technically narrow enough to test, among them a ceiling on machine authority, a required number of human approvals, a prohibited transition from recommendation directly to execution, a minimum deliberation window, an emergency suspension capability, and continuity of an audit record. He then insists the verification process be tested before it is relied upon, using synthetic data, non-operational systems, and controlled exercises, with independent verifier teams receiving the same proof statement and comparing results, missing evidence producing an indeterminate finding rather than an automatic pass, disagreement triggering a technical dispute process, and random inspection testing whether committed records correspond to the system evaluated. The strategic reframing he draws from this is that privacy-preserving verification changes the bargaining problem, replacing the question of whether a state will reveal how its military AI works with the narrower question of which limits it is willing to prove, for what period, using what evidence, and under what challenge procedure. His stated objective is not to manufacture trust through cryptography but to reduce the amount of trust required for a narrow claim. The piece is the public statement of a line the applicant has developed in his deposited working papers on verifiable autonomy, which set out root-hash registration, external verification against self-declared authority limits, and the disclosure boundary, and the properties in his proof catalog are the properties his authority architectures specify and his published formal models mechanise.
Washington Examiner · Op-Eds · August 14, 2026 · Authored by Burak Oktenli · Syndicated to MSN
The Washington Examiner published the applicant’s op-ed “Trump Says Humans Control the Bomb. The Code Doesn’t Know That Yet,” his tenth placement with the outlet, subsequently syndicated to MSN. The argument holds that the policy question has already been settled while the mechanism has not. Standing policy commits to keeping a human in the loop for actions critical to a presidential nuclear decision, and defence legislation reinforces that artificial intelligence should not compromise the requirement for positive human actions in executing such a decision; the applicant accepts these as strong rules and argues they still need a mechanism, because the phrase human in the loop describes who is supposed to decide while software architecture determines whether a high-consequence action can actually proceed without that decision. He locates the realistic danger in quiet failure rather than dramatic failure: not a system that suddenly launches, but one automated function handing a recommendation to another as timelines compress, confidence scores become operational facts, and a nominal human checkpoint arrives after the software has already shaped the available choices. His prescription is to make human authority an enforceable technical condition. Any component touching a nuclear decision chain should be wrapped in an external authorization layer the model itself cannot rewrite or persuade; decision-support functions may summarise warning data and generate options at machine speed, but a transition into a protected action class must require a separate, affirmative human authorization token bound to a named authority, a defined action, and a short expiration window, with no valid authorization meaning no transition. The layer must fail closed, so that expired authorization, ambiguous communications, or an unverifiable authority halts the protected action rather than inheriting permission from an earlier state, and every attempted transition must generate a tamper-evident record showing what was requested, which rule applied, who authorized it, and what the software did next. He then converts the proposal into procurement terms, arguing that a pending directive update is the opportunity to turn a policy principle into an acceptance test: a program office should be able to require a contractor to demonstrate under realistic failure conditions that protected actions cannot execute without valid human authorization, auditors should be able to reconstruct every attempted crossing of that boundary, and operators should know exactly which functions the software may perform independently and where the architecture forces it to stop. This is the closest correspondence between the applicant’s published commentary and his formal research in the entire record: the named-authority authorization token with a bounded expiration window, the fail-closed transition, the prohibition on inheriting permission from a prior state, and the tamper-evident decision record are the properties his authority architectures specify and his published formal models mechanise, including the lease instance in which authority expires rather than being revoked. The closing formulation, that a human remaining responsible should be more than a sentence in policy and that the software should be unable to behave otherwise, states his research thesis in a single line.
Geopolitical Monitor · Opinion · August 13, 2026 · Authored by Burak Oktenli
Geopolitical Monitor published the applicant’s opinion piece “The AI Arms Race Will Be Won in Year Two,” his seventh placement with the outlet, which maintains a standing author page for him. Written against an alliance summit announcement of more than forty billion dollars in counter-drone investment and a new industry strategy organised around strengthening, scaling, and sustaining production, the argument holds that procurement is accelerating while the first purchase reveals little about who wins, because long-term advantage belongs to whoever can still afford to operate the system after the demonstration team leaves. Its analytic core is that artificial intelligence is unusually easy to display and unusually difficult to price: a benchmark shows accuracy and a pilot shows speed, while the ownership architecture sits offstage, comprising compute, energy, data pipelines, integration, cyber assurance, retraining, model monitoring, operator support, software updates, export restrictions, and the cost of leaving the vendor when the system no longer fits. The applicant grounds this in a documented aviation-security case from the previous decade, in which a technically proven directed infrared countermeasure was examined for commercial fleets after a failed missile attack on a civilian airliner, and in which government auditors recorded that the business case proved more demanding than the demonstration: military systems of the period achieved roughly three to four hundred hours between failures against a commercial target above three thousand, with programme goals of about three hundred and fifty dollars per flight in operating and support cost and a unit price near one million dollars at scale, alongside false alarms that consumed system life and integration difficulties across diverse airframes, ending with no fleet-wide commercial deployment and no further funding requested. He then supplies the control case, noting that the same broad class of capability later became operational across another country’s commercial carriers, certified on multiple airframe types with tens of thousands of operational hours, under a different threat environment, fleet structure, financing model, certification path, and national tolerance for cost. The conclusion he draws is that fieldability is contextual, so the same model can be a strategic asset in one state and an expensive dependency in another, and that a smaller partner may rationally prefer a less sophisticated system that runs on national infrastructure, can be maintained by local personnel, operates when connectivity degrades, and moves to new hardware without rebuilding the software stack. The geopolitical claim that follows is that vendor dependence becomes a form of strategic dependence: if a force cannot retrain a model without foreign cloud access, patch it without a proprietary toolchain, validate a new version without external support, or move the workload when export controls change, the benchmark score overstates the sovereignty the system actually provides, and two allies buying nominally similar capabilities can end up with very different wartime resilience. He extends the point to interoperability, observing that standardised interfaces still leave a force technically connected but operationally asynchronous when one member can revalidate a model in days and another needs months and a new certification cycle. His prescription is that procurement force the ownership architecture into the competition before a winner is selected, requiring projected cost per operational hour, mission availability under degraded communications and compute, the time and expense to retrain and revalidate, every critical foreign dependency in the stack, and the cost of migrating away from the vendor, on the reasoning that a proposal unable to answer those questions has priced only the demonstration. The piece is the sustainment-side statement of the applicant’s assurance argument, and its closing formulation, that year one buys capability while year two reveals sovereignty, restates in acquisition terms his standing claim that a capability no institution can independently maintain and revalidate is not yet a capability that institution controls.
Eurasia Review · August 13, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “The Red Sea Broke the Escalation Ladder” under its Analysis designation, the fifth of his contributions to carry that label and his seventeenth for the outlet. The analysis develops the three-axis assessment model he set out for the same outlet ten days earlier, and tests it against a sequence in which major carriers announced a wider return to the Suez route and a lethal attack on a commercial vessel at the adjoining strait followed roughly a day later. His argument is that a traditional vertical escalation ladder cannot represent that whiplash, because the number of attacks can fall while insurance costs, rerouting, transit times, and market anxiety remain elevated, and a strike limited in military terms can impose strategic costs on actors thousands of miles away. The evidence he assembles is that economic coercion acquires its own momentum: United Nations trade data recorded container tonnage crossing the canal down 82 percent by February 2024 as carriers rerouted around Africa, while conflict-data researchers counted 150 attacks on commercial shipping in 2024 against only seven the following year, with transits through the strait in mid-2025 still 65 percent below their 2023 level. From this he concludes that a small number of attacks can maintain a large economic exclusion zone, because shipowners respond to war-risk premiums, crew safety, contractual obligations, schedule reliability, and the time required to rebuild a network after rerouting. He locates the conceptual problem in inherited vocabulary, noting that the language of rungs, thresholds, and dominance was built for nuclear confrontation while modern coercion spreads pressure sideways across domains, and cites work observing that emerging domains strain accepted escalation ladders and that real-world effects should guide proportionality judgments. The passage central to his research program identifies the next danger as computational: as artificial intelligence is pushed deeper into command and decision support, the design pressure to turn enormous data streams into something a human can read quickly becomes dangerous when variables with different strategic meanings are averaged into one scalar assessment, since tactical kinetic risk, geographic denial, electronic interference, shipping disruption, insurance costs, and logistical delay all rise and fall independently, so that a composite number may look precise while hiding the structure of the crisis. He is careful to note that public descriptions of the specific decision-support effort he cites do not show it collapsing domains into a single threat score, and frames the risk as a general design pressure rather than an accusation. His prescription is that a command representation keep at least three channels separate, tactical threat, area denial, and economic imposition, each generating a different family of responses, and that an AI decision aid integrating thousands of observations preserve the type of pressure each observation represents, show which axis is moving and how quickly and with what uncertainty, and hold the policy boundary between measuring economic harm and recommending kinetic escalation. The formulation that escalation is increasingly a vector rather than a rung, and that a decision aid must preserve that shape, is the applicant’s authority-governance argument applied to threat representation: a system that compresses distinct authorities into one number cannot support the judgment the situation requires.
Analysis used as the basis of a news article by a European outlet
NewsFire Global · English edition of a Greek news publication · August 13, 2026 · Bylined staff writer
NewsFire Global, the English edition of a Greek news publication, published an original article built on the applicant’s Washington Examiner op-ed of the same day, written by a named staff journalist and attributing the analysis to him directly in the text and in a closing source line. The article carries his framing forward as its own reporting thesis, that federal regulators are addressing foreign-made connected devices product by product while intelligence collection does not respect product categories, and reproduces the sequence of his argument: that the regulatory action principally blocks new equipment authorisations while previously approved devices remain in service, and that the operative counterintelligence question is therefore what intelligence value can be extracted from the devices already surrounding sensitive people and places. This is a different form of third-party use from republication or excerpting, since a working journalist at a foreign outlet treated the applicant’s published analysis as an authoritative source and constructed a news article around it under her own byline. It is the sixth independent citation of his work recorded here and the first in which his argument supplies the analytic frame for another outlet’s original reporting.
Washington Examiner · Op-Eds · August 13, 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s op-ed “We’re Building Beijing’s Spy Network for Them, One Convenient Device at a Time,” his ninth placement with the outlet. The piece is written against a late-July regulatory decision adding foreign-produced advanced robotic devices to a federal covered list, taken after national security agencies warned that networked robots could support surveillance, foreign intelligence collection, or remote manipulation, and against the commission chairman’s subsequent defence of the broader campaign as a way to reduce risk before large numbers of vulnerable devices become embedded in American life. The applicant accepts that direction as sensible and then states his objection precisely: Washington is still using the wrong unit of analysis. He observes that policy has proceeded category by category, with commerce authorities restricting connected-vehicle hardware and software tied to particular states while the communications regulator moved separately against foreign-made drones, routers, robots, and connected power inverters, and argues that although each action addresses a real exposure, intelligence collection crosses all of those product boundaries, so a regime organised around device categories will keep pursuing the previous device while the capability migrates to the next one. The argument applies to supply-chain and collection risk the same structural move the applicant has made across defence readiness, alliance standards, and frontier-model access, namely that a control regime must be organised around the capability being governed rather than around the artefact that happens to carry it.
Eurasia Review · August 12, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Medical AI Can Pass the Test and Still Fail Patients,” his sixteenth contribution to the outlet and the first to apply his assurance argument to clinical medicine. The thesis stated in the title is that a medical artificial-intelligence system can satisfy the evaluation it was measured against and still fail the patients it is used on. This extends into healthcare the distinction the applicant has developed across defence and technology policy over the preceding weeks, that a result on a benchmark is a claim about a test rather than about deployed practice, that the conditions under which a safety claim was measured are part of the claim, and that an institution able to state a performance figure is not thereby able to evaluate the system in service. The breadth of application is itself notable: the same argument has now been made about weapons-system readiness, alliance standards, frontier-model access, space records, and clinical decision support, which indicates a general framework rather than a domain-specific observation.
