The Sovereignty Stack visual reference

Operating system / Civic nervous system

The Sovereignty Stack

Local-first civic tools, data dignity, First Nations data sovereignty and resilient community nodes.

Twinkle 12 / Brainstorming scenario

Data breaches: custody, consent and a way out

Give people and communities control over where sensitive information sits, who can use it and how to leave a provider. Collect less, separate permissions and test recovery before calling a service secure.

A personal sovereignty profile would state who may use your information, for what purpose and how you can withdraw permission. Sharing a useful answer need not mean handing over the whole record.

Explore the connected work

How it could work

  1. Each service publishes a short custody sheet covering data collected, purpose, retention, access and subcontractors.
  2. Test export, deletion, lost-key recovery and a change of provider with ordinary users.
  3. Assign a named incident owner and a supported response pathway, including corrections and practical help after misuse.

Everyday example

A person can move their records to another service and revoke an old permission without losing access to essential help.

Who could act and how it could be funded

Public agencies and service providers deliver the controls; privacy regulation and sector oversight involve relevant national and state bodies. Procurement budgets include security, migration, support and incident response.

Fair-go safeguards

Australian hosting alone is not proof of safety. Essential help cannot require unrelated data sharing. Cultural knowledge remains under its custodians' authority; publish audit results without exposing records.

What would show progress

Data collected; successful exits; recovery time; misuse resolved; permissions understood by users.

Twinkle 14 / Brainstorming scenario

Triple Zero: emergency communication that survives an outage

Require an independently tested emergency-communications continuity plan spanning carriers, dispatch and local services. Community fallback links complement the emergency network and must be tested before people rely on them.

A working emergency call needs the whole chain, not merely phone signal. The missing-middle and local-network ideas offer possible resilience components to examine with professional emergency systems.

Explore the connected work

How it could work

  1. Map end-to-end failure points, including power, routing, congestion, accessibility and the dispatch handover.
  2. Run supervised cross-carrier and local fallback exercises with emergency agencies; publish non-sensitive failures and corrective work.
  3. Make outage notices, escalation responsibilities and public incident reviews part of the service contract.

Everyday example

During a town-wide outage, responders have a tested fallback and residents receive clear, accessible advice instead of guessing which app might work.

Who could act and how it could be funded

National telecommunications authorities and carriers must partner with state emergency services; councils support local readiness. Fund backup power, redundancy, exercises and maintenance, with each party's responsibility explicit.

Fair-go safeguards

A neighbourhood mesh is not an established Triple Zero service. No unsupervised test calls to emergency lines. Accessibility and remote communities are included in professional testing.

What would show progress

Successful end-to-end tests; restoration time; unresolved failure points; accessible outage advice; corrections completed.

Full room: ideas, tools and sources

Delivery roles: Australia's three levels of government · Victoria's parliamentary responsibilities.

What this page does

The Sovereignty Stack

The Sovereignty Stack is the technical answer to a political problem: people will not trust a Cyber-Republic if it feels like a surveillance upgrade.

This page explains why local-first, privacy-by-design systems matter before democracy gets more digital, and why public assets need public memory.

Fractal governance

L0 individual/home vaultsYour Aura, living memoir, home data, sensor data and civic preferences stay local-first, encrypted, revocable and under your control inside the private node.
L1 neighbourhood meshPeople can share narrow, consented signals with nearby peers: blocked drains, heat stress, soil moisture, food surplus, disaster needs.
L2 public-asset layerRegions can track roads, energy, water, minerals, ports, insurance pools and community wealth funds without exposing private household data.

L3 national sensorium

Public insight without public exposure.

The national layer should not be a giant database of everyone. It should be a privacy-preserving simulation layer: aggregated civic signals, legal constraints, infrastructure models and climate-risk maps that help Australia plan without turning citizens into raw material.

Adaptive sovereignty

I own my personal data. We govern our collective data. That is the privacy principle underneath the stack. Self-sovereign identity protects the individual at L0. Indigenous Data Sovereignty protects collective cultural, land, health and heritage data at L2/L3. An individual node should not be able to leak data marked collective without a verifiable approval from the relevant Nation or governance body.

