Earthquake Early Warning Domain

Public earthquake early warning (EEW) systems now operate on several continents. The United States runs ShakeAlert across California, Oregon, and Washington, distributing alerts through the Wireless Emergency Alert (WEA) channel, the FEMA IPAWS infrastructure, consumer apps, and licensed technical partners including transit operators, utilities, and elevator manufacturers. Japan's national EEW has been operational since the late 2000s, drawing on a dense national seismic network supplemented by borehole and strong-motion arrays. Mexico's SASMEX, one of the oldest public EEW systems, broadcasts over a dedicated radio link with audible sirens in thousands of public locations. Taiwan and Turkey operate national strong-motion networks delivering rapid intensity estimation. Each of these systems shares a common architecture: a federation of seismic stations whose coincident declarations trigger an alert.

The newest layer is consumer-grade and citizen-grade sensing. Smartphone-accelerometer projects turn ordinary handsets into a planet-scale sensing fabric, and at least one consumer operating system now ships earthquake detection to billions of devices, broadcasting alerts in countries that have no national EEW at all. Low-cost citizen-seismograph networks add thousands of fixed stations, and structural-health-monitoring sensors in modern buildings contribute a further independent stream. These sources are abundant and geographically dense, but individually noisy and of unknown trust. They are exactly the kind of heterogeneous, differently credentialed sensing population that legacy coincidence logic was never designed to admit.

The Architectural Requirement

Earthquake detection has hard latency budgets. The destructive S-wave propagates more slowly than the P-wave that carries the first warning signal, so for an event whose epicenter sits tens of kilometers from a population center, the usable warning window is on the order of seconds. Every architectural decision, including source authentication, sensor fusion, false-positive rejection, and alert distribution, must complete inside that window.

The requirement, then, is not a single highly trusted source but a federation of differently credentialed sources whose corroboration can be evaluated in milliseconds. A national broadband station, a borehole strong-motion sensor, a citizen seismograph, and a smartphone accelerometer report in different units, at different sampling rates, with different latencies, noise profiles, and trust levels. The detection system must accept observations from all of them, weight them by source class, and produce a corroborated event hypothesis whose confidence is itself attributable to the contributing sources and reconstructable after the fact.

Multi-medium corroboration adds a second axis. A real earthquake displaces the ground in a way that strong-motion sensors record, that GNSS receivers register as a static co-seismic displacement, and that structural accelerometers in nearby buildings record as a coherent shake front. A spoofed or malfunctioning single-source signal does not produce coherent evidence across these physically distinct mediums. The detection layer must therefore be able to require corroboration across mediums for high-impact alerts (mass WEA broadcast, automatic train stop, gas-line shutoff) while accepting single-medium evidence for lower-impact alerts (in-app warnings, advisory notices).

Why Procedural Compliance Fails Alone

Operational EEW networks already implement multi-station declaration thresholds: several stations within a radius must declare before an alert is issued. These are procedural rules encoded in a central message broker and applied to a closed federation of pre-vetted stations. They work well for the legacy network and they fail for the emerging crowdsourced and cross-jurisdiction layers.

A procedural rule that says "four stations within a hundred kilometers must declare" cannot distinguish a genuine event corroborated by three national broadbands and one citizen station from a spoofed event corroborated by four compromised consumer devices, unless the rule is rewritten to encode source-class weights. Once those weights are added, the rule becomes a small policy engine; and once events span jurisdictional boundaries (a Cascadia rupture spanning United States and Canadian networks, or a southern California event spanning the United States and Mexico), that policy engine must reason about cross-network credentials it does not natively understand.

Adding more stations does not address the core failure mode. A single-medium fault, such as a station clock error or a regional network partition, can satisfy a coincidence threshold and produce a false alert, and raising the threshold only raises the number of correlated faults required. The architectural fix is to require evidence across mediums (seismic plus GNSS plus structural) and across source classes (network plus citizen plus consumer), with the corroboration policy expressed declaratively rather than baked into broker code, and with every contributing observation carrying a credential that says what it is and how far it is trusted.

What the Environmental-Disruption Primitive Provides

The provisional discloses environmental disruption sensing as a first-class architectural primitive: a baseline-characterization mechanism, a departure detector, a disruption classifier, a multi-source corroboration evaluator, a source-attribution mechanism, a governed active-probe mechanism, a spoofing-detection mechanism, a graduated-response generator, a disruption-lineage recorder, and a cross-medium composition mechanism. Mapped onto earthquake detection, these become the operations an EEW backbone needs.

Multi-source corroboration is the first operation. Each contributing observation arrives as a governed observation carrying an authority credential identifying its source class (national broadband, borehole strong-motion, citizen seismograph, smartphone accelerometer, consumer-OS aggregate), its station identity, its calibration metadata, and a signed timestamp. The multi-source corroboration evaluator aggregates departure detections across the sensing population and produces a corroboration score, and the governing policy is explicit about how many sources of which classes are required for which alert tier. The policy is data, not code, and it can be revised under change control without redeploying the broker.

