Mesh Wire Format: Medium-Agnostic Message Structure

Mechanism

The wire format is organized as a header of mandatory TLV elements followed by zero or more optional TLV elements and a terminal payload element. The mandatory elements are the governance-class tag, the lineage-stamp tag, the hop-history tag, and the expiry tag. Each element carries a one-byte type identifier, a length descriptor encoded in a length field whose width is selected from a fixed set of permissible widths, and a value field whose interpretation is fully determined by the type identifier. Reserved type-identifier ranges permit forward-compatible extension; an unknown optional type is preserved and forwarded by relays without modification, while an unknown mandatory type causes admission failure at the receiving boundary.

The governance-class element identifies the regulatory or operational class to which the transmission belongs and from which an admitting unit derives its handling rules. Examples include public-infrastructure observation, fleet-internal coordination, regulated-emergency override, classified payload, and commercial telemetry. The lineage-stamp element binds the transmission to the credentialed origin that first emitted it; the stamp comprises an origin identifier, a monotonic sequence counter, and a signature computed over the origin identifier, sequence counter, governance class, and payload digest. The hop-history element accumulates a per-relay record consisting of a relay identifier, a receive timestamp, a transport descriptor, and an integrity attestation; each forwarding node appends its record without disturbing prior records. The expiry element carries an absolute timestamp beyond which the transmission must not be admitted by any receiving boundary.

Opaque relay is a structural property of the format. A relay parses only the mandatory header elements and the hop-history element it must extend; it is not required to parse, decrypt, or interpret the payload element, and it is not required to recognize optional elements outside its operating profile. The receiving boundary that ultimately consumes the payload parses the same mandatory elements, evaluates the governance class against its admission policy, verifies the lineage-stamp signature, examines the hop-history for policy compliance, and only then exposes the payload to the consuming subsystem. The format therefore separates the transport-bearing concern (move the bytes) from the consumption concern (interpret the payload) at the structural level rather than at the application level.

Transport bindings adapt the abstract TLV layout to the framing primitives of each physical medium. Ultra-wideband packets carry the structure within the time-bounded packet payload, with the rateless forward-error-correction descriptor expressed as an optional TLV. Cellular and satellite links carry the structure within the protocol-stack payload, with header compression applied opportunistically when the transport supports it. Passive RFID stores the structure in tag user memory under a fixed maximum-length profile, with mandatory elements taking precedence over optional ones when capacity is constrained. Optical fiducials encode the structure in a visual symbology whose symbol layout maps deterministically onto the TLV byte sequence. Mobile store-and-forward carries the structure as an opaque blob in a courier device's local store until connectivity to the next relay is established. In every binding, the byte sequence presented to and consumed by the wire-format layer is identical.

Operating Parameters

The governance-class identifier occupies a fixed-width field of sufficient bit width to enumerate the regulatory classes recognized by participating jurisdictions, with reserved encodings for vendor-specific and experimental classes. The lineage stamp's signature uses a public-key signing scheme whose curve and digest selection are themselves encoded in a sub-tag, permitting algorithmic agility across deployments and across jurisdictional crypto policies. The hop-history element imposes a configurable maximum depth; when the depth is reached, a relay either drops the transmission or collapses earlier hops into a digest, depending on profile. The expiry element is an unsigned integer expressed in a mesh-wide reference epoch.

Capacity-constrained transports operate under a profile that selects a subset of optional elements consistent with the capacity envelope. Passive RFID with kilobyte-class user memory uses a profile that omits long-form attestations in favor of a compact integrity digest. Optical fiducials use a profile that omits hop-history entries beyond a small fixed depth, on the assumption that the fiducial is read in a low-relay regime. Satellite uplinks use a profile that includes the full hop-history but applies the transport's native header compression. The profile in force at a given hop is itself communicated through an optional TLV, so that downstream nodes know which optional elements to expect and which are intentionally absent.

Admissibility decisions at the receiving boundary are governed by configurable policy that combines the governance class, the lineage stamp's origin authority, the hop-history attestations, and the expiry deadline. A receiving unit may admit transmissions of one governance class and reject transmissions of another; may admit only those transmissions whose lineage chain terminates at an origin within an accepted authority set; may reject transmissions whose hop history includes a relay identifier on a deny list; and must reject all transmissions whose expiry deadline has passed. The policy is expressed declaratively and is itself versioned through a credentialed update channel that uses the same wire format.

Alternative Embodiments

In one embodiment, the wire format is bound to ultra-wideband as the primary transport for vehicle-to-vehicle observation exchange, with cellular and satellite as fall-through transports for non-line-of-sight propagation. In another embodiment, the format is bound to passive RFID as the primary transport for roadway-marker readout, with the marker tag carrying a lineage-stamped governance-class-encoded observation that downstream readers admit on the basis of credential alone. In a further embodiment, the format is bound to optical fiducials affixed to maritime navigation aids or aerial waypoints, where the fiducial encodes a long-lived credentialed observation readable by passing vessels or aircraft.