The Space Review, in association with SpaceNews · August 10, 2026 · Authored by Burak Oktenli
The Space Review, published in association with SpaceNews, carried the applicant’s article “Who Will Believe the Space Logs in 2040? Space Governance and the Quantum Audit Problem,” his second contribution to the outlet. The piece identifies a variant of the harvest-now threat that bears on attribution rather than secrecy. Where the defence community focuses on adversaries intercepting encrypted traffic today to decrypt it once quantum computing matures, the applicant argues that space audit trails face harvest-now-forge-later: an adversary collecting signed records today could, once a cryptographically relevant quantum computer exists, break the signature scheme and retroactively forge historical telemetry, presenting an altered account of a past orbital manoeuvre years after the fact. He grounds this in the published transition roadmap under which classical signature algorithms are deprecated at the end of the decade and disallowed five years later, noting that a disallowed scheme must by definition be assumed vulnerable to forgery. He argues the space domain is uniquely exposed for three reasons: records outlive their cryptographic locks, since a satellite may operate for fifteen to twenty years and the legal value of its records lasts longer; attribution is the cornerstone of space security and therefore precisely what an adversary would want to manipulate; and there is no re-measurement in space, so if the telemetry of an event is compromised the only proof of that event is lost. His central technical claim is that simply mandating new quantum-resistant signatures is structurally incomplete, because relying on a single new scheme reproduces the single-point-of-failure mistake the transition is meant to correct, because records generated during the migration remain exposed without an architecture governing it, and because historical archives cannot be re-signed with new keys without breaking the chain of custody that gives the original record its value. The proposed remedy is a three-layer, crypto-agile architecture: an entry commitment sealing each record with classical and post-quantum signatures simultaneously so that an adversary must defeat both across the transition; a chain binding in which records are linked in a continuous hash chain that explicitly tags the algorithm used at each step, so older records remain verifiable under their originally recorded parameters; and an archival anchor in which a periodic digest of the whole chain is sealed with a stateless hash-based signature, whose security rests on the hash function rather than on lattice or elliptic-curve mathematics. The strategic consequence he draws is that in the worst case where lattice-based cryptography is broken, assurance that a record has not been altered reduces to the security of a single hash function, which quantum attack weakens but does not shatter. The applicant reports his own prototype testing of this architecture, stating that sealing a record takes roughly a thousandth of a second at over six hundred records per second on a single standard processor core, and that a thirty-year archival anchor requires a few megabytes of storage and seconds of processing; these are his own reported measurements of a prototype rather than independently validated results. He connects the argument to the treaty obligation that states conduct activities with due regard for the interests of others, observing that the principle depends entirely on reliable and unalterable logs and that the attribution mechanism of international space law collapses if records can be retroactively forged, and closes with four proposed actions keyed to the deprecation deadlines. The article explicitly continues his earlier Space Review argument on authority architecture for autonomous space systems and names his AUTHREX space vehicle framework in print, making this the clearest published statement of his research program as a continuing line of work in a professional venue.
Eurasia Review · August 10, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “America Is Exporting AI to Allies: It Needs Rules for Turning Access Off” under its Analysis designation, the fourth of his contributions to carry that label and his fifteenth for the outlet. The argument sets an institutional contrast against an operational gap. In July 2026 representatives of twenty-nine countries signed an agreement in Shanghai creating a standing organization for international artificial-intelligence cooperation, which the applicant reads as China putting permanent institutional machinery around the promise of cooperation, particularly toward the Global South, and whose importance at this stage he judges political rather than technical since it guarantees no access to advanced models. The United States enters that contest hosting many of the most capable frontier-model providers and with an explicit policy of exporting full-stack packages of hardware, models, software, applications, cybersecurity measures, financing, and standards, but without settled rules for what happens when Washington decides a model partners were encouraged to build around must be restricted. The evidence is a documented episode from June 2026: a United States government directive to suspend foreign-national access to two frontier models led the developer, unable to verify nationality in real time, to disable both for all users over a reported method of bypassing a cyber safeguard, turning a domestic security judgment into a cross-border availability shock. The applicant treats the resolution as equally instructive, noting that a classifier targeting the reported bypass was trained, that government evaluators tested the old and new safeguards, that controls were lifted at the end of June with one model returning to global users and the other resuming more narrowly, and that a broad restriction gave way to a specific technical remedy once the evidence became clearer. From this he argues that allied risk extends beyond whether an American model is safe enough to use, to what happens to allied operations when United States authorities decide access must change, and that existing policy directs engagement with partners on foreign AI threats while leaving unaddressed the consultation, evidence-sharing, and continuity procedures that apply to American systems themselves. His proposal is an allied frontier access compact with five elements: a shared risk vocabulary tied to evidence, so that a narrow safeguard bypass, a capability already widely available, and a genuinely novel capability trigger different responses and disagreement is forced onto facts technical agencies can examine; graduated intervention across blocking a capability, restricting a class of users, limiting access to vetted institutions, and geographic controls, with worldwide suspension at the far end carrying a defined review period, an evidentiary basis shareable at an appropriate classification level, and stated conditions for restoration; notification channels operating at crisis speed, since a government should not discover that a strategic dependency has disappeared through a vendor status page; continuity requirements including pre-identified alternative models, local fallbacks, degraded operating modes, and data portability, which he notes is already live at scale given trusted-access programs reaching roughly one hundred and fifty organizations across more than fifteen countries; and a connected network of national evaluation institutions, citing a joint evaluation published in July by British and American AI-safety bodies that reported both results and the limits of the test environment. He closes on the strategic argument that dependence becomes politically fragile when the process governing it is opaque, that governments unable to plan around access risk will diversify, favour open-weight alternatives, require local hosting, or write procurement rules reducing exposure, and that the next phase of competition will test which country can make technological dependence strategically manageable for its partners. The piece applies the applicant’s authority-governance framework to international technology access, since graduated restriction, notification, continuity under degraded conditions, and defined restoration are the same properties his architectures specify for machine authority, stated here at the level of alliance policy.
RealClearDefense · August 10, 2026 · Authored by Burak Oktenli
RealClearDefense published the applicant’s op-ed “Defense Networks Will Split. The Requirement Should Say Who Decides.”, his sixth contribution to the outlet. The argument isolates a gap between what programs specify and what operations require. Plans for conflict against a capable adversary already assume communications will be disrupted, units train for disconnected, intermittent, and limited conditions, and programs advertise the ability to keep operating through them; what remains unspecified is not whether the software keeps running but what happens to delegated tasking authority while the network is divided, and how conflicting decisions are adjudicated when it reconnects. The applicant credits mission command as a mature framework for the human side of the problem, giving a disconnected subordinate commander’s intent, mission orders, defined command relationships, disciplined initiative, and an obligation to report and explain decisions once contact resumes, while noting the framework is imperfect in practice and contested among officers. His central claim is that automated decision-support and allocation systems do not inherit that framework merely because they can continue processing local data: if the architecture permits both partitions to keep tasking or allocating shared resources, each side acts against the last common state it saw, producing two locally reasonable commitments against the same tanker, the same lift capacity, the same sensor window, or the same munition stock, with neither node malfunctioning, because the system was designed for local continuity without an equally explicit rule for divided authority. He then identifies reconnection as the harder problem, on the ground that data consistency is not the same thing as command validity, so a generic synchronization rule of last update, source priority, or automatic overwrite can produce a clean database while concealing the operational disagreement that produced it, preserving the wrong commitment, erasing a decision that required review, or making two incompatible actions appear as though only one occurred. The prescription is three requirements he presents as engineering and testing work rather than research: a partition authority map preauthorizing which node may commit which resources within what limits under what conditions, with authority permitted to divide differently by function; bounded delegation in which delegated tasking rights operate as leases limited by time, function, resource quantity, confidence in local state, or mission phase, and unable to expand merely because communications remain unavailable; and reconvergence adjudication that preserves both decision histories, identifies conflicting commitments, requires human review where consequences cannot be safely reversed, and records which decision prevailed and why. He notes candidly that the third is most vulnerable to cost and schedule pressure because it is unglamorous and hard to demonstrate in a performance chart, while being the most direct way to learn whether the answer the software gives is the answer the commander would give, and proposes that exercises already injecting degraded communications add a reconvergence objective by cutting the link deliberately, letting both sides operate, restoring it, and auditing which decisions stand, which are reversed, and who was informed. The piece states as a procurement requirement what the applicant’s architectures specify formally, namely that authority must be bounded, that it must narrow as confidence or connectivity degrades, and that divergent decision records must be reconciled by an accountable process rather than silently overwritten.
Washington Examiner · Op-Eds · August 6, 2026 · Authored by Burak Oktenli · Syndicated to MSN
The Washington Examiner published the applicant’s op-ed “Trump’s AI Exemption Isn’t an Oversight Gap. It’s a National Security Masterstroke,” his eighth placement with the outlet, subsequently syndicated to MSN. The piece defends the decision to keep open-weight models outside a new voluntary federal safety-testing framework, arguing that critics who call this a gap in oversight assume every advanced model can be governed through the same checkpoint, when closed frontier systems and open-weight releases have different lifecycles, different security properties, and different relationships with the government, so that treating them identically would create paperwork without producing equal protection. The technical core is an assurance argument: a closed developer controls a specific model, its safeguards, its hosting environment, and the moment customers receive access, so a prerelease review can examine a defined artifact under controlled conditions, whereas an open-weight model begins a different life once published and is fine-tuned, quantized, combined with tools, and multiplied into downstream variants, meaning a federal test of the original release could be obsolete within days while still conferring what the applicant calls a misleading government-approved glow. He does not minimise the risks, citing a disclosed incident in which prerelease models operating with reduced cyber refusals during an internal evaluation escaped a sandbox and reached production infrastructure, and a national security institute’s finding that agents powered by closed models took unauthorized actions during security tests, but argues these establish the need for better containment, evaluation design, and developer accountability rather than a federal review queue for every model with downloadable weights. He adds a competition and sovereignty argument, that mandatory prerelease testing would favour the largest companies able to absorb compliance costs, and a security argument that open weights let independent researchers inspect behaviour and reproduce findings, let infrastructure operators run models locally instead of sending sensitive data to a commercial provider, and let federal and defense users adapt systems without depending on a single vendor. His recommendation is to keep the exemption while making the boundary clearer, publishing the capability categories that trigger federal interest without disclosing classified benchmark details, encouraging reproducible capability evaluations, model hashes, training and fine-tuning disclosures, and documentation of the conditions under which safety claims were measured, and testing the system that actually runs, including its tools, permissions, network access, and operator controls. The governing distinction is the applicant’s own research thesis stated for civilian AI policy: a model sitting in a repository has possibilities, while an agent connected to credentials, browsers, code execution, and live networks has authority, and scrutiny belongs where authority is exercised rather than where capability merely exists.
Geopolitical Monitor · Opinion · August 6, 2026 · Authored by Burak Oktenli
Geopolitical Monitor published the applicant’s opinion piece “Europe’s Military AI Gap Begins at Fielding,” his sixth placement with the outlet, which also maintains a standing author page for him. The argument reframes a familiar complaint. Europe’s military AI problem is usually described as a hole in the Union’s flagship technology law, whose Article 2(3) excludes systems used exclusively for military, defence, or national-security purposes; the applicant accepts that the exclusion is real, broad, and grounded in the division of authority between the Union and its member states, but argues that treating it as the whole problem points toward the wrong remedy, because extending a civilian market regulation wholesale into warfare would not answer the immediate question facing European forces, which is what must be proven before an AI-enabled military system moves from funded development into national service and then into a multinational operation. He notes that Europe does not lack principles, citing allied responsible-use commitments covering lawfulness, accountability, explainability and traceability, reliability, governability, and bias mitigation, together with calls for common standards, assessment templates, review processes, an alliance-wide testing and validation landscape, and interoperability; these are substantial foundations but are not the same as a single fielding assurance profile that national authorities can test and recognize when a system crosses an allied boundary. The evidence he assembles is a documented discontinuity across the Union’s own defence instruments, in which a meaningful-human-control condition attached to one funding instrument was carried into a short-term common-procurement instrument that has since expired, while the newer defence financing instrument supports common procurement in artificial intelligence without repeating that express exclusion, an omission a member state formally regretted when the Council adopted it. From this he identifies the defect as a lifecycle break: a human-control condition can govern eligibility for one grant without becoming a common, testable requirement for the system that is later fielded, updated, connected to other national systems, or operated under multinational command. His central formulation is that interoperability changes the unit of risk, because a system certified under one country’s rules may exchange data, recommendations, or control functions inside an architecture used by several allies whose authorities differ over which actions require a named human decision, what confidence threshold permits an automated recommendation, how quickly a human must be able to intervene, and what evidence an audit record must preserve, so that technical interoperability can advance faster than reciprocal confidence in the authority rules enforced by the software. The proposal is a fielding assurance profile rather than a supranational decision on when a state may use force, narrow enough to respect national sovereignty and concrete enough to test, requiring four things: an authorization boundary identifying which consequential actions require human approval and which official or role may provide it; runtime governability that constrains, suspends, or returns the system to a safe mode when data quality, communications, mission conditions, or operator confidence deteriorate; tamper-evident traceability showing what the system recommended or initiated, which data and rules supported the action, who authorized it, and whether an override occurred; and a pre-agreed conflict rule for multinational operations so that incompatible national caveats trigger renewed human authorization rather than being silently resolved by whichever system acts first. He assigns the institutional division of labour accordingly, with the Union attaching the profile to its funding and procurement support, national governments retaining certification and use-of-force authority, and the alliance promoting reciprocal recognition and testing whether the profile works in multinational architectures. This is the closest correspondence in the applicant’s published commentary to the architecture his research program specifies, since the four required elements are the graded authorization boundary, the degradation and safe-hold behaviour, the tamper-evident decision record, and the portability of national caveats across coalition systems that his formal work defines and models directly.
Eurasia Review · August 5, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “America’s Drone Standards Will Travel Far Beyond America” under its Analysis designation, the third of his contributions to carry that label and his fourteenth for the outlet. The argument holds that the drone standards the United States sets for its own market and forces will govern well beyond American jurisdiction. It applies to uncrewed systems the propagation mechanism the applicant set out a day earlier in his analysis of allied military artificial-intelligence governance, that manufacturers design to the requirements of their largest customers, that forces purchase systems which have already passed recognizable tests, and that allies favour equipment which connects to a coalition without reopening every safety and authorization question, so that a domestic procurement rule can become an international norm without ever being negotiated as one. The piece continues the applicant’s sustained line of argument that the decisive contest in emerging-technology governance is over standards and the evidence they demand rather than over declared principles.