Public asset memory

The first national use case is not futuristic. It is boring on purpose: a public register of long leases, toll roads, public-private contracts, asset sales, renegotiation windows and community benefit tests. Australia should know when a public asset is serving the public, when a deal has outlived its purpose, and what lawful options exist before the next generation is locked in.

Local government use case

For councils, the stack turns static asset registers into living, consent-based digital twins. Residents can report conditions and contribute useful local knowledge; councils receive trustworthy summaries for roads, drains, parks, libraries, heat risk, disaster kiosks and community services; privacy guardrails stop civic participation becoming surveillance.

Musicverse consent layer

A Protopian Gambit belongs here as a consent signal, not a slogan: no body as barcode, no citizen as feedstock, no digital twin without permission, context and an off switch.

Privacy compass

Every civic data question should pass four tests: what stays with the person, what can be shared locally, what must be governed collectively, and what the national simulator is never allowed to know.

Connected project: Aura Direct Hardware

A project exploring local compute and digital sovereignty, connected with community control of infrastructure.

Australian hosting is only one question

Ask who operates the service, which jurisdictions apply, who controls encryption keys, what purpose is allowed, how long data and backups remain, which subcontractors can access them, and how deletion, export and exit work. OAIC’s APP 8 guidance describes cross-border obligations and exceptions; geography alone does not answer them.

Keep sensitive work on-deviceReduce external disclosure, with limits on capacity and a need for safe backups and recovery.
Use a community or institutional nodeShare serious capability and local skills, while funding administration, access control and independent oversight.
Choose an accountable external serviceGain scale and specialist operations, with enforceable purpose limits, subcontractor visibility and a tested exit plan.

First Nations collective authority must be addressed alongside individual privacy. NIAA’s Framework for Governance of Indigenous Data and Ready S.E.T.’s separate permission operations offer practical questions for a local agreement. Ask a school, council or health provider to publish a plain-language custody and exit sheet; do not put private records in a public submission.

From the original Twinkle seeds

Earlier clip briefs and proposals are kept here alongside the current evidence and options above. These are exploratory ideas, not adopted policy.

Twinkle 12 - earlier seed and related proposals

A breach-fatigue rant about identity documents that have been leaked more times than they've been renewed, then a hard turn into holding your own data and lending it out on your terms.

Open seed

The everyday gripe

Straight to camera, reading the latest "we take your privacy seriously" email aloud: telco breach, health fund breach, whoever's next breach. You never chose to give half these companies your licence, and they never needed to keep it. The trapdoor is the sovereignty layer: you hold your own data, you lend the minimum out with consent, and hoarding copies stops being the default business model. This seed is open: film your own breach-email dramatic reading.

Description

BaitNearly everyone in the country has had identity data leaked at least once, usually by a company they could not avoid dealing with.
SwitchThe fix is not begging hoarders to build taller fences around copies they never needed. It is ending the hoarding.
SystemThe sovereignty stack: consent, identity and privacy layers where the citizen is the source of truth and discloses the minimum, temporarily, on their own terms.

The one-breath drop

Said before the flush

"You hold your own data and lend it out on your terms. Companies that don't need it don't get it." Second breath lives in the room.

Back to Twinkle 12

Twinkle 14 - earlier seed and related proposals

A dead-phone rant about outages that took the most important number in the country down with them, then a hard turn into local fallbacks that no single company can drop.

Open seed

The everyday gripe

Straight to camera: the network fell over, hundreds of people could not raise Triple Zero, and the scam texts pretending to be the telco arrived before the apology did. One company's bad night should never be the country's emergency plan. The trapdoor is communications that degrade gracefully: local mesh, community nodes, an emergency lane that works when the tower doesn't. This seed is open: film your own full-bars-no-service moment.

Description

BaitEveryone has now lived through at least one big outage, and everyone knows someone who needed a phone to work that night.
SwitchFrom "which telco do I punish" to "why does the emergency system have a single point of failure at all".
SystemThe sovereignty stack and civic surges: local-first infrastructure, neighbourhood nodes and practical mobilisation that keeps working offline.

The one-breath drop

Said before the flush

"Emergency calls get a local fallback that no single company can drop. Mesh first, monopoly never." Second breath lives in the room.

Back to Twinkle 14