Command Structure
Overview
The Tidemaker weapon employs a rigid dual-authorization command structure designed to prevent any single individual from initiating a launch, regardless of rank or clearance. This two-key architecture is not a procedural guideline but a hard-coded firmware requirement — one that physically locks the system down if a unilateral authorization attempt is detected. The lockdown propagates across all Tidemaker-capable platforms and can only be lifted through an external reset verified by Terran Mining Consortium headquarters.
The architecture’s explicit purpose is internal safeguarding. Its designers anticipated that the most credible threat of unauthorized use would come not from external enemies but from a rogue executive, a compromised station director, or an overreaching Security Directorate officer. The system therefore requires two pre-registered authorization holders to issue independent, concurrent firing commands within a synchronized window. If either principal is unavailable, incapacitated, or dead, the weapon cannot fire.
Details
The Two-Key Firing Sequence
The Tidemaker launch procedure divides into three phases: arming, targeting confirmation, and firing. The first two phases require standard command-level clearance and can be executed by any authorized weapons officer. The firing phase engages the dual-authorization lock.
To issue a firing command, each authorization holder must complete a three-part authentication using a personally bound authority token. This token comprises a simultaneous biometric handshake — a live retina scan and palm-vein pattern match that requires a detectable pulse and neural response — a hardware key in the form of a quantum-encrypted fob generating one-time authentication strings from an internal atomic clock, and a cognitive passphrase, a spoken sequence of at least twelve syllables analyzed for stress patterns, cadence, and subvocal micro-tremors unique to the authorized voice. Recorded samples, cloned tissue, or speech produced under duress will register as anomalies and trigger silent alerts.
Both holders must complete all three authentication steps within a four-second synchronization window. If either authentication falls outside this window, the command is rejected, both stations lock out for a minimum of six hours, and automatic notifications are dispatched to the TMC Executive Board, the Security Directorate, and the Compliance Termination Office.
Authorization Holders
As of 2185, the two registered authorization holders are Jax Delroy and an operator known as Sable. Delroy serves as Team Leader of Aegis Sword Team JAX-1. His authority token resides in a shielded subdermal implant between his right thumb and index finger, which transmits the confirmation seed via near-field induction. The implant is tamper-protected; any surgical extraction attempt destroys the seed and dispatches an alert. His cognitive passphrase was calibrated under neurological monitoring to account for combat stress, fatigue, and moderate injury.
Sable’s full identity and organizational affiliation remain compartmentalized. Available records identify her as a high-clearance female operator with extensive technical knowledge of the weapon’s underlying resonance technology. Her confirmation seed is carried externally in a shielded pendant rather than implanted.
The Tertiary Vault
Beneath the dual-authorization layer lies an additional cryptographic verification system. This tertiary vault confirms not only the identity of the authorizing principals but also their location and status. It requires geospatial confirmation that both holders are present at pre-registered firing stations, continuity verification that their biometrics have appeared in TMC monitoring systems within the preceding 72 hours, and dual-presence confirmation via internal sensors that both individuals are in the same room, at separate consoles, within line of sight. Remote authorization is impossible. If either principal has been absent from all monitoring for more than 72 hours, their authorization is automatically suspended.
Security Infrastructure
The Tidemaker command network operates on a physically separate fiber-optic backbone isolated from all other TMC communication systems. It connects exclusively to registered firing stations, the Ceres Station authentication server, and a hardened backup node in the Pallas Deep Administrative Zone. No external access is possible; any interaction requires physical presence at a registered terminal. Authentication logs are stored in triplicate across the local station, Ceres, and a sealed write-once archive on Pallas Station, all of which are tamper-protected.
Limitations
The command structure contains no override mechanism. No executive, director, or board can bypass the dual-authorization requirement. Authorization tokens are bound to individuals, not titles, and cannot be transferred, delegated, or reassigned. If one holder is killed or incapacitated, the weapon becomes unfireable for a minimum of 30 days, during which a replacement must be manufactured, registered, and attuned — a process requiring physical presence at Ceres Station and unanimous Executive Board approval. The 30-day window is firmware-hard-coded and cannot be accelerated.
Significance
The dual-authorization architecture shapes the strategic realities surrounding the Tidemaker. It transforms the weapon from a tool any powerful individual might seize into one that demands explicit, simultaneous consent from two specific people. Neither holder can claim they were following orders; both must actively choose to fire within the same four-second window. This design reflects the philosophy embedded in the original engineering documentation: strategic deterrence requires strategic consensus.
The system’s requirement for physical co-location of both authorization holders at a registered firing station creates a predictable logistical footprint. The 30-day replacement window means that removing a single authorization holder from the equation temporarily neutralizes the weapon. The architecture’s inability to be bypassed through hacking, coercion, or delegation makes it extraordinarily resistant to exploitation — exactly as its designers intended.
A fragmentary personal log from Sable, recovered from TMC Relay Station K-7, captures the architecture’s deeper implication with a quote she attributes to her grandmother: “A lock that takes two keys doesn’t protect the thing — it protects the people from each other.”