Cited twice within nine days by the Foundation for Defense of Democracies Overnight Brief
Foundation for Defense of Democracies · Overnight Brief · August 6 and August 14, 2026
The Foundation for Defense of Democracies, a Washington national-security research institute, selected the applicant’s work for its Overnight Brief on two separate occasions within nine days. The Overnight Brief is the institute’s daily curated digest of national-security reporting and analysis, in which a small number of named commentators are excerpted each edition. In the first instance the brief carried a substantive passage from his Washington Examiner analysis in its Iran section, quoting his argument that the case for negotiation rests on prudence, that a strong country uses leverage to widen its choices and reduce the price of the outcome it seeks, and that terms can be demanded while capability is held ready. In the second instance the brief listed him in its Must-Reads, the short headline selection at the top of the edition, identified by name and described as an independent researcher, and separately excerpted his argument in the China section, quoting his claim that the policy direction is sensible while Washington is still using the wrong unit of analysis, together with his observation that federal action has proceeded category by category across connected vehicles, drones, routers, robots, and power inverters while intelligence collection crosses all of those product boundaries. Across the two editions his analysis appeared alongside excerpted commentary from the Wall Street Journal, the Washington Post, Foreign Affairs, Foreign Policy, The Atlantic, War on the Rocks, The Hill, the Heritage Foundation, and the institute’s own senior analysts. Selection is editorial rather than syndicated, and a repeat appearance is a stronger indicator than a single one, since it reflects sustained editorial attention to the applicant’s work rather than a one-time catch. The citations place his written judgment before a Washington policy readership through a third party’s selection rather than through republication of his work, and imply no affiliation with or endorsement by the institute in either direction.
Washington Examiner · Op-Eds · August 5, 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s op-ed “Trump Isn’t John Lennon. That’s Why His Iran Strategy Might Actually Work,” his seventh placement with the outlet and a direct reply to an argument made by another contributor in the same publication, which is a mark of standing in an editorial conversation rather than a single submission. The argument holds that a well-founded distrust of an adversary does not by itself justify regime change, and that military power has its greatest value when an adversary knows it can be used and the commander knows when to wait. Its analytic core is a design requirement rather than a sentiment: the applicant concedes the strongest objection, that repeated threat-and-pause cycles can burn presidential credibility, and answers it structurally, arguing that every pause should carry a fixed deadline, written objectives, independent verification, and consequences announced in advance, so that a bounded test forces a measurable choice while open-ended negotiation invites delay. He sets against the alternative what force cannot guarantee once a government falls, including control of nuclear material, freedom of navigation through a contested strait, the behaviour of fragmented security units, and the politics of any successor government, arguing those risks may prove acceptable but deserve more than a slogan. The piece extends two threads running through the applicant’s published work, the limits of what force can verify and the discipline of specifying deadlines, objectives, verification, and consequences in advance rather than improvising them under pressure, which is the same structure his research applies to machine decision authority.
Eurasia Review · August 4, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “The Race to Write NATO’s Military AI Rulebook Has Begun,” his thirteenth contribution to the outlet. The argument begins from a structural observation: the European Union wrote the world’s most comprehensive artificial-intelligence law but deliberately excluded systems used exclusively for military, defense, or national-security purposes, a choice reflecting treaty limits and member-state control over national defense, which leaves the practical rules for military AI to be built elsewhere. The applicant traces that construction across a June national-security presidential memorandum directing an update to the Department of Defense directive on autonomy in weapon systems and requiring that no commercial entity or adversary be able to prevent the use of, disable, degrade, or materially modify a mission-dependent AI system without federal knowledge and approval, which he reads not as a procurement clause but as an assertion that operational authority must remain inside the constitutional chain of command even when the technology comes from private firms; alongside a more distributed European architecture of national weapons reviews, alliance principles, and European Defence Agency work on testing, verification, certification, and standardization. The pivotal claim is about how standards actually propagate: companies design to the requirements of their largest customers, forces buy systems that have passed recognizable tests, and allies favor equipment that connects to a coalition without reopening every safety and authorization question, so a procurement rule can become an alliance norm without ever being negotiated as a treaty. Against alliance testing infrastructure, industry-cooperation strategy, and European operational-experimentation campaigns, he identifies the remaining gap as the absence of a fielding profile letting one ally understand and recognize the governance evidence produced by another, and proposes four minimum requirements: explicit authorization boundaries documenting which actions a system may initiate, which require human approval, and how its authority changes when data quality, communications, or confidence deteriorate; governed software change, since models, safeguards, data sources, and interfaces evolve after certification, with material changes triggering defined retesting, notification, and the ability to restore a previously approved version; reconstructable records establishing what the system recommended or did, what evidence it used, which human or machine held authority, and whether national or coalition restrictions applied; and interoperability as a governance requirement rather than a technical one, because a coalition cannot safely connect systems if each partner understands the other’s data format but not the limits on what that system is permitted to do. He argues for publishing an unclassified minimum baseline alongside any classified annex, since a standard allies and suppliers cannot examine cannot be compared, incorporated into contracts, or recognized, and favors reciprocal recognition over Europe importing an American directive. The four requirements correspond directly to the elements the applicant’s research program specifies, graded authorization with degradation behaviour, controlled reversion to an approved version, reconstructable decision records, and the portability of caveats and stop conditions across coalition systems, which places his architecture on the standards agenda he describes as the decisive contest.
Washington Examiner · Op-Eds · August 4, 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s op-ed “Silicon Valley Can’t Own the Pentagon’s Kill Switch,” his sixth placement with the outlet. Taking as its point of departure a senior special operations commander’s public caution about how artificial intelligence enters the delivery of military force, the piece argues that the decisive question is no longer whether the Department of Defense will use commercial AI but who controls the software once it becomes part of a mission. Its central claim is a contracting requirement stated in operational terms: for mission-critical AI, the United States government must retain both the contractual and the technical authority to stop the system, to freeze an approved version, to return to a previous version, and to continue essential operations if the vendor relationship fails. The applicant sets this against the Department’s 2025 awards to four frontier AI developers, each carrying a ceiling of two hundred million dollars, for advanced AI workflows supporting national security missions, and the subsequent expansion of commercial AI use into classified environments, concluding that private firms supplying much of the talent and technology behind an AI-enabled force is a strength only so long as dependence does not become delegated command authority. The argument is the acquisition-side statement of the applicant’s research program: stop, freeze, rollback, and continuity are the recovery and reversion primitives his authority architectures specify at runtime, and the piece makes the case that they must be secured as contract terms before deployment rather than negotiated after a system is already carrying a mission.
Eurasia Review · August 3, 2026 · Analysis designation · Authored by Burak Oktenli
Eurasia Review published the applicant’s piece “Chokepoint Coercion in the Next Phase of the Iran Conflict” under its Analysis designation, the second of his contributions to carry that label and his twelfth for the outlet overall. The argument is that chokepoint coercion works by altering commercial behaviour through uncertainty rather than by achieving naval superiority, and that military assessments still measure three unlike effects, tactical threat, operational denial, and economic imposition, as one number. The piece treats the Red Sea campaign as the completed experiment: attacks on commercial shipping pushed carriers off the Suez route even while naval forces remained capable of defending individual ships, with canal transits falling by half in 2024 and annual revenue dropping 61 percent on Egypt’s official figures, tonnage through the canal down about 70 percent by mid-2024 on United Nations trade data while capacity routed around the Cape of Good Hope rose 89 percent. The pivotal observation is a January 2024 engagement in which allied forces defeated a complex attack involving one-way attack drones, anti-ship cruise missiles, and an anti-ship ballistic missile, with the weapons intercepted and no injuries or damage reported, while commercial rerouting continued regardless: the tactical engagement and the commercial outcome were moving in different directions, and the adversary needed not control of the sea but enough credible danger and uncertainty to alter private commercial decisions at scale. The prescription is a three-axis assessment, tactical threat to platforms, operational denial of access, and strategic economic imposition, each with named indicators, displayed as separate panels in the commander’s routine update, with decision-critical triggers keyed to merchant transits, carrier withdrawals, and interceptor expenditure that fails to change commercial behaviour rather than to attack counts alone, and with tabletop exercises that hold the kinetic event constant while varying the commercial reaction. The passage nearest the applicant’s technical program concerns automated decision aids: the piece is careful to state that existing combat systems should not be assumed to produce a single blended threat score, but argues that as headquarters increasingly use software to fuse data and recommend courses of action, the underlying data model matters, because a system optimised for imminent physical danger cannot be expected to infer commercial confidence or cumulative economic pressure unless those variables are deliberately represented and kept distinct. The analysis closes by applying the framework to the Strait of Hormuz, central to negotiations over the war that began in late February, where the passage carries a larger share of world energy through a narrower strait with no equivalent of the Cape alternative, and where a waterway open some days and effectively shut on others imposes much of the cost of closure without ever requiring one. The piece extends the applicant’s measurement line of argument, that unlike effects compressed into a single figure misprice a campaign, into maritime assessment, and its insistence that decision-aid data models represent distinct effects separately is the same design requirement his authority architectures apply to machine decision systems.
Research cited as source material by an academic technology-ethics podcast
Prosthetic Gods · Episode 46, “Killer Robots” · August 2026 · Hosted by bioethicist James Hughes and philosopher Nir Eisikovits
Prosthetic Gods, a technology-ethics podcast in which a bioethicist and a philosopher debate the politics of emerging technologies, devoted a full episode to autonomous weapons systems and listed the applicant’s RealClearDefense analysis “The Vulnerability of Autonomous Warfare Systems” among the episode’s source materials, linked to the original. The reading list places the piece alongside the principal references in the field: a Center for Strategic and International Studies analysis of software-defined autonomy, an International Committee of the Red Cross legal paper on autonomous weapon systems under international humanitarian law, an Army University Press Military Review article on integrating lethal autonomous weapon systems into targeting, a Council on Foreign Relations discussion of autonomy in Ukraine, and a conversation with Paul Scharre. The episode addresses the questions the applicant’s work concerns directly, including the sufficiency of human-in-the-loop arrangements, cognitive deskilling under automation, and accountability gaps. The citation appeared within days of publication and is recorded as third-party use of the applicant’s analysis as a reference source; whether the hosts discuss the argument on air is not established from the published episode description.
RealClearDefense · August 3, 2026 · Authored by Burak Oktenli
RealClearDefense published the applicant’s op-ed “The Vulnerability of Autonomous Warfare Systems,” his fifth contribution to the outlet, under the deck line that the joint force is buying autonomy faster than it can measure whether it can fight without it. The argument reframes the vulnerability of automated systems as a measurement problem: every fielded system depends on a link, a signal, a position fix, or a software service an adversary has every incentive to deny, and the neglected question is not whether anyone can still fight when it goes dark but whether the institution knows, unit by unit, who can. The piece reads the war in Ukraine as a dependency story rather than a drone story, noting that circulating loss figures vary widely and resist independent confirmation and should be treated with care, while the mechanism the reporting consistently agrees on matters more than any total: jamming, not kinetic defense, is the dominant killer of small uncrewed systems, and the winning adaptations, fiber-optic control and onboard machine vision, reduced dependence on the vulnerable link and pushed capability and judgment closer to the edge. It then applies the same test institutionally: the Government Accountability Office has found the Department developing alternative navigation systems without measuring progress toward fielding them, and reported in April 2025 that the joint command-and-control effort remains a set of service-built programs without a comprehensive framework linking the hundreds of systems involved, so a network that has not achieved interoperability on a good day has not rehearsed its degraded modes on a bad one. The applicant credits Army doctrine for naming the denied and degraded environment and credits the hardest training rotations as real, but argues the decisive defect is unmeasured variance: how much a given soldier actually experiences fighting blind varies from unit to unit, realistic jamming is lawful at only a few national ranges, and the institution has no consistent way to see where the gaps are, while the research literature on automation-induced skill atrophy shows the manual layer thins invisibly wherever it is not deliberately maintained. The prescription is three commitments requiring no new program of record: build the denied environment into ordinary training by exercise design, with systems switched off or ruled dead; make degraded-mode competence a measured and reported readiness standard the way gunnery and physical fitness are, on the reasoning that what gets measured gets trained and what gets measured also gets seen; and treat the manual layer as a capability to be resourced and protected, retaining analog backups, documenting procedures before the people who remember them retire, and rehearsing the handoff from automated to manual under stress rather than discovering it during one. The essay closes that a force is defined not by what its machines can do when everything works but by what its people can still do when the machines go dark, and by whether the institution knew in advance which of its units could do it. The piece translates the applicant’s assurance-capacity argument into force readiness, a claimed capability that no institution can measure is not yet a capability anyone can count on, and the handoff it asks units to rehearse, from automated operation to human control under stress, is the authority transition his architectures formalize.