Mobile store-and-forward provides a further embodiment in which a courier device — a delivery vehicle, a maintenance technician's handset, an unmanned aerial vehicle making routine rounds — accumulates wire-format transmissions while connectivity is unavailable and discharges them when connectivity is restored. The lineage stamp and hop history persist across the connectivity gap, and the expiry deadline determines whether the courier-borne transmission is still admissible at delivery. In another embodiment, the format is layered over an existing standardized vehicle-to-everything (V2X) link with the wire format encapsulated as the V2X application-layer payload, permitting deployment within existing V2X-conformant fleets without modification of the underlying radio stack.

In a security-sensitive embodiment, the payload element is encrypted under a key derivable only by receiving boundaries within an accepted credential set, while the mandatory governance fields remain in clear so that relays may continue to operate opaquely. In a redundancy-sensitive embodiment, the rateless-FEC descriptor is populated with sufficient redundancy symbols that the transmission is recoverable across lossy intermediate hops without retransmission. In a privacy-sensitive embodiment, the lineage stamp is replaced with a zero-knowledge attestation that proves origin authority without disclosing origin identifier; the attestation occupies the same TLV slot as the conventional lineage stamp and is distinguished by a sub-tag.

Composition

The wire format composes with the governed-mesh primitives that supply the credential infrastructure. The lineage stamp is generated by the credentialed-origin layer of the mesh; the governance class is assigned by the regulatory-classification layer; the hop history is appended by every conformant relay regardless of vendor; the expiry is set by the originating authority's policy. The composite admissibility evaluation at the receiving boundary draws on each of these elements together with locally-held configuration. A transmission therefore traverses arbitrarily many transports and arbitrarily many vendor implementations while carrying with it the entire body of evidence needed for a downstream policy decision.

Composition with the rateless-forward-error-correction primitive permits resilient propagation across lossy and intermittent links. Composition with the dynamic-device-hash continuity element permits a receiving unit to verify that a sequence of transmissions originates from a continuous physical emitter even when the lineage stamp is rotated for anti-correlation. Composition with the credentialed-update channel permits the wire format itself to evolve in the field, with new optional TLV types and new admission policies distributed through the same structural mechanism that carries operational traffic.

Prior-Art Distinction

Conventional vehicle-to-everything stacks specify their own application-layer payloads, framed independently for each radio technology and bridged across radio boundaries by gateway logic that re-encodes payloads for the destination radio. Conventional RFID systems specify tag payloads that are meaningful only to a co-deployed reader infrastructure and whose semantics do not survive transport into another medium. Conventional satellite messaging stacks specify their own framing, with bridging into terrestrial networks performed at gateway hosts that re-encode the payload. In each case, the structural specification is bound to the transport, and cross-transport operation requires per-pair gateway integration.

The mesh wire format inverts the binding. The structural specification is independent of the transport and is preserved end-to-end; the transport binding is a profile that selects how the structure is carried over a given physical medium. Per-pair gateway integration is replaced by a single conformance point, the wire-format specification itself. Downstream consumers parse a single structure regardless of the path the transmission took to reach them, and the credentialing chain is intact on arrival regardless of how many transports were traversed.

Disclosure Scope

Operationally the wire format provides a single conformance surface for testing, certification, and field interoperation. A relay vendor demonstrates conformance by parsing the mandatory elements, appending a hop-history record, and forwarding the byte sequence intact; an originating-unit vendor demonstrates conformance by emitting the mandatory elements correctly under each enumerated transport binding; a receiving-unit vendor demonstrates conformance by applying its admissibility policy to the parsed mandatory elements. Conformance to the wire format is therefore demonstrable independently of conformance to any one transport, and the testing burden is borne once at the structural layer rather than once per transport pair. Field interoperability between vendors is a property of the format itself rather than of bilateral integration agreements.

The disclosure of U.S. Provisional Application No. 64/049,409 encompasses the TLV structure of the wire format; the mandatory and reserved type-identifier ranges; the binding profiles for each enumerated transport; the admissibility-policy framework that operates on the mandatory fields; the opaque-relay property that decouples forwarding from payload interpretation; the alternative embodiments described above; and the composition with credential, continuity, FEC, and update primitives of the governed mesh. The disclosure is intended to cover any wire format that preserves the mandatory governance fields end-to-end across heterogeneous transports under credentialed admission, regardless of the specific encoding of the mandatory fields or the specific selection of optional extensions.