Cross-medium composite detection is the second operation. The primitive treats seismic ground motion, GNSS displacement, structural accelerometer response, and further field classes as distinct mediums whose agreement is independently meaningful, and it maintains a composite-signature library against which correlated multi-medium observations are classified. Because each participating field class is governed by a physically distinct sensing apparatus with distinct failure modes, the composite determination is robust to single-medium sensor failure, single-medium jamming, and single-medium spoofing. For a subduction event, agreement among the seismic, geodetic, and structural mediums is far stronger evidence than agreement among many seismic stations alone, because a single-medium failure mode cannot manufacture cross-medium agreement.

The governed active-probe mechanism addresses the cold-start and verification problem. When initial observations are ambiguous, for example a small number of stations declaring with no GNSS displacement above noise, the primitive can form competing cause hypotheses and emit a governance-credentialed probe whose expected response differs maximally across them: request a raw waveform from a nearby station, query a structural-monitoring partner for accelerometer status, or query an instrumentation gateway. Probe emission is gated by a probe-admissibility evaluator that bounds the probe against spectrum, interference, regulatory, adversarial-awareness, and power constraints, and the spoofing-detection mechanism applies signal-integrity attestation and temporal and spatial coherence tests to separate genuine field measurements from adversarially fabricated ones.

Signed disruption lineage closes the architecture. The disruption-lineage recorder writes every detection, classification, attribution, probe, and response, together with the contributing observations and their credentials and the policy evaluation that admitted them, into the governance-chain lineage field. Post-event review and false-alert root-cause analysis then operate on recorded evidence rather than on reconstruction, and the graduated-response generator emits a response proportional to the classified disruption and its authority rather than a binary alarm.

Operational and Standards Mapping

Licensed technical partners of public EEW systems are held to alert-reliability, latency, and false-alert expectations. Signed disruption lineage and an explicit corroboration policy map directly onto those auditability expectations: every alert delivered to a transit operator or utility carries the evidence under which it was admitted. The Common Alerting Protocol (CAP) is the message-format standard for public alerts, and lineage records nest cleanly inside CAP info and parameter elements without breaking interoperability, so the detection layer can sit upstream of existing distribution without disturbing it.

Standardized station-metadata services (such as FDSN StationXML and SEED) provide the station-identity substrate the credential layer references, so source-class assertions resolve against an authoritative registry, and federation registries provide the cross-jurisdiction discovery that a federation policy consumes. National data-sharing arrangements between neighboring seismic authorities supply analogous registries elsewhere. For the consumer layer, a high-volume aggregator of anonymized phone-accelerometer signals is treated as a single high-volume, low-trust source class whose corroboration with one network-class source can justify a lower alert tier and whose corroboration across two mediums can justify a higher tier. WEA delivery follows the applicable FCC requirements (47 CFR Part 10); the detection layer sits upstream of the WEA gateway and shapes which events qualify for broadcast versus app-only delivery. CISA's critical-infrastructure protection guidance applies to the downstream actuation partners (transit, utilities, pipelines) that the highest alert tiers drive.

Adoption Pathway

Operators of existing EEW networks adopt the detection layer incrementally. The first step is to wrap each existing station feed with a source-class credential drawn from the operator's station registry, leaving the legacy coincidence rule in place. The second step is to add cross-medium corroboration as a parallel evaluator whose output is logged but does not yet gate alerts. After a calibration period covering a representative population of small events, the operator compares the layer's hypothetical alerts against the legacy alerts and, where the layer would have suppressed false alerts or admitted true alerts earlier, promotes the corroboration policy to the gating path.

Cross-jurisdiction federation follows once each participating network has published its source-class credentials. Where neighboring seismic authorities already operate documented mutual data-sharing, expressing those agreements as federation policies is largely a documentation exercise rather than a new technical integration, and the same approach extends to coordination across a national border during a large shared event.

Consumer-layer integration is greenfield in many jurisdictions. A national civil-protection authority adopting a consumer-OS earthquake-alert capability or a smartphone-sensing program can express the integration as a federation between the consumer aggregator and the national seismic network, with the corroboration policy documenting under what conditions consumer-only evidence is sufficient for which alert tier. The result is that EEW operators retain the latency budget the physics demands while admitting the broader, noisier sensing fabric that the next decade of earthquake monitoring will rely on, without inheriting its trust problem.

Disclosure Scope

This article describes an application of the environmental disruption sensing primitive of the governed spatial mesh disclosed in U.S. Provisional Application No. 64/049,409. The detection-layer capabilities described here (multi-source corroboration, cross-medium composite disruption detection, governed active probing, spoofing detection, graduated response, and signed disruption lineage) are disclosed in that provisional. References to specific earthquake early-warning systems, seismic networks, sensing programs, alerting standards, and regulatory regimes describe the external operating environment and are provided to illustrate an enabling deployment; they are not claims of the disclosed technology. Numerical performance characteristics of any particular deployment depend on sensor density, network topology, and configured policy and are not asserted here.