Cited in the inaugural autonomous-weapons roundup of UK Stop Killer Robots
UK Stop Killer Robots · Autonomous Weapons News Roundup, Issue 1 · August 6, 2026
UK Stop Killer Robots, the United Kingdom coalition campaigning on autonomous weapons systems, launched a curated fortnightly roundup of news, analysis, and commentary in the run-up to United Nations General Assembly negotiations, and included the applicant’s Eurasia Review analysis as one of twelve selected items in its first issue. The entry names him and summarises his argument, recording that he holds the delays to the European artificial-intelligence framework to stem more from institutional challenges than technological ones, and that postponing implementation risks weakening oversight of high-risk applications including military systems. The selection places his analysis alongside items from the New York Times, the Centre for International Governance Innovation, Just Security, the Organisation for Economic Co-operation and Development, EUobserver, Small Wars Journal, RealClearDefense, and The Independent. The citation is editorial selection by a civil-society coalition preparing for multilateral negotiations, and is recorded as third-party use of the applicant’s analysis; it implies no affiliation with, or endorsement of, the coalition’s policy positions in either direction.
Eurasia Review · August 2, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Europe Delayed Its AI Rules Because the Institutions Were Not Ready,” appearing on the date the deferred obligations were originally to take effect. The argument is that governments are writing artificial-intelligence law faster than they are building the bodies that can investigate failures, hear appeals, and order corrections. It takes the European deferral as the demonstration: core obligations for high-risk systems moved from August 2026 to December 2027, with systems embedded in regulated products pushed to 2028, not because the rules changed but because member states had been slow to designate the national authorities that would enforce them and the harmonized standards and conformity-assessment tools that high-risk compliance depends on were unfinished, leaving regulators demanding conformity against benchmarks that did not yet exist. The applicant draws attention to which duties survived and which slipped: the transparency regime took effect on schedule, covering disclosure that a person is interacting with an AI system, marking of synthetic content, and labeling of deepfakes, while every obligation requiring someone to inspect, evaluate, and judge a system was the part that moved. From this he argues that accountability is a relationship rather than a property that can be added to a model through documentation or a compliance checklist: someone must be required to explain a consequential decision to a body that can question the explanation, judge it against a standard, and attach consequences. Without that body a decision can be transparent, tested, and formally compliant while remaining practically unaccountable, leaving a person denied a loan, screened out of a job, flagged at a border, or harmed by a clinical recommendation aware that AI was involved and with nowhere competent to challenge the result. The analysis grounds this in a documented case, an automated welfare debt-recovery scheme operated in Australia between 2016 and 2019 that used income averaging and shifted the burden of disproof onto recipients, recovering roughly 1.76 billion Australian dollars in debts later found to have been unlawfully raised. Rules were in place throughout and complaints were continuous; what did not exist was a body able to compel the evidence, evaluate the method against a standard, and order the scheme stopped, so unwinding it required a federal court case, a class action, and finally a royal commission whose 2023 report found the scheme neither fair nor legal, with repayment and compensation since passing 2.4 billion Australian dollars and a human cost the applicant describes as heavier than the financial one. The piece compares three governance postures: a European rights-based regime now building an AI Office, national competent authorities, and a service desk; an American approach centered on adoption, competition, and infrastructure, in which agency chief AI officers hold mandates the applicant argues conflict unless independent review and appeal sit elsewhere; and a Department of Defense model he treats as the useful partial example, because Directive 3000.09 and the Chief Digital and Artificial Intelligence Office link policy to organizations, engineering practice, review processes, and named accountable operators. His formulation is that principles become governance only when an institution can perform them. The prescription is to match every high-impact deployment, before it goes live, with a named institutional forum able to demand an explanation through lawful access to system documentation, data provenance, evaluation results, incident records, model versions, and the surrounding human decisions; to evaluate the decision against an articulated standard with technical competence and independence; and to impose a consequence, whether pausing a system, requiring rollback, ordering revalidation, notifying affected people, or providing recourse, since an accountability process that ends in a report is not enough. The passage most directly connected to the applicant’s technical program follows: these functions must be supported by the technology itself through audit trails, version control, provenance records, preserved evaluation evidence, appeal pathways, and reliable correction mechanisms, and he states that designing that interface between an AI system and the institutions expected to govern it is an engineering task that is currently nobody’s job. That is the problem his research program addresses directly, and his three deployment tests, name the forum, design the interface, and match deployment speed to institutional capacity, restate in policy terms the requirement his architectures implement in engineering terms.
Security Boulevard (Techstrong Group) · July 31, 2026 · Authored by Burak Oktenli
Security Boulevard, a widely read cybersecurity publication in the Techstrong Group, published the applicant’s analysis “Zero Trust Stops at the AI,” carried with an author photograph and a contributor profile page. The piece begins from an assumption embedded in most detection programs: that a machine-learning model performs at its certification level and will continue to do so until the next scheduled recalibration. That assumption held while offensive research ran on a human clock, but the applicant argues the symmetry has broken, citing published documentation of state-affiliated groups folding frontier language models into reconnaissance, scripting, and evasion research as a productivity multiplier, and a disclosed large-scale intrusion conducted largely by an artificial-intelligence agent rather than a human team. From this he introduces a named concept, the confidence half-life: a model ships with a certified confidence value, that value erodes under sustained adversarial pressure, and the half-life is the interval over which it falls by half. He offers a regime progression, roughly twenty-four weeks under manual tooling, compressing toward twelve as classical machine learning began assisting offense, and closer to six where language-model assistance compounds across reconnaissance, probing, and variant generation simultaneously, and states explicitly that these are estimates rather than laboratory constants and that the direction rather than the exact figure is what should concern a defender. The operational consequence follows arithmetically: where confidence halves over the same interval an organization waits to recalibrate, a control spends much of its operational life below the threshold at which it was certified, with simulated above-threshold coverage near half the time, and the gap is invisible on dashboards because the model continues returning confident answers until it is wrong, so calibration drift fails silently, which the applicant identifies as the worst failure mode for a security control. His first remedy is deliberately unglamorous, moving recalibration off the calendar and onto the threat regime, with an adaptive cadence restoring full above-threshold coverage in simulation as a scheduling change rather than a capital expense. The deeper argument is the one that connects to his research program: organizations that spent a decade dismantling perimeter trust for human and device access have silently re-embedded it at the artificial-intelligence layer, because a model that performed well in evaluation is granted standing authority that persists until something breaks. He maps Zero Trust principles onto machine authority almost one to one, so that never trust and always verify becomes never delegating authority without verified current confidence against the specific task rather than a trust score assigned at procurement, least privilege becomes the minimum authority a task requires, assume breach becomes assume drift, micro-segmentation becomes tiered authority with hard boundaries so that a model on a streak of correct calls cannot quietly accumulate more latitude than anyone authorized, and explicit verification becomes logged and reversible deliberation on every escalation. The closing standard is bounded rather than perfect failure, in which a wrong decision surfaces as a signal, is caught at a boundary, and rolls back along a path designed in advance. This is the applicant’s authority-governance architecture stated in enterprise security vocabulary: standing authority subject to expiry and reverification, tiered ceilings, and a logged reversible escalation record are the same mechanisms his technical work implements, and the piece is his second named contribution to the security literature in one week, following the governance-layer exploitation concept published in the cybersecurity trade press four days earlier.
Washington Examiner · Op-Eds section · July 30, 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s fifth piece for the outlet, “What Trump’s record border numbers are hiding,” an argument about measurement rather than about immigration policy. The piece takes a set of enforcement statistics that are not in dispute, including a year-over-year decline of seventy-nine percent in southwest border apprehensions for January 2026, an eighty-four percent fall in total encounters at and between ports of entry on that border, and an average of two hundred ninety-eight apprehensions a day by April, and asks what such figures establish. Its answer is that they are enforcement outputs rather than complete measures of security or of harms a policy may have prevented: apprehensions count the people officers encountered, and therefore do not count successful entries, do not explain why fewer people attempted the journey, and do not establish what followed from the decline. The piece then raises the attribution problem, observing that the change cannot be assigned to a single policy because enforcement by a neighboring state, asylum restrictions predating the current administration, regional migration patterns, and deterrence signaling all bear on the outcome, and separating their contributions is analytic work that an announcement cannot perform. Its discipline is to hold three questions apart that public argument routinely collapses into one: whether the numbers are real, which the piece grants; what produced them; and what they imply. The analysis extends a line the applicant has developed across several outlets on the accounting of prevented harm, namely that outcomes which did not occur leave no countable record, so institutions default to measuring the activity they can observe and mistake it for the effect they intended. It is the domestic-statistics expression of the same evidentiary standard his technical work applies to autonomous systems, where a system’s logged activity is not by itself proof that the system did what was required.
Military AI · Commentary · July 30, 2026 · Authored by Burak Oktenli
Military AI, a defense artificial-intelligence trade publication, published the applicant’s second commentary for the outlet, “The Human-in-the-Loop Is Becoming a Rubber Stamp. Acquisition Can Fix It.,” carried with an author photograph and a contributor profile page, following his June 2026 commentary for the same publication on accountability in agentic military artificial intelligence. The argument holds that the human-in-the-loop safeguard is thinning into a formality, and that the cause lies in acquisition rather than in operator performance. It opens from the throughput now achievable with machine assistance, citing a recent thirty-eight-day campaign in which AI-assisted planning helped coordinate more than thirteen thousand targets, with peak demand on the responsible digital and artificial-intelligence office reaching roughly twenty billion tokens a day, and sets that speed against reported testing in which automated object-recognition accuracy ran well below that of trained analysts, alongside a serving Army officer’s warning that large language models do not truly understand three-dimensional space and are therefore ill-suited to developing courses of action. The central claim follows: when automated tools surface thousands of candidate items a day and a human must clear each one, an alert delivered as a bare flag, with no rationale, no supporting evidence, and no stated confidence, is difficult to act on and easy to accept without question, so operators fall into either disuse, in which distrust leads them to ignore the system, or the more dangerous misuse driven by automation bias, in which they defer because questioning is slower than accepting. The applicant argues this is a specification defect rather than a training problem, because no amount of operator discipline can recover a rationale the system was never required to produce, and scrutiny of a black box collapses into faith. The prescription is to stop buying detection and start buying understanding: a system that states what departed from which baseline, on what evidence, with what stated confidence, and what it does not know, that offers alternative explanations and flags missing evidence, and that functions as investigative support while leaving the determination to the human who holds the operational context the model lacks. Three acquisition controls are named. A standardized explainable alert format should be required as a condition of the transition from test to production, which the piece identifies as the highest-leverage control point in the lifecycle and one currently permitting opaque systems through. Operational testing communities should evaluate the human-machine interface with the same rigor applied to the underlying algorithm, measuring whether an explanation actually improves decision time and reduces blind acceptance, since confident-looking output that cannot be interrogated is worse than no automation. And continuous monitoring should be written into the lifecycle in alignment with Department of Defense Directive 3000.09 and the Government Accountability Office’s artificial-intelligence accountability framework, because baselines age, input-behavior relationships shift through concept drift, and detection models can be targeted by adversaries who learn to remain just inside the baseline, so a fielded system must be required to signal its own reduced reliability. The commentary is the acquisition-policy expression of the applicant’s research program: the test-to-production gate corresponds to his pre-deployment assurance work, the requirement that a system signal degraded reliability corresponds to his sensor-trust architecture, and the adversary who stays inside the baseline is the governance-layer exploitation he named in his cybersecurity trade-press analysis published three days earlier.
Geopolitical Monitor · Opinion · July 29, 2026 · Authored by Burak Oktenli
Geopolitical Monitor published the applicant’s fifth original analysis for the outlet, “Six Governments Wrote One Driverless Rule, But They Kept Four Regulators,” an examination of assurance design in the first global regulatory framework for fully driverless automated driving systems. The framework, adopted on June 24 by the United Nations World Forum for Harmonization of Vehicle Regulations and backed by six markets that together account for most of the world’s vehicle production, requires an automated driving system to perform at least as well as a competent human driver. The analysis observes that the benchmark is the straightforward part and that the consequential question is how a manufacturer proves it. Citing the 2016 RAND finding that establishing statistical superiority over human drivers would require hundreds of millions and under some scenarios hundreds of billions of miles, which existing fleets could not accumulate for decades or longer, it accepts that road testing alone cannot answer the question and that the framework’s chosen route is the sensible one: a lifecycle safety management system, validation through a safety case rather than a mileage threshold, demonstration through simulation, track testing and road trials, periodic independent audits, and continuous in-service monitoring. Its central claim follows from that design. Once proof moves from accumulated miles to submitted documents, the document becomes the regulation, and the content of the central document is not yet settled: what an operational design domain description must specify, at what level of granularity, and how a regulator judges whether the accompanying argument is complete rather than merely plausible are left to guidance still being finalized, so the substantive decision about how demanding driverless safety review will be has not yet been made and will be taken in technical working groups and national agencies where fewer people are watching. The piece then identifies an institutional asymmetry: the six governments harmonized the standard but not the machinery for applying it, since type-approval systems examine a manufacturer’s documentation and grant approval before market entry, self-certification systems place compliance with the manufacturer and exercise oversight principally after deployment, and a centrally administered pilot grants access through a coordinated ministerial process. Because mutual recognition depends on a document meaning the same thing to each receiving party, a harmonized standard applied through unharmonized machinery can produce convergence on paper and divergence in practice, with no international referee for the judgment. The analysis closes on three things to watch: the guidance document where real content requirements will be written, whether national implementations converge on comparable documentation expectations, and whether a self-certifying jurisdiction builds an instrument capable of receiving a safety case at all. The argument is the regulatory expression of the applicant’s pre-deployment assurance research, which treats the assurance case as an engineering artifact that must be specified, gated, and independently checkable rather than a document whose sufficiency is judged ad hoc, and it extends his published work on authority governance for automated vehicles.
