Mechanism: Fused Multilateration Over Heterogeneous Range Observations

The mechanism specifies that positioning is performed as a multilateration over admitted range observations and anchor positions rather than as a single-modality estimate. A governance-credentialed inter-agent ranging mechanism produces range observations between participating mesh agents through at least one of a plurality of ranging modalities, and a cooperative localization engine determines agent positions through multilateration from the admitted range observations and admitted anchor positions. Each range observation carries the measured range, the modality producing it, the observing agent's governance-chain identity and credential, the temporal association, and the declared ranging precision and ranging-covariance. The architecture admits 15-plus ranging modalities integrated into a single coordinate graph; the inventive architecture is modality-agnostic, and the specific ranging modality is selectable in accordance with deployment without privileging any one modality. Where direct-anchor ranging is insufficient, a transitive localization extender produces agent positions through neighbor references.

Each contribution is governance-credentialed at the source. The contributing unit signs the observation with its credentialing chain, declares the range modality and the uncertainty model under which the range was produced, and records the observation into the substrate's lineage. The receiving unit, the unit performing the multilateration, evaluates each observation for admissibility before integrating it into the coordinate solution. Admissibility evaluation proceeds through the composite admissibility evaluator, and an adversarial-range rejection mechanism rejects spoofed, injected, or otherwise inadmissible range observations before they reach the coordinate solution.

The fusion proceeds as a multilateration in which each admissible observation is weighted according to its declared uncertainty and a per-modality reliability weighting that captures the modality's expected reliability under the current conditions. A precision-and-uncertainty propagator propagates ranging precision and ranging-covariance through the localization chain, producing per-position uncertainty estimates. An ambiguity-resolution mechanism selects among multiple solutions when the multilateration admits more than one. A coordinate-lineage recorder records each range observation, localization event, frame definition, uncertainty update, ambiguity resolution, and rejection event in the governance-chain lineage field, so that any governance-credentialed consumer can reconstruct the position's derivation chain.

Per-modality reliability weighting is dynamic. A modality's weighting is updated based on observed agreement and disagreement with other admissible modalities, on contextual signals indicating denial or degradation, and on credentialed inputs warning of adversarial conditions. A modality whose reliability falls below the governing admissibility may be suspended from contributing to the solution, while its observations continue to be recorded into the lineage as a diagnostic record of why the suspension occurred.

Per-observation credential evaluation operates alongside per-modality confidence. Even within an admissible modality, an individual observation may be rejected if its credentialing chain fails to validate, if the contributing unit's credential has been suspended, or if the observation's uncertainty declaration falls outside the modality's nominal envelope in a way that is not consistent with the contributor's environmental context. Rejections are recorded with reasons; the lineage therefore reflects both the observations that contributed to the solution and the observations that were considered and rejected.

Operating Parameters: Modality Bounds, Confidence, and Cross-Checks

Modality-bound parameters specify, per modality, the nominal range envelope, the nominal uncertainty envelope as a function of range and operating context, and the credentialing standing required of contributors. The precision of mesh-derived coordinates is bounded by ranging modality accuracy and reference-node density within ranging distance of consuming agents. The disclosure states these bounds qualitatively and does not fix a numeric accuracy, range, or uncertainty figure for any modality.

Reliability-weighting parameters specify how a modality's reliability weighting responds to agreement and disagreement signals, the governing admissibility at which a modality is suspended, and the procedure by which a suspended modality is restored. Restoration may be automatic (after a sustained interval of consistency with admissible peers), credentialed (after an oversight broadcast clearing the modality's region), or contingent (only when an alternative diagnostic confirms the cause of the suspension has cleared).

Cross-modality consistency parameters specify the agreement thresholds between modalities under nominal conditions and the disagreement thresholds beyond which a credentialed disagreement event is emitted into the lineage. A disagreement event is itself a structured observation that downstream consumers, diagnostic functions, security functions, oversight bodies, may use to differentiate among sensor failure, environmental anomaly, and adversarial interference. The architecture does not silently absorb disagreement; it surfaces disagreement as evidence.

