Anti-Drone Systems With Governed Probing
by Nick Clark | Published April 25, 2026
Counter-UAS deployments operate under a layered authority regime — 10 USC § 130i for DoD, 6 USC § 124n for DHS and DOJ, 49 USC § 44810 for FAA-coordinated test sites, FAA UAS mitigation guidance for civil airspace, the DoD Joint C-sUAS Office (JCO) baseline, the Replicator C-sUAS initiative, NDAA 2024 § 1098 on covered C-sUAS authorities, and ISO/IEC 21384-3 obligations on detect/identify/track/defeat — that current detect-then-respond architectures cannot evidence. Counter-UAS systems need governed active probing under disclosure-cost admissibility, with every probe weighed structurally against authority, mission policy, and adversarial-awareness state rather than emitted reflexively. The disruption-modeling primitive provides the architectural layer above radar, optical, and RF detection that the legal and operational environment now requires.
Regulatory Framework
The U.S. counter-UAS authority regime is statutory and granular. 10 USC § 130i grants the Secretary of Defense authority to take action against unmanned aircraft systems that pose a threat to covered facilities or assets, with specific authorized actions including detection, identification, monitoring, tracking, warning, disruption of control, seizure, and use of reasonable force. 6 USC § 124n grants analogous, narrower authority to the Secretaries of Homeland Security and Justice for covered facilities and missions. 49 USC § 44810 establishes FAA-coordinated counter-UAS test ranges and the framework for evaluating mitigation technologies in the civil airspace context. NDAA 2024 § 1098 and adjacent provisions further refine covered C-sUAS authorities and reporting obligations. FAA UAS mitigation guidance overlays the civil-airspace expectations on any deployment that interacts with the National Airspace System.
Operationally, the DoD Joint C-sUAS Office (JCO) defines the baseline architecture and approved-systems list; the Replicator C-sUAS initiative drives accelerated fielding of counter-small-UAS capability at scale; service-specific doctrine bounds rules of engagement and sensor employment. International standards add another layer: ISO/IEC 21384-3 specifies obligations on the detect, identify, track, and defeat chain, including requirements on the evidentiary record. AUVSI ATAK-CIV and analogous mission-system frameworks govern how counter-UAS observations are shared across operators, while MIL-STD-2525 governs the symbology by which threats are represented in the common operational picture. The composite is an authority and operational regime that presumes counter-UAS systems can demonstrate, per probe and per response, the legal and operational basis for the action taken.
Architectural Requirement
What this regime requires is not better detection sensitivity but an architectural mechanism that governs every active probe and every response option under composite admissibility — statutory authority, mission policy, spectrum licensing, ROE, adversarial-awareness state, and information value. The mechanism must be observable for ISO/IEC 21384-3 detect/identify/track/defeat evidence, accountable to the specific statutory authority being exercised (10 USC § 130i versus 6 USC § 124n versus 49 USC § 44810), interoperable with the JCO baseline and AUVSI ATAK-CIV mission systems, and capable of representing graduated probe behavior — not a binary emit/silent toggle but a credentialed evaluation per probe.
The architecture must be the layer above the detection modalities — radar, RF, optical, acoustic — and above the response options — kinetic intercept, electronic countermeasure, soft-kill capture, hard-kill destruction. Vendor stacks (Anduril Sentry-class, Dedrone, DroneShield, Black Sage, Fortem, and many others) supply the modalities; what they do not supply is the governance substrate above them.
Why Procedural Compliance Fails
The dominant counter-UAS architecture pattern is detect-then-respond. Detection systems run continuously, often probing actively — radar emissions on operational waveforms, RF interrogation, optical illumination — and when a target is detected, the response systems engage. Compliance with the authority regime is procedural: deployment-time ROE briefings, spectrum-license review at fielding, post-event reconstruction from system logs, and operator discretion on probe employment. The pattern works for unsophisticated drone threats and lightly-contested environments. It fails as drone threats mature and as the counter-UAS systems themselves become targets of adversarial intelligence collection.
A counter-UAS system that probes continuously becomes a continuous emitter. Every probe is observable to any adversarial signals-intelligence collection within range. The counter-system's location, sensor capabilities, operational tempo, and engagement thresholds become available to adversaries through standard ELINT collection methods. For sophisticated adversaries — peer state actors, well-resourced criminal organizations, ideologically-motivated attackers with technical capability — this is a structural vulnerability of the counter-UAS deployment itself. The counter-system reveals what it knows about itself by probing; the adversary collects the disclosure and adapts faster than the counter-system's procurement cycle can respond.
The asymmetry compounds at scale. As Replicator-class deployments multiply counter-UAS sites across critical infrastructure, military installations, and event-protection contexts, every additional site adds an additional continuous emitter to the aggregate footprint. The adversary's collection task becomes easier with each site fielded, even as the defender's per-site investment grows. Procedural restraint cannot remedy this. ROE briefings cannot evaluate per-probe disclosure cost in real time. Operator discretion is uneven across shifts and deployments. Post-event reconstruction cannot prevent the disclosure that has already occurred. ISO/IEC 21384-3 evidentiary obligations are met through narrative reporting rather than architectural artifact. The 10 USC § 130i and 6 USC § 124n authority records are produced after the fact rather than referenced at decision time. The procedural pattern was adequate for an earlier generation of counter-UAS deployments; it is not adequate for the regime the statutes, the JCO baseline, Replicator scaling, and ISO/IEC 21384-3 now define.