Eurasia Review · Analysis · July 29, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s long-form study “From Fordow to New York: What Force Cannot Verify in Iran’s Nuclear Program,” his eighth contribution to the outlet and the first carried under its Analysis designation rather than as an opinion piece. The argument sets a thirteen-month sequence of three successive strike campaigns against a nuclear program alongside the concurrent failure of the Treaty on the Non-Proliferation of Nuclear Weapons review conference to reach a substantive consensus outcome for the third consecutive time, and draws the asymmetry between them: force has been applied repeatedly, at growing scale and increasing speed, and no independently verified account exists of what remains of the program it was applied against. The analysis is careful about what can and cannot be claimed. It accepts that officials assessed severe damage to key facilities, and argues that such an assessment must not be conflated with a verified account of residual condition, because force can destroy facilities, disrupt supply chains, and lengthen a timeline while remaining unable to establish what material survived, what expertise persists, what undeclared infrastructure may exist, or how quickly a program could be reconstructed. It also declines the converse inference, noting that the absence of a weapon does not by itself prove the strikes produced that absence, since technical limits, political choices, deterrence, inspections, and internal conditions are all candidate explanations. The governance core of the piece concerns tempo. Citing a senior commander’s public account that AI-enabled tools reduced processes once measured in hours or days to seconds, the analysis treats the campaign as the clearest publicly acknowledged demonstration to date of machine-assisted targeting at the scale of a major interstate operation, while stating plainly that this is not evidence that software decided anything: officials chose the objectives, authorized the strikes, and accepted the risks. What changed was the speed at which the military option could be exercised. The applicant then contrasts an earlier scripted operation, in which weapon-to-target pairings, penetrator counts, and intelligence validation were settled in advance by planners with time to weigh them, with the compressed tempo of the later campaign, explicitly restating his own published position that the scripted architecture is the one worth exporting because it fixes substantive human judgement at an inspectable point before action rather than improvising it inside a machine-speed engagement, and framing the open question as how equivalent validation quality was preserved under compression. The analysis further examines a case it presents as evidence rather than accusation: a reactor site deliberately excluded from the target list, with that restraint communicated in advance and with aim points outside the site perimeter, which nonetheless produced four incidents reported to the International Atomic Energy Agency within roughly six weeks, none of which involved a radiological release. The conclusion drawn is not carelessness but that nuclear-safety risk emerged as a byproduct of an operation conducted to reduce nuclear risk, and that precision in the aim point did not remove it. The strongest counter-argument, that the nonproliferation regime was already failing before any strike, is stated at length and answered rather than avoided. Three recommendations follow: bounded assessments of what was damaged, what may have survived, and what cannot yet be verified, in place of elimination claims; accountability mechanisms operating between five-year review conferences, including regular implementation reporting and a route for urgent safeguards crises; and unclassified publication of the governance lessons of machine-assisted targeting, covering where the tools accelerated analysis, where human authorization remained decisive, how target information was validated, and what additional controls applied near nuclear facilities. That final recommendation states the applicant’s research thesis in arms-control terms: speed that cannot be examined is not a capability anyone can govern.
RealClearDefense · July 29, 2026 · Authored by Burak Oktenli
RealClearDefense published the applicant’s fourth piece for the outlet, “Arming Local Police With Drones. Who Pulls the Trigger?,” an analysis of engagement-authority design in domestic counter-uncrewed-aircraft policy. The piece observes that the legal landscape changed substantially over thirteen months, as an executive order directed detection funding toward state and local agencies and subsequent legislation in the defense authorization permitted trained and certified local police and correctional officers, for the first time, to seize, disable, or destroy a drone posing a credible threat to people, large events, critical infrastructure, or prisons, with implementing rules from the Department of Homeland Security, the Department of Justice, and the Federal Communications Commission now arriving. Its argument is that policy has settled who may act and funded the tools to act with, while leaving unresolved how the decision itself is made. It identifies three gaps. The declaration problem is that a statutory credible-threat standard resolves in practice to a judgment call made in under a minute by whoever holds the certification, distinguishing a hostile payload from a hobbyist who ignored a flight restriction or a broadcast platform that lost its transponder, with three lawful responses on one clock. The handoff problem is that an approaching aircraft can cross private property, municipal, county, and federal boundaries in roughly ninety seconds, while venue teams hold no mitigation authority, certified local officers hold some, and federal teams hold more, through layers of permission that specify no moment or mechanism of transfer. The evidence problem is that engagement decisions will be litigated from both directions, given substantial civil penalties for mitigation without required coordination and liability exposure for a wrongful takedown over a crowd, so that radio-frequency logs, radar tracks, and decision records not captured to an evidentiary standard forfeit in court what was won in statute. The prescription is an authority architecture agreed in advance and stated in three parts: a named decision authority for each protected event, designated beforehand and holding the hostile-or-not call with a pre-planned line of succession; risk-based engagement windows decided in daylight and written down, establishing which responses are authorized at which distances and against which behaviors, so that an officer executes a plan rather than invents one; and an evidence chain built in from first sensor contact so that an engagement can be audited, prosecuted, and defended. The analysis applies the applicant’s counter-uncrewed-aircraft authority research to a domestic law-enforcement setting, and its three components correspond directly to the named-authority, pre-authorized engagement-window, and tamper-evident decision-record elements of his technical architecture work.
Eurasia Review · July 28, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Today’s Hydra Problem: Decapitation Without Degradation,” his seventh original analysis for the outlet. Framed by the myth of the Lernaean Hydra, in which the visible head is the wrong target, the piece argues that the long-running debate over whether leadership decapitation works is mis-specified, because it asks one question of a heterogeneous set of cases whose outcomes turn on a structural property rarely assessed before a strike: the number of independent pathways an organization has for reaching a strategic decision. Reading three well-documented cases as a single ordering, a centralized command node whose core never rebuilt, a distributed coalition that filled a vacated post within days and continued without a visible break, and an intermediate organization that lost tempo for months before reconstituting, the analysis separates two mechanisms that are frequently conflated: bureaucratized succession, in which replacing a leader is administration rather than rupture, and functional redundancy, in which a commander’s tasks are already distributed so that the office itself becomes structurally optional. Its central claim is that sustained pressure selects for the second condition, so that two decades of decapitation produced adversaries organized to make decapitation accomplish less, simultaneously more durable against that instrument and less capable of centrally coordinated mass-casualty operations. The piece gives the strongest counter-argument an explicit hearing, citing documented degradation of the adversary model, and argues the qualification is the point rather than an exception, since the claim concerns resilience against one instrument rather than adversary strength in general. It concludes that assessment should be calibrated to target structure before a decision rather than debated afterward, that pressure belongs on the substrate that sustains a network (financing, recruitment, doctrine, and logistics) rather than on the visible node, and that planning horizons must match the years-long timescale of degrading that substrate rather than the days-long clock of removing an individual. The argument reflects the applicant’s broader analytic focus on where authority actually resides in a system and how removing a nominal decision-holder does or does not change the system’s behavior.
Concept summarised in Japanese by a security-engineering publication
Device Security Lab · Security News Daily Report · July 28, 2026 · Published in Japanese
Device Security Lab, a Japanese publication produced by a cybersecurity engineer that compiles and analyses vulnerability disclosures, incidents, regulatory developments, and industry trends for a practitioner readership, carried the applicant’s Dark Reading analysis in its daily security report and summarised the argument in Japanese. The entry names him directly as the researcher who identified the attack vector, describes cap weaponization as a method in which an adversary reads an organisation’s published governance rules, including recovery protocols, authorisation limits, and safety constraints, and uses low-cost probes to drive a defensive system into a monitored state until it loses autonomous authority, without tampering with any code. The digest assesses the significance in its own terms, observing that the method targets process and governance rather than technology and therefore raises design questions for autonomous security systems, and that its impact grows as adoption of such systems increases. It converts the analysis into three recommended actions for readers: review published security governance rules from an attacker’s perspective, treat the conditions for privilege escalation and de-escalation in autonomous systems as sensitive information, and conduct regular privilege audits. The publication also lists cap weaponization among the attack methods in its terminology index for the day, alongside established techniques. This is the second independent instance of the applicant’s named concept being carried into practitioner guidance in a language other than English, following its citation by a Norwegian advisory firm the same week.
Research concept cited by a Norwegian cybersecurity advisory firm
Berigo AS (Oslo, Norway) · Insight & News · July 28, 2026 · Authored by Roger Ison-Haug, Ph.D., CISSP
Berigo AS, an Oslo-based information-security advisory firm whose services include CISO-as-a-service, ISO/IEC 27001 and 42001 certification support, and NIS2 board advisory, published a client-facing analysis of two industry reports on artificial-intelligence-driven attacks and declining confidence in autonomous security tooling, written by the firm’s principal, who holds a doctorate in cybersecurity leadership and the CISSP credential. The analysis, published in Norwegian one day after the applicant’s Dark Reading article and listing that article as one of its two cited sources, attributes the applicant’s named concept to him directly: “The independent security researcher Burak Oktenli calls it ‘cap weaponization’ when the adversary exploits the governance rules themselves rather than a technical vulnerability” (translated from the Norwegian). The firm then converts the concept into operational guidance for its clients, recommending that organizations write down the limits their automated security measures operate within, who can override them, and who may read that document, and that the document itself be treated as sensitive, on the stated reasoning that the boundaries automation operates within have become part of the attack surface and deserve the same protection as other security configuration. The analysis ties board-level responsibility for these assessments to the European NIS2 directive. The citation shows the applicant’s concept entering practitioner vocabulary within a day of publication: named attribution by a credentialed European security professional, translation into a second language, and conversion into concrete advisory guidance under a European regulatory framework.
Dark Reading (Informa TechTarget) · Threat Intelligence · July 27, 2026 · Authored by Burak Oktenli
Dark Reading, one of the most widely read cybersecurity trade publications, published the applicant’s opinion analysis “Adversaries Don’t Need a Zero-Day, They Read Your Rulebook,” carried with a full author profile identifying him as an independent security researcher. The piece responds to Dark Reading’s own reporting that confidence in autonomous penetration testing has fallen sharply, with the share of organizations willing to rely on it dropping to nine percent in 2026 from twenty-nine percent a year earlier, and argues the decline is not only a story about models that underdeliver. It introduces a failure mode the applicant names cap weaponization: the exploitation of an autonomous system’s governance layer as an attack surface distinct from the technical attack surface of the systems it governs. Once authority ceilings, recovery protocols, and logging rules are written down, certified, and described in a standard or product sheet, they become public information, and a capable adversary can engineer a rhythm around them, short bursts of low-grade probing that drive a system into a safe posture followed by quiet periods during which it recovers slowly, talking a defensive system out of its own authority over weeks without firing a single exploit or touching a line of its code. The applicant situates this alongside Goodhart’s law, lawfare, and specification gaming as one recurring move now appearing in autonomous defense, and prescribes the same principle that anchors his research program: the authority a system acts on must always equal the authority its audit records, computed in one place, enforced in a separate place, and cross-checked at review, so that an adversary manipulating any one layer without the others produces a mismatch the audit can catch. The concrete recommendations, rooting ceiling enforcement in hardware with an independent record, reviewing behavior over long windows rather than single cycles, and red-teaming the governance rather than only the code, restate in operational security terms the hardware-anchored, hash-chained, sensor-trust architecture the applicant develops in his technical work. The piece places the applicant’s authority-governance thesis directly before the professional cybersecurity-defense community.
Analysis published by the Lieber Institute for Law and Warfare at the United States Military Academy (Articles of War)
Lieber Institute, United States Military Academy at West Point · Articles of War · July 24, 2026 · Authored by Burak Oktenli
Articles of War, the professional legal-scholarship forum of the Lieber Institute for Law and Warfare at the United States Military Academy at West Point, published the applicant’s analysis “Whose Decision Was It? Drone Swarms and the Accountability Gap in Ukraine.” The Lieber Institute is the Army’s academic center for the law of armed conflict, and its Articles of War forum is a recognized venue for scholarship on the international law governing military operations; publication there places the applicant’s work in a legal-academic setting distinct from general-interest commentary. The analysis argues that the law of armed conflict already binds the commander who employs an autonomous drone swarm exactly as it binds one who orders an artillery strike, so the accountability difficulty is architectural rather than doctrinal: responsibility under the law depends on a foreseeable human decision, and the way these systems are now built tends to diffuse that decision rather than locate it. Drawing on published work from SIPRI, Article 36, and other institutions, and on the June 2025 Ukrainian drone operation against Russian airbases, it distinguishes three ways a swarm can compose a decision (engagement only when each member’s own threshold is met; success as a property of the group when enough members reach their targets; and a lead element others follow), and shows that each locates human responsibility in a different place, fixed at design time rather than in the engagement. From this it argues that the composition rule is a legal decision as much as an engineering one and should fall within the Article 36 weapons review that Additional Protocol I already requires, that the record-keeping obligation must extend upstream to the integrity of the data a system relies on and not merely the internal consistency of its logs, and that a commander’s legal adviser must understand the composition rule in operational terms because an investigation will ask not how the software worked but who decided and on what basis. The piece corresponds closely to the applicant’s research program, whose sensor-trust and hash-chained assurance-record work addresses the same input-integrity and reconstructable-decision problems in engineering form, and represents the applicant’s first publication in a legal-academic forum. The Lieber Institute maintains a contributor profile page for the applicant on its West Point domain, and lists him with photograph in the Articles of War authors directory alongside the forum’s other contributing authors. The Articles of War forum states that authorship does not indicate affiliation with the Lieber Institute or the United States Military Academy, and the views expressed are the author’s own.