Solution-update parameters specify the rate at which the multilateration is recomputed, the policy for incorporating delayed observations from slow modalities (acoustic at long range, for example), and the smoothing applied across consecutive solutions. A high-update-rate consumer (a vehicle controller) receives solutions at the rate of the fastest contributing modality with declared uncertainty inflated to reflect the freshness of each contribution; a low-update-rate consumer (a logistics tracker) receives solutions at a slower rate with all admissible modalities fully integrated.

Credentialing-tier parameters specify the standing required to contribute observations within a deployment. Civilian deployments may admit commodity contributors at a baseline tier; defense deployments may require contributors at a higher credentialing tier with stricter governance-credentialed attestation. Mixed deployments admit both, but the multilateration weights each contribution according to its tier so that high-tier contributors dominate the solution within their range envelope.

Alternative Embodiments

The localization mechanism admits embodiments that vary in how positions are derived and maintained. A cooperative localization engine determines positions through multilateration from admitted range observations and anchor positions; a transitive localization extender produces positions through neighbor references when direct-anchor ranging is insufficient; and an anchor-less bootstrap mechanism produces a relative-only coordinate frame when no anchor observations are available. A self-healing topology maintainer updates the coordinate graph under agent failure, removal, or addition. Each embodiment preserves the structural commitments to governance-credentialed range observations, adversarial-range rejection, and coordinate-lineage recording.

Modality-set embodiments range from a single ranging modality to the 15-plus ranging modalities integrated into a single coordinate graph. The architecture is modality-agnostic with respect to the sensing modality producing the range observation; the specific ranging modality is selectable in accordance with deployment, and equivalent positioning modalities emerging subsequently integrate as additional governance-credentialed contributors without architectural rebuild.

Cooperative-topology embodiments include peer-to-peer (each unit ranges to and from its peers and computes its own position), anchored (a set of credentialed anchor units provides ranges to mobile units that compute their own positions), and infrastructure-mediated (a credentialed infrastructure node aggregates ranges and produces solutions for subscribing units). Mixed topologies are common; a defense deployment may use peer-to-peer ranging within a unit and infrastructure-mediated ranging at the formation level.

Reliability-update embodiments range from local (each unit updates per-modality reliability weighting based on its own observations) through coalition (units within a credentialed coalition share reliability updates) to broadcast (credentialed regional updates that units in the region honor). Broadcast embodiments are particularly relevant where regional adversarial conditions such as signal jamming, ranging disruption, or sensor denial affect many units and where coordinated suspension is more reliable than independent local detection.

Disagreement-handling embodiments range from passive (disagreement is recorded but does not change the solution) through reweighted (disagreement reduces the contributing modalities' weights), to escalated (disagreement above a threshold triggers a credentialed diagnostic event that may suspend a contributor or invoke oversight). Escalated embodiments are appropriate where adversarial interference is anticipated; passive embodiments are appropriate where disagreement is expected to reflect benign environmental anomalies and the cost of suspension is high.

Composition With the Wider Mesh-Coordinates Architecture

Multi-modality cooperative ranging composes with the credentialed-anchor layer of the mesh-coordinates architecture. Anchor units broadcast their identity and position with credentialing chains; mobile units range to anchors and to each other; the multilateration consumes both anchor-mediated ranges and peer-mediated ranges under the same observation type. The architecture does not privilege anchor-mediated ranges structurally; it weights them by their declared uncertainty and credentialing tier in the same way as any other contribution.

Composition with the position-lineage layer is direct. Each computed position is recorded into the lineage with its supporting observations, the per-modality decomposition of its uncertainty, and the credentialing chains of all contributors. Downstream consumers, collision-avoidance systems, allocation systems, audit functions, resolve a position's lineage to evaluate whether the position meets their reliability requirements before relying on it. A position whose lineage shows dominant contribution from a modality the consumer does not trust is rejected at the consumer rather than relied on silently.

