Abstract
This disclosure describes a custody node for data and AI models that is divided into three planes, separated by hardware or firmware rather than by software convention. A control plane decides and records: it evaluates every request against the terms of the deposits concerned, issues and revokes capabilities, and keeps a tamper-evident ledger and a lineage registry, but never touches raw data. A data plane holds and computes: encrypted storage, a key vault and hardware-isolated job enclaves, acting only on capabilities issued by the control plane and unable to grant itself access. A safety plane halts, gates and restores: a safety controller with its own power supply, battery backup, processor, firmware and communication channel; a write-once restore vault with its own administration; a one-way egress gateway through which every output must pass; and tamper sensors