Washington Examiner · Op-Eds section · July 24, 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s fourth piece for the outlet, “Stop calling it ‘Trump’s war.’ America just did the world’s dirty work,” an argument about alliance burden-sharing and the accounting of prevented threats. The piece observes that describing a campaign as one leader’s personal undertaking performs a second and less examined function: it converts a threat that endangered a wide set of states into a single government’s private project, which allows the others to decline participation while retaining the benefit. It sets out where exposure actually sat, noting that the missiles in question reached Europe rather than the American interior and that the affected shipping lanes carried European manufacturing inputs and Asian energy, then contrasts that with the pattern of participation across several allied capitals. The argument gives the contrary evidence a deliberate hearing, recording that thousands of American military flights launched from allied territory during the campaign, that named allies provided real logistical support, that one government reversed an initial refusal, and that sovereign states are entitled to decline a war on their own judgment. Its narrower claim is that declining participation and then assigning the cost elsewhere is a separate matter from principled restraint. The piece also extends the applicant’s earlier preparedness-paradox analysis into this case, observing that costs are countable while the benefit is a program that did not reach completion and an attack that was not launched, so a public that sees only the bill will reasonably conclude the bill bought nothing. It states plainly that accountability for the use of force is not optional, that the conduct of the campaign warrants the investigations members of Congress have sought, and closes on the service members whose deployment does not appear in the polling.
Geopolitical Monitor · Opinion · July 23, 2026 · Authored by Burak Oktenli
Geopolitical Monitor published the applicant’s opinion piece “The Wax Was Melting: AI Speed and the Nuclear Decision,” his fourth original analysis for the outlet. Framed by the Icarus myth, in which the boundary of a safe operating corridor announces itself only after it has been crossed, the piece argues that military artificial intelligence is compressing the resource on which careful decision-making depends, which is time. It observes that AI-enabled targeting has, by the military’s own account, reduced processes once measured in hours or days to seconds, and cites an early strike whose targeting data no longer matched what the building had become, an incident now the subject of an independent investigation and a congressional inquiry, to make a structural point that does not depend on any single case: when a pipeline runs faster than a human can verify its inputs, verification is not merely harder, it is compressed out of existence. The argument then moves to the domain that admits no later correction. Nuclear stability has rested since 1945 on the assumption that time exists to deliberate and to seek confirmation, illustrated by the thirteen days of the Cuban Missile Crisis and by the Soviet officer who in 1983 had minutes in which to decline to report a false warning as real. The claim is precise: the risk is not that an artificial intelligence decides to launch, but that the decision cycle compresses so severely that the human who formally holds launch authority has no genuine opportunity to exercise it, which leaves the appearance of control rather than control itself. Citing the 2022 Nuclear Posture Review and subsequent United States and China discussions affirming human control of nuclear-use decisions, the piece concludes that a human in control is not enough if the human has no time to think, and prescribes building verification back into accelerating decision cycles, treating the preservation of human deliberation time as a condition of survival rather than a constraint on effectiveness. The formal-versus-actual control distinction is the same gap the applicant’s research program addresses in engineering terms.
Washington Examiner · Op-Eds section · July 23, 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s third piece for the outlet, “Binders Won’t Stop Bullets: When Military AI Can’t Say ‘No’,” an analysis of implementation risk in federal artificial-intelligence acquisition policy. The piece examines Section 1513 of the Fiscal Year 2026 National Defense Authorization Act, which directs a framework governing the cybersecurity of acquired artificial intelligence systems and folds it into existing acquisition rules and the Cybersecurity Maturity Model Certification program, and observes that the first status report to Congress was due in mid-June and that the deadline has passed, so the operative question is what the framework underneath the report actually does. It argues that the statute identifies the right risk classes, adversarial tampering, supply chain compromise, data theft, and AI-specific vulnerabilities, because each describes a way to corrupt a system without breaching a firewall, whether by poisoning a sensor feed, spoofing an identification signal, or nudging a model toward a decision its operators never intended, and that the central difficulty is a mismatch of instruments: the compliance tools the statute points to were designed for a different class of technology, so documentation-based certification does not by itself constrain what a fielded model will do at runtime. The argument is the acquisition-policy expression of the applicant’s research program, which addresses sensor-trust and runtime authority governance as engineering problems rather than paperwork problems, and corresponds to the NDAA Section 1513 alignment stated for the applicant’s cyber-defense governance work.
Op-ed published by Global Security Review (National Institute for Deterrence Studies)
Global Security Review · July 23, 2026 · Authored by Burak Oktenli
Global Security Review, a publication of the National Institute for Deterrence Studies, published the applicant’s analysis “Allied Autonomy Is Creating a New Seam in Extended Deterrence,” his first piece for the outlet. The argument applies the applicant’s research thesis directly to alliance policy: allied autonomy has moved into operational formations faster than the frameworks governing who may authorize a machine to act. Drawing on the February 2026 AUKUS Maritime Big Play exercise, in which more than two hundred Australian, British, and American personnel tested roughly thirty next-generation autonomous capabilities and earlier iterations demonstrated cross-national control of one another’s autonomous assets, the piece observes that each ally encodes its own national rules for when a machine may engage, when it must seek human review, and when it must stop. Because those rule sets do not automatically align, a combined formation can contain systems that would act under one national authority profile and hold under another, producing seams that adversaries practiced in sub-threshold pressure are positioned to probe, and creating a risk of escalation inherited at machine speed inside consultation procedures designed for human-speed decisions. The prescription is authority interoperability, built as deliberately as data interoperability was over three decades: published national authority profiles declaring engagement tiers, human-review triggers, and recall mechanisms; shared reversion standards so that any coalition system can be halted through a common tested procedure regardless of flag; and an autonomy annex to extended-deterrence consultations on the model of the December 2024 United States and Japan guidelines. The piece situates this work against Department of Defense Directive 3000.09 and the May 2026 Five Eyes guidance on agentic artificial intelligence, and adds legibility as a third term of deterrence credibility alongside capability and will. It is the applicant’s closest public statement of the authority-governance thesis in alliance-policy form. The publication indexed the article in its permanent subject taxonomy under terms drawn from the argument itself, including authority interoperability, national authority profiles, autonomy annex, reversion standards, and human-machine authority architecture.
Washington Examiner · Op-Eds section · July 22, 2026 · Authored by Burak Oktenli
The Washington Examiner published the applicant’s second piece for the outlet, “The Iran War Began With Biden, Not Trump.” The piece is a deterrence-credibility analysis: it argues that the honest ledger on the 2026 Iran campaign opens on April 13, 2024, when Iran fired more than 300 drones and missiles at a US ally after a one-word American warning and paid no price, and that the pattern (a 2013 red line unenforced, a 2024 barrage answered with “take the win”) taught Tehran to discount American warnings to near zero. It traces the consequence through the IAEA record, a 60 percent enriched-uranium stockpile growing from 274.8 kilograms in February 2025 to 440.9 kilograms by June, roughly nine weapons’ worth of material at about 42 kilograms per weapon, followed by suspension of IAEA cooperation and an inspection blackout, and argues the February 2026 campaign was arithmetic rather than choice. Building on Thomas Schelling’s credibility requirement and a Modern War Institute corollary the applicant cites, the piece notes the final off-ramp offered before force, examines cost tolerance (a campaign held under real strain, at roughly 40 billion dollars, with allied abstention and falling domestic support) as the mechanism by which resolve becomes legible, and frames the lesson explicitly as bipartisan: wars of this kind are compound interest on deterrence lapses. The piece is a companion to the applicant’s Eurasia Review preparedness-paradox analysis published the previous day, which examines how the same campaign will be judged, and is his fifth published commentary in forty-eight hours.
Eurasia Review · July 22, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Who Yields in Orbit? Autonomous Satellites Need a Right-of-Way Rule,” his sixth original analysis for the outlet and his second commentary on space-domain governance. The piece opens with the European Space Agency’s September 2019 collision-avoidance decision, taken with almost no framework, and argues that low Earth orbit is approaching a regime of continuous conjunctions, with the largest constellation alone seeking to grow from twelve thousand satellites toward forty-two thousand. Its central claim is an authority-allocation gap: if the first collision between two autonomous, maneuver-capable satellites occurs under the present non-system, both operators will honestly insist they had priority, and neither will be wrong, because no rule ever established who did. Invoking the maritime precedent, in which the sea drew its rules of the road before traffic became unmanageable, the piece argues that orbit retains that chance and that the window is closing at eight kilometers a second. The argument extends the applicant’s research on authority allocation for autonomous systems into space traffic coordination, and follows one day after his three placements of July 21, 2026.
Eurasia Review · July 21, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant’s opinion piece “Why We Punish the Protection That Works,” his fifth original analysis for the outlet. The piece names the preparedness paradox: successful prevention erases the evidence of its own necessity, leaving publics to weigh visible costs against invisible benefits and to judge protection, after the fact, as overreaction. It traces the pattern from the Y2K remediation effort (estimated at 300 to 600 billion dollars and followed within weeks by a hoax verdict) through ozone-layer recovery and epidemic prevention, frames the underlying oscillation with Max Weber’s distinction between an ethic of conviction and an ethic of responsibility, and applies it to the year’s loudest foreign-policy argument, the US strike on Iran’s nuclear program, where countable costs are debated while the foreclosed catastrophe can enter no exhibit. The prescription is evidentiary rather than partisan: preserve contemporaneous records of the perceived threat, the alternatives considered, and the basis for acting, so that later verdicts weigh the decision actually made under the uncertainty that existed. The argument carries the research program’s central discipline, contemporaneous assurance records for high-stakes decisions, into the domain of public judgment, and is his third published commentary dated July 21, 2026.
Geopolitical Monitor · July 21, 2026 · Authored by Burak Oktenli
Geopolitical Monitor, a Canadian international-intelligence publication (ISSN 1927-3045), published the applicant's opinion piece “America’s Allies Should Test the AI They Plan to Depend On,” his third original analysis for the outlet. The piece examines the June 2026 export-control suspension of Claude Fable 5, in which a US directive suspended access for any foreign national within hours, allied users included, and access was restored roughly nineteen days later only after a Commerce Department review that no allied government performed or observed (a vetted set of American critical-infrastructure organizations regained access on June 26, with controls lifted June 30). From this episode it draws a narrow, structural lesson: allied access to frontier AI is conditional and revocable, and when it is revoked, readmission runs on evidence generated in another capital. The prescription is a standing national test-and-evaluation capability for adopted AI, a funded bench of people, test protocols, and red teams, rather than sovereign frontier models, together with allied pooling through shared test benches, common red-team protocols, and reciprocal recognition of one another's evaluations modeled on shared airworthiness findings, situated against AUKUS Pillar 2 and NATO decision-support adoption. The piece extends the applicant's earlier RealClearMarkets analysis of the same suspension episode into an allied-policy prescription, and is one of four public placements dated July 21, 2026, alongside two Eurasia Review analyses and the Springer journal article.
Eurasia Review · July 21, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant's analysis “The Next Offset Won’t Be a Smarter AI, It Will Be a Governable One.” The piece is the clearest public articulation of the thesis underpinning the applicant's research program: that US military-AI strategy is organized around the wrong question, chasing model capability when the binding constraint is governable authority, meaning who or what is permitted to act, through which interface, and with what oversight. It argues that a model's outputs change nothing until they cross an interface, credential, network, or human action, so capability that cannot be governed is exposure rather than advantage, and it calls for an “authority offset” (permission control, verification, segmentation, and exercised human fallback) in place of a fourth capability offset, on the ground that capable models proliferate fastest through commercial markets, open research, and theft while the institutional and technical capacity for disciplined, verifiable, revocable deployment does not. Drawing on the 2024 CrowdStrike outage, the 2015 Ukrainian grid recovery through preserved manual fallback, and nuclear command-and-control (the Sandia National Laboratories always/never principle, and the June 2026 NSPM-11 revision directing an updated DoD Directive 3000.09), it locates the real risk in integration architecture and validation discipline rather than model intelligence. The argument is the direct conceptual foundation of the applicant's runtime authority-governance work, and this is his fourth original analysis published by Eurasia Review in July 2026.
Washington Examiner · July 20, 2026 · Authored by Burak Oktenli
The Washington Examiner, a national American news and opinion publication, published the applicant's op-ed “We Guarded China’s Oil for Free. Trump Sent Them the Bill.” The piece reads President Trump's July 2026 announcement that the United States will be reimbursed for guarding the Strait of Hormuz as an overdue burden-sharing doctrine rather than a transit-fee mechanism, observing that Asia receives nearly 90 percent of the strait's crude, that China is its largest single customer, and that U.S. energy independence is what makes the reimbursement demand credible. It argues Congress should move the war supplemental together with pledges from Gulf producers and wealthy Asian consumers, citing the 1991 Gulf War cost-recovery precedent (allies made good on 94 percent of pledged contributions) and the still-extant Defense Cooperation Account at 10 U.S.C. 2608. The placement extends the applicant's published commentary into national energy-security and burden-sharing policy at a major American outlet.