Composition with the operator-intent layer governs how positions are used in adverse actions. A position used as evidence in an adverse classification (geofencing, restraint, restriction-of-movement) propagates through the operator-intent due-process credentialing chain; the position's lineage is part of the evidentiary record exposed to the subject under the right-of-review channel. Positions that depend on uncredentialed modalities, or whose per-modality confidence is below an admissibility floor for the proposed action's gravity, are inadmissible at the operator-intent gate.

Composition with the semantic-discovery substrate is achieved through positional observations as first-class memory records. A discovery object investigating a movement pattern, a sensor anomaly, or a denial event consumes positional observations and their lineages directly; the cognitive fields that depend on positional evidence inherit the credentialing constraints of the underlying ranges and the per-modality confidence at the moments of measurement.

Prior-Art Landscape

The disclosure distinguishes the mesh-derived coordinate primitive from prior positioning architectures in a plurality of respects. Prior satellite-navigation systems operate on broadcast signals from centrally operated constellations whose acquisition is required for positioning and whose denial precludes positioning, whereas the present primitive produces coordinate bearings from cooperating mesh agents without dependence on a central positioning authority.

Prior differential-positioning and assisted-positioning systems operate on reference-station networks maintained by positioning-service operators, whereas the present primitive self-organizes through mesh agents without dependence on a positioning-service operator. Prior positioning systems using static identifiers, such as satellite pseudo-random-noise codes, beacon broadcast addresses, and fixed-identifier access points, are vulnerable to identifier spoofing, whereas the present primitive authenticates each range observation through governance-chain continuity identity with admissibility evaluation.

Prior modality-specific positioning systems are limited to a single ranging modality, whereas the present primitive admits 15-plus ranging modalities integrated into a single coordinate graph. Prior positioning systems produce a single canonical position without consumer-specific differentiation, whereas the present primitive produces authority-filtered and privacy-tier-filtered coordinate emissions.

Prior systems do not support governance-chain-preserving lineage for coordinate determinations, whereas the present primitive produces deterministic reconstruction of each position's derivation chain. Prior systems do not support coordinate-frame federation across independently maintained systems, and do not produce anchor-less bootstrap to a usable relative-coordinate frame, whereas the present primitive produces both. An evidential-fusion mechanism combines mesh-derived positions with externally sourced positions, including satellite navigation, inertial dead-reckoning, and visual-inertial odometry, through the composite admissibility evaluator, so that the composite position draws from whichever sources remain admissible under current conditions.

Disclosure Scope

The disclosure scope, supported by U.S. Provisional Application No. 64/049,409, covers a mesh-derived coordinate primitive comprising governance-credentialed inter-agent ranging through at least one of a plurality of ranging modalities, with 15-plus ranging modalities integrated into a single coordinate graph; anchor observation admission; a cooperative localization engine determining positions through multilateration; a transitive localization extender producing positions through neighbor references; a precision-and-uncertainty propagator propagating ranging precision and ranging-covariance; an ambiguity-resolution mechanism; an adversarial-range rejection mechanism rejecting spoofed, injected, or otherwise inadmissible range observations; an anchor-less bootstrap mechanism producing a relative-only coordinate frame; a coordinate-frame federation mechanism aligning independent mesh-derived coordinate systems; a self-healing topology maintainer; an evidential-fusion mechanism combining mesh-derived positions with externally sourced positions, including satellite navigation, inertial dead-reckoning, and visual-inertial odometry, through the composite admissibility evaluator; reference-node densification including airdroppable and other deployable reference-node forms; and a coordinate-lineage recorder recording each range observation, localization event, frame definition, uncertainty update, ambiguity resolution, rejection event, and federation event in the governance-chain lineage field.

Defense and contested-environment operations gain structural resilience that single-modality hardening cannot match: loss of any single modality reduces position confidence but does not eliminate it, and credentialed disagreement among modalities surfaces as diagnostic evidence rather than as a silent source of error. Civilian deployments in challenging environments, dense indoor settings, subterranean operations, mining sites, port and intermodal logistics, gain the same resilience under the same architecture. The architecture supports gradual modality adoption: emerging modalities integrate as additional credentialed contributors without architectural rebuild, allowing deployments to extend their resilience as new sensing technologies become available.