What the AQ Primitive Provides
The disruption-modeling primitive's governed-active-probe mechanism evaluates each probe under composite disclosure-cost admissibility before emission. The evaluation is structural rather than discretionary. Spectrum licensing is referenced — am I authorized to transmit on this waveform at this power in this geography under FCC, NTIA, or host-nation authority. Statutory authority is referenced — does this deployment operate under 10 USC § 130i, 6 USC § 124n, or 49 USC § 44810, and does the proposed action fall within the authorized actions for that statute. Mission policy is referenced — does the current ROE permit active disclosure in the present operational context. Adversarial-awareness state is referenced — what does this probe reveal about the counter-system's location, capability, or tempo that the adversary does not already know. Information value is referenced — does this probe contribute observational value beyond what passive cross-medium sensing already provides.
The output is graduated probe selection rather than binary emit/silent. High-information-value probes under permissive authority and ROE proceed at full power. Lower-value probes under more restrictive conditions defer, downselect to lower-disclosure modalities, or refuse outright. Passive cross-medium sensing — RF spectrum monitoring, optical track, acoustic detection — remains continuous; active probing becomes a governance-credentialed exception with a structured evidentiary record per emission. Counter-UAS systems gain ELINT discipline that current architectures do not enforce, not as operator discipline but as architectural property of the disruption-modeling layer.
The primitive also supports cross-deployment credentialed coordination. Counter-UAS systems share governed disruption observations through the credentialed mesh — JCO-baseline-compatible, ATAK-CIV-interoperable, MIL-STD-2525-symbolized — with each system's probing decisions informed by the broader network's existing observations. A probe that one deployment has already emitted does not need to be re-emitted by an adjacent deployment if the observation is shareable under the relevant authority; the network's aggregate disclosure footprint shrinks even as its observational coverage grows.
Compliance Mapping
The primitive maps directly onto the authority and operational regime. 10 USC § 130i, 6 USC § 124n, and 49 USC § 44810 authority records become first-class architectural artifacts referenced at decision time and logged per probe and per response, replacing post-event reconstruction with credentialed pre-action evidence. NDAA 2024 § 1098 covered-authority obligations are met by the same record. FAA UAS mitigation guidance is honored because the admissibility evaluation incorporates civil-airspace constraints when the deployment context requires it.
ISO/IEC 21384-3 detect/identify/track/defeat obligations are satisfied by the structured evidentiary record across the chain; each phase produces credentialed observations consumable by subsequent phases under the same governance substrate. JCO baseline interoperability is preserved because the disruption-modeling layer sits above the JCO-approved sensor and effector modalities rather than replacing them. Replicator C-sUAS scaling is supported because the governance substrate scales with the deployment count without per-deployment recertification of every probe pattern. AUVSI ATAK-CIV mission-system integration consumes the credentialed observations as a first-class data class, and MIL-STD-2525 symbology is preserved in the common operational picture. The cumulative effect is that authority evidence and operational evidence become the same artifact, generated as a byproduct of normal counter-UAS operation rather than as a separate compliance workstream.
Adoption Pathway
Adoption is overlay-first rather than replacement. A counter-UAS operator first deploys the disruption-modeling layer above the existing JCO-baseline sensor and effector stack in shadow mode: probes that the existing architecture would emit are evaluated by the admissibility framework, decisions are logged but not enforced, and the operator gains an immediate ISO/IEC 21384-3 evidentiary substrate and a 10 USC § 130i / 6 USC § 124n authority-reference log. The shadow-mode log surfaces the probes that current operations emit but that the admissibility framework would have deferred or downselected — an immediate ELINT-discipline diagnostic.
The second layer activates enforcement: the admissibility framework gates probe emission, with operator override available for explicit ROE escalation. The third layer extends to cross-deployment credentialed coordination across the operator's deployment footprint, with shared observations reducing aggregate disclosure. The fourth layer integrates with adjacent-operator deployments under JCO and Replicator interoperability agreements, with AUVSI ATAK-CIV and MIL-STD-2525 as the mission-system and symbology substrate.
The operational implications scale with deployment count. A single counter-UAS site gains ELINT discipline and a structured authority-reference log. A regional cluster of sites under the same operator gains aggregate disclosure reduction because shared credentialed observations replace redundant probes. A multi-operator network at Replicator scale gains the governance substrate that makes per-deployment recertification unnecessary; the admissibility framework references the same statutory authorities, the same JCO-baseline interoperability, and the same ISO/IEC 21384-3 evidentiary substrate at every site. Adversarial intelligence collection that previously mapped a counter-UAS network through accumulated ELINT now confronts a network whose disclosure footprint has been deliberately engineered against that exact collection model.
Strategically, governed probing converts counter-UAS architecture from a procedural-compliance posture into an architectural-evidence posture at the moment the statutory and operational regime is shifting in that direction. 10 USC § 130i and 6 USC § 124n authority exercises become first-class records rather than narrative reconstruction. NDAA 2024 § 1098 reporting becomes a query against the architectural log. ISO/IEC 21384-3 conformance becomes structural rather than asserted. JCO-baseline and Replicator-scale interoperability become properties of the substrate rather than per-procurement integration projects. The patent positions the primitive at the layer counter-UAS will need as the adversarial side of the drone confrontation continues to mature and as Replicator-scale fielding makes per-deployment procedural compliance untenable.