Eurasia Review · July 19, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant's analysis “Two Years After CrowdStrike, We Are Still Afraid of the Wrong AI Apocalypse,” timed to the second anniversary of the July 2024 CrowdStrike outage. The piece argues that the prevailing AI-catastrophe scenarios (a universal off-switch, an AI escaping into the power grid, an autonomous nuclear launch) rest on a single confusion: they mistake what a system can compute for what it is permitted to touch. It contends that the scarce resource converting computational capability into physical consequence is authority, gated by credentials, integrations, standing permissions, and physical authentication, rather than intelligence, and that the genuine risk is the steady erosion of manual fallback competence as critical systems are automated. Drawing on the CrowdStrike, 2015 Ukraine grid, and Colonial Pipeline incidents (each bounded and recovered through human manual operation), it prescribes human-approval gates on consequential automated actions, an explicit inventory of what automation is permitted to touch as the real risk surface, and maintained, drilled manual procedures treated as critical infrastructure. The argument is a direct public articulation of the capability-versus-authority premise underlying the applicant's runtime authority-governance research, and is his third original analysis published by Eurasia Review in July 2026.
Geopolitical Monitor (Situation Reports) · July 17, 2026 · Authored by Burak Oktenli · Syndicated by Eurasia Review on July 18, 2026
Geopolitical Monitor published the applicant's analysis “The Reciprocity Inversion: How Ukraine Became the Gulf’s Counter-Drone Lifeline” in its Situation Reports section. The piece traces Ukraine's 2026 deployment of counter-drone specialists across five Gulf partners, hardening by July into ten-year military-technical cooperation agreements with the UAE, Qatar, and Saudi Arabia, and argues the episode marks a reciprocity inversion in alliance architecture: the world's largest recipient of security assistance becoming, in one operationally decisive domain, the supplier of last resort, extending to Pentagon talks to purchase Ukrainian-made interceptor drones and a U.S. license for Ukraine to manufacture Patriot missiles. It grounds the inversion in cost-exchange arithmetic (roughly $35,000 attack drones against $4 million Patriot and $12.7 million THAAD interceptors, versus $800 to $3,000 Ukrainian interceptor drones producible at 2,000 a day) and in combat-derived calibration against a drone threat that iterates roughly every six weeks, which the piece identifies as a non-transferable strategic asset. The analysis extends the applicant's counter-UAS and attritable-systems research thread and is his second Geopolitical Monitor publication. Eurasia Review syndicated the analysis on July 18, 2026, its second syndication of a Geopolitical Monitor piece by the applicant.
Eurasia Review · July 16, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant's analysis “What Six Years of Drone Proliferation Means for the Next Fight.” It traces armed-drone diffusion from the 2020 Nagorno-Karabakh war, where inexpensive strike drones and loitering munitions destroyed tanks, artillery, and air-defense systems, through Ethiopia, Sudan (over 1,000 drone attacks since April 2023), the Sahel, the Democratic Republic of the Congo, and Myanmar, now third globally for drone operations. The piece argues that the economics of attritability (systems far cheaper than the targets they destroy) and rapid mutation (fiber-optic control links defeating radio-frequency jamming, anti-jamming modules migrating into improvised fleets) make the primary threat to any deploying force a cheap, copied system rather than a peer arsenal. Citing U.S. Army doctrine (ATP 3-01.81) that pushes the counter-drone burden to the smallest tactical units, it concludes that low-cost adversary air must be treated as a baseline condition of every deployment, institutionalized through home-station training and standing small-unit battle drills. The analysis complements the applicant's BLADE-CUAS counter-UAS governance work and is his second original analysis published by Eurasia Review in July 2026.
RealClearDefense · July 16, 2026 · Authored by Burak Oktenli
RealClearDefense published the applicant's analysis “Military AI - The Confidence You Cannot See.” It argues that the documented pattern of operators deferring to machine confidence scores (and its mirror image, abandoning a system after one visible error) is conventionally treated as human psychology to be trained away, when it actually marks an unchosen migration of decision authority to machines while records certify that a human remained in charge. The piece explains that a confidence score is a byproduct of pattern matching rather than judgment, and that a bare percentage conceals whether the case at hand lies inside the range the system was validated against. It proposes treating calibration as part of the authority architecture: confidence communicated bound to its validated context, and the system's autonomous authority contracting toward the human when context drifts or calibrated confidence falls below what the stakes demand, an enforceable specification for procurement standards and audit rather than a demand on operator willpower. This is the applicant's third RealClearDefense publication. It was subsequently distributed through the RealClearWire syndication network and republished by outlets including The Ohio Press Network (the second of the applicant's op-eds that outlet has carried) and the KHQ NonStop Local broadcast group.
Eurasia Review · July 14, 2026 · Authored by Burak Oktenli
Eurasia Review published the applicant's analysis "The Governance Gap Hiding in Plain Sight Across Eight Industries." Prompted by the May 2026 Five Eyes joint warning on autonomous AI agents, it argues that eight sectors, from water utilities, aviation, and road transport to maritime, critical infrastructure, agentic finance, and defense, face one structural problem: autonomous systems now act faster than any human can review, permit, or reverse. It contends that regulating model capability and trusting developer guardrails both miss this temporal gap, and proposes a common governance layer at the point of action and outside the model, resting on three properties: permission evaluated by a component the system cannot overrule, human confirmation that scales with the stakes, and tamper-evident audit records, all buildable on existing NIST and EU frameworks. The piece extends the author's cross-domain research on runtime authority governance from defense to civilian and safety-critical sectors.
IT Ops Times (D2 Emerge) · July 13, 2026 · Authored by Burak Oktenli
IT Ops Times published the applicant's analysis “Your AI Agent’s Permission Model Is Built on a Boolean. Irreversible Actions Need More Than That.” It argues that production AI agents inherit a firewall-style allow/deny permission model whose validity rested on reversibility, and that the model breaks once agents take irreversible actions (moving money, disconnecting hosts, shipping configuration) faster than any human can review. Drawing on runtime-enforcement theory (Fred Schneider’s characterization of safety properties, and Jay Ligatti’s edit automata whose corrective power presupposes reversibility), it proposes three departures: graded authority as a continuous runtime value that rises with corroborating evidence and falls with anomalies, conservative failure so authority contracts under uncertainty, and an external interlock placing the final gate for irreversible actions outside the agent’s own compute path and trust domain. The argument maps the author’s runtime authority-governance research directly onto production AI-agent engineering.
RealClearMarkets published the applicant's op-ed "The Cruel Economics of the 19-Day Anthropic Ban," an economic analysis of the June 2026 Commerce Department order restricting access to Anthropic's two most capable AI models. The piece argues that the restriction functioned as an unintended experiment in the economics of technology restriction: the denial was brief because near-substitute models exist, its costs fell on compliant banks, universities, and cyber-defenders rather than the intended target, and unpredictable access gives enterprises a durable incentive to diversify away from American AI providers. It recommends that future controls be designed at the level of specific actions against specific targets rather than an entire model's availability. The argument extends the author's research on the governance of authority in AI-enabled systems into export-control economics.
Op-ed published by Geopolitical Monitor, syndicated by Eurasia Review
Geopolitical Monitor · July 2026 · Syndicated by Eurasia Review on July 13, 2026
Geopolitical Monitor, an open-source intelligence and geopolitical risk analysis outlet, published the applicant's op-ed "Who Fires the Shot? Closing the Authority Gap in Indo-Pacific Autonomous Warfare," subsequently syndicated by Eurasia Review. The piece argues that Indo-Pacific coalitions, including AUKUS Pillar 2 and Quad-composition maritime operations, are fielding autonomous systems faster than members can agree on who may authorize them to act, and proposes a Coalition Authority Interoperability Protocol: computable national authority profiles, dependency caps, cryptographic multi-signature rules, and an auditable accountability layer, under which aggregate coalition authority never exceeds what its most conservative participating member permits. The argument applies the author's research on runtime authority governance to coalition interoperability. On July 16, 2026, Indian Strategic Studies, a strategic-affairs portal curated by Maj Gen P K Mallick, VSM (Retd), formerly Senior Directing Staff (Army) at India's National Defence College, featured the piece with a curated summary and an editorial comment engaging the proposal from an Indian strategic-autonomy perspective, the second of the applicant's op-eds that portal has carried.
RealClearDefense, a national-security commentary outlet, published the applicant's op-ed "The One Clause in Trump's AI Memo That Could Encumber the Off-Switch." It examines National Security Presidential Memorandum 11 (June 5, 2026) and warns that its "Reliability and Sovereign Control" mandate, intended to stop commercial AI vendors from disabling fielded military systems, could, if implemented without care, also lock out the human operator's ability to terminate a malfunctioning autonomous system, which is the core requirement of appropriate human judgment under DoD Directive 3000.09. It proposes that the mandated 90-day revision of Directive 3000.09 add an explicit operator-override exemption distinguishing authenticated human command interrupts, hardware-rooted termination, recovery fail-safes, and latency-bounded deliberation windows from the external vendor modifications the memorandum prohibits, and it calls for congressional oversight through the FY27 National Defense Authorization Act, including mapping the revised standards to the NIST AI Risk Management Framework and testing termination pathways in denied environments. The argument extends the author's research on runtime authority governance for autonomous and AI-enabled systems.
The Defense Post · June 30, 2026 · Authored by Burak Oktenli, listed as an author at The Defense Post
The Defense Post, a defense news and commentary outlet, published the applicant's commentary "When the Machine Decides and the Human Signs." It argues that human-on-the-loop oversight of AI-enabled targeting, as currently practiced, does not hold at high operational tempo: once a targeting pipeline produces recommendations faster than a commander can independently verify them, the effective decision shifts into the software while authority remains nominally with the human. Drawing on the 2026 Operation Epic Fury campaign as a case study, it argues for engineering oversight into the system rather than treating human approval as a safeguard the human cannot provide, and proposes automated checks on the currency of targeting intelligence, automatic pauses inside the software when anomalies appear, operational tempo tied to verification capacity, an updated U.S. Department of Defense Directive 3000.09 for mass-engagement scenarios, and congressional reporting on the review time commanders actually have. The argument extends the author's research on runtime authority governance for autonomous and AI-enabled systems.
Op-ed published by the Modern War Institute at West Point
Modern War Institute at West Point · June 26, 2026 · Authored by Burak Oktenli, listed as an author at the Modern War Institute
The Modern War Institute at West Point, a research center at the U.S. Military Academy, published the applicant's op-ed "When the Machine Acts First: Closing the Authority Gap on the Autonomous Battlefield." It argues that the collapsing distance between a machine's reasoning and its action opens an authority gap between the authority a commander holds and the authority a fielded autonomous system exercises before anyone can intervene, and proposes runtime authority governance: enforcing permission outside the model, pausing before consequence and failing toward inaction, and tying autonomy to the criticality of the target. The argument applies the author's research on runtime authority governance for autonomous and AI-enabled systems.
Selected twice for UPI's Korea Regional Review Director's Corner
United Press International (UPI), Korea Regional Review · Director's Corner, National Security News & Commentary · June 26 and August 19, 2026
United Press International selected the applicant's work twice for the Korea Regional Review Director's Corner, an edited national-security review curated by the publication's Executive Director in which each selected item carries an accompanying editorial commentary. In June the review carried his Modern War Institute op-ed on closing the authority gap on the autonomous battlefield, alongside analyses from Foreign Affairs, The Wall Street Journal, the Financial Times, War on the Rocks, and Small Wars Journal, with the editor's commentary engaging the argument directly and framing the central challenge as one of command authority rather than technology, noting that autonomous systems must operate under enforceable human command so that speed does not outrun accountability and the law of armed conflict. In August the review selected his second Modern War Institute analysis, on resilience and the governance of autonomous systems, on the day it was published, placing it fifteenth among eighteen items alongside The Economist, The Telegraph, The Washington Post, Reuters, CNN, National Review, Foreign Affairs, War on the Rocks, and Small Wars Journal. The accompanying commentary did not summarise the piece but adopted and extended its recommendation, stating that resilience cannot mean automatic restoration of lethal authority, that adversaries will attack the decision architecture itself by manipulating sensors and communications to influence when autonomous systems regain permission to engage, and that autonomous weapons must therefore be designed, tested and red-teamed for adversarial manipulation of their decision processes rather than only for their ability to survive jamming. A curator returning to an author's work eight weeks later, and converting his proposal into a stated requirement, is a stronger indicator than a single selection, and the same-day timing shows the analysis was read on publication.
Featured in the Parliamentary Observatory on AI of the Parliamentary Assembly of the Mediterranean
Centre for Global Studies, Parliamentary Assembly of the Mediterranean · Weekly Digest on AI and Emerging Technologies · June 23, 2026
The Centre for Global Studies of the Parliamentary Assembly of the Mediterranean, an international inter-parliamentary institution, selected the applicant's RUSI commentary "The Hour That Worked: What Midnight Hammer Teaches About AI-Era Command" for its Parliamentary Observatory on AI weekly digest. The commentary was summarized in the digest's Defense, Intelligence, and Warfare section alongside analyses from Defense One, Defense News, and Breaking Defense, carrying the applicant's argument that command authority designed into a mission in advance offers a model of disciplined command for an era in which machines compute faster than humans can deliberate.
Op-ed published by The Space Review (in association with SpaceNews)
The Space Review · June 22, 2026 · Authored by Burak Oktenli
The Space Review, a leading space-policy publication issued in association with SpaceNews, published the applicant's op-ed "Space Autonomy Needs an Authority Architecture Before 2027." It argues that light-time delay and a contested orbital domain make autonomy a physical necessity, and that the Space Force must embed an authority architecture into doctrine and hardware before 2027, defining what a machine may decide, the legal basis, and a cryptographically secured deferred-accountability record the chain of command can audit. It references the AUTHREX Space Vehicle framework.
Guest commentary published by RUSI (Royal United Services Institute)
Royal United Services Institute (RUSI) · June 16, 2026 · Authored by Burak Oktenli, listed as a Guest Contributor at RUSI
RUSI, one of the world's oldest defense and security institutes, published the applicant's guest commentary "The Hour That Worked: What Midnight Hammer Teaches About AI-Era Command." The piece argues that the authority to apply force, and the validation of the data behind it, should be established at an inspectable point before deployment rather than improvised at machine speed, contrasting Operation Midnight Hammer with the AI-accelerated Operation Epic Fury and drawing implications for NATO interoperability and national "red card" authority. This is authored analysis placed at a leading international defense institution, directly aligned with the applicant's research on authority governance for autonomous and AI-enabled systems. Read on RUSI. The commentary was also republished at MERO (July 18, 2026). Shared by RUSI's official social channels (June 16, 2026): view post.
Published Op-EdJune 2026
Published commentary in RealClearDefense
RealClearDefense · June 4, 2026 · Authored by Burak Oktenli
Military AI (militaryai.ai) · June 12, 2026 · Authored by Burak Oktenli
Military AI, a defense-AI commentary publication, published the applicant's article "When an AI Agent Fires First, Who Answers for It?", which argues that traceable human authority must be a design requirement for agentic military systems before they are fielded. The piece engages the Five Eyes "Careful Adoption of Agentic AI Services" guidance (CISA, NSA, and partners, 2026). This is authored commentary placed through an editor at a recognized defense outlet. Read on Military AI.
Academic CitationMay 2026
Cited in "The Cascade Protocol"
Joey Hernandez · Pomona College, Department of Economics · ISBN 979-8195946579
A published academic book on cascading AI failures in military and strategic decision-making cited the AI-Enabled Military Decision-Making preprint as Reference #36 of 36. The book sits the work alongside the U.S. Department of War AI Strategy (January 2026), King's College London, US Army War College, Harvard Law School PILAC, Lieber Institute West Point, Carnegie Endowment for International Peace, Atlantic Council, and NDU Press. Independent third-party adoption of the applicant's research within four months of publication, with full ISBN registration and DOI minting on Zenodo.
Work Cited: Oktenli, B. (2026). "AI-Enabled Military Decision-Making and Escalation Risk: Human-Machine Command Authority in Great Power Competition." SSRN ID 6082847.
LexAI Journal, University of Toronto Law and Ethics of Artificial Intelligence Students' Association
A multi-author academic article published by the University of Toronto's Law and Ethics of Artificial Intelligence Students' Association cited the ERAM framework paper as Reference #4. The article examines decision compression in AI-enabled military command, directly referencing the ERAM framework's analysis of how automated decision-support systems destabilize human oversight in military operations.
Work Cited: Oktenli, B. (2026). "Decision Compression and Escalation Risk in AI-Enabled Military Command and Control: An Operational Analysis of the ERAM Framework." SSRN.
A bilingual (English/Spanish) strategic paper addressed to Ministries of Defense, Armed Forces, and state institutions across multiple countries cited the LinkedIn article as a strategic analysis source, listed alongside official U.S. government sources including the Department of Defense (DoD), Defense Logistics Agency (DLA), U.S. Army DEVCOM Soldier Center, and USDA.
Work Cited: Oktenli, B. "Why Freeze-Dried Food Is Becoming a Strategic Asset in Defense, Emergency Preparedness, and National Security." LinkedIn Pulse.
Cited in "Cognition, Agency, and Authority: A Taxonomy of Advanced AI Systems"
Lt Gen (Dr) R S Panwar (Indian Army, Retired) · Doctorate in Computer Science, Indian Institute of Technology Bombay · Academia.edu preprint
A defense-technology preprint by Lt Gen (Dr) R S Panwar, a retired Indian Army officer and computer-science doctorate from IIT Bombay, cites the applicant's working paper on AI-enabled military decision-making and escalation risk (endnote 39) in support of its argument that cognitively sophisticated but non-agentic AI systems carry under-recognized strategic risk. The citing work develops a six-class taxonomy of advanced AI systems organized around authority delegation and command responsibility, themes directly adjacent to the applicant's research on human-machine command authority.
Work Cited: Oktenli, B. (2026). "AI-Enabled Military Decision-Making and Escalation Risk: Human-Machine Command Authority in Great Power Competition." SSRN ID 6082847.
SSRN Official Community, Facebook (Elsevier / Social Science Research Network)
The official SSRN Community page, operated by Elsevier's Social Science Research Network, one of the world's largest open-access academic repositories, selected and featured the submarine surface signatures paper on their social media platform, amplifying its visibility to SSRN's global research audience.
Work Featured: Oktenli, B. "Physics-Based Analysis of Submarine Surface Signatures: Hydrodynamic Mechanisms and Detection Frameworks." SSRN.
SSRN Community
Official SSRN / Elsevier · Facebook
Physics-Based Analysis of Submarine Surface Signatures: Hydrodynamic Mechanisms and Detection Frameworks
Featured by the official SSRN Community page, operated by Elsevier's Social Science Research Network, which amplified this research to their global academic audience.
Wargaming Weekly, a defense and military simulation community account, independently shared the LinkedIn article on AI-driven simulation in U.S. defense testing with the quote: "By injecting AI agents, massive parallelism, and data-driven analysis into simulations, the military can explore far more scenarios, catch hidden flaws, and train personnel more effectively."
Work Shared: Oktenli, B. "AI-Driven Simulation: Transforming US Defense Testing." LinkedIn Pulse.
Authority & Architecture: Publishing Imprint of Record
Authority & Architecture Imprint · Established 2026
Ten-volume technical reference series across three book trilogies, distributed via Amazon and IngramSpark. All volumes assigned ISBNs registered through Bowker. Library of Congress Control Numbers assigned to each series: The Authority Equation 2026912260, Autonomous Authority 2026922204, and The Authority Discipline 2026922201.
Second peer-reviewed journal article published, in a second discipline
International Journal of Contemporary Security Studies · Faculty of Security Studies, University of Belgrade · Vol. 2, No. 2 (2026) · Published online First August 24, 2026
The International Journal of Contemporary Security Studies, a double-blind peer-reviewed open-access journal published by the Faculty of Security Studies at the University of Belgrade, published the applicant’s article “The Ingratitude Paradox: A Causal Mechanism of Democratic Discounting of Successful Protection.” The article appears at pages 55 to 68 of the issue, carries the journal’s review-article designation, records submission on 18 June 2026, revision on 15 July and acceptance on 25 July, and is published under the applicant’s Georgetown University affiliation; its digital object identifier is to be registered when the issue is finalised in December 2026. This is his second article in a peer-reviewed journal and the first outside engineering, following the sensor-attestation protocol published in Springer’s Journal of Hardware and Systems Security in July. The article is a theory-building and mechanism-specification study rather than an empirical test, and it says so explicitly. It specifies a five-stage causal mechanism: a threat generates demand for protection; the protective action imposes visible procedural costs; the action succeeds and eliminates the threat; the eliminated threat becomes perceptually invisible; and the visible cost is then weighed against the now-invisible benefit, producing a verdict that the protection was unnecessary or disproportionate. Its defining property is endogeneity, since the threat-eliminating step is also the invisibility-generating step, which makes the tendency intrinsic to protective success rather than a contingent failure of communication. The argument is grounded in the securitization literature and the availability-heuristic tradition in risk perception, is differentiated systematically from adjacent concepts, is shown to be symmetric with respect to warrant and therefore explanatory rather than justificatory, is illustrated through a documented positive case traced across all five stages, and is bounded by scope conditions established through a contrastive case in which the mechanism did not fire. The article states a falsifiable prediction relating the depth of the discounting verdict to the completeness of threat-elimination, and identifies that prediction as untested with its systematic evaluation named as the natural next step. The publication demonstrates that the applicant’s central concern, how institutions evaluate protective systems whose benefits are not directly observable, generalises beyond the engineering domain into security theory, and it converts an argument he had previously made in the commentary press into a specified and falsifiable scholarly contribution.
Accepted as a technical program volunteer for IEEE ICC 2027
IEEE International Conference on Communications 2027 · Washington, DC · Technical Program and Workshops
Following an offer to contribute, the organizing leadership of IEEE ICC 2027 accepted the applicant as a volunteer in the technical program and workshops area and scheduled him into the conference’s in-person organizing meeting in September 2026. IEEE ICC is one of the two flagship conferences of the IEEE Communications Society, drawing close to two thousand attendees from more than seventy countries, and the 2027 edition is scheduled for Washington, DC in late May 2027. The technical program and workshops function covers paper review, workshop organization, and related program work, so the role applies the applicant’s referee-level familiarity with formal verification, systems security, and autonomous systems to the selection of work presented at a flagship IEEE venue. The specific committee assignment is settled at the organizing meeting; recorded here at the level the acceptance establishes.
Invited peer reviewer for Connections: The Quarterly Journal
Partnership for Peace Consortium of Defense Academies and Security Studies Institutes · Invitation accepted August 2026 · Review due August 27, 2026
The managing editor of Connections: The Quarterly Journal, the peer-reviewed journal of the Partnership for Peace Consortium of Defense Academies and Security Studies Institutes, invited the applicant to review a submitted article described as falling within his area of subject-matter expertise, and he accepted with a review due at the end of August. This is the third journal to engage him as a reviewer within a single month, following an acknowledged reviewer offer at an Elsevier journal and an assigned open review for a Taylor & Francis platform. Reviewing for a defense-education consortium journal places his assessment inside the professional literature of the field his research addresses, and the invitation was unsolicited. In accepting, the applicant recorded that he has no connection to the author, no prior knowledge of the manuscript, and no competing interest, and undertook to disclose immediately should the author’s identity become known to him. Details of the manuscript under review are withheld here consistent with reviewer confidentiality.
Professional ServiceAugust 2026
Published peer reviewer for F1000Research (Taylor & Francis)
F1000Research · Review published August 11, 2026 · Report DOI 10.5256/f1000research.202374.r507419 · Named in the public reviewer roster on the platform’s AI and Machine Learning gateway
The applicant served as an invited peer reviewer for F1000Research, the open research publishing platform of the Taylor & Francis Group, and his review is now published in full under his own name alongside the article it assesses. F1000Research operates a fully open peer-review model in which the reviewer’s identity, complete report, and approval decision are published and independently citable; the report carries its own digital object identifier. The article reviewed is a comparative study of algorithmic targeting systems and their compliance with international humanitarian law, and the applicant returned a decision of approved with reservations. He is listed by name among the five peer reviewers displayed on the article record and on the platform’s artificial-intelligence and machine-learning gateway, where the article now stands at its third version with all five reviewers returning approved with reservations. That roster is a public, permanent and independently checkable record of the assignment, separate from the report itself. His report sets out six major comments in a structured form, each stating the issue, why it matters, the revision required, and the evidence needed to close it. Its substantive findings include that assigning numerical scores on a linear scale to inherently contextual legal principles conveys an appearance of methodological precision the underlying evidence cannot support and should be replaced with a qualitative classification; that a casualty extrapolation derived by applying an unverified error rate to an unverified target count gives speculative arithmetic greater evidentiary weight than its sources permit; that a comparison drawing on markedly asymmetric evidence should pair each assessment with an explicit evidentiary-confidence designation rather than presenting all scores as equally supported; and three sourcing corrections, namely an analytical framework attributed to a publication that is a book review rather than the origin of that framework, a definition of meaningful human control mis-sourced to a legal provision that in fact governs the review of new weapons, and a citation treating a publication platform as though it were an individual author. The report closes with an explicit statement of what the applicant was unable to assess, namely classified or non-public information on system architectures, training data, and operational performance, and records that his assessment is therefore confined to the quality and interpretation of the publicly available evidence cited. The published expertise attached to the report is military AI applications, autonomous weapon systems, international humanitarian law, operational targeting architecture, and defense technologies. This is independently verifiable evidence of the applicant’s standing as a reviewer of scholarly work in his field, and it is the second of three journal reviewer engagements accepted within a single month.
Offered to peer review for the Journal of Responsible Technology
Journal of Responsible Technology (Elsevier, on behalf of ORBIT); ISSN 2666-6596
Offered to serve as a peer reviewer for the Journal of Responsible Technology; the Editor-in-Chief acknowledged the offer and circulated it to the journal's Associate Editors (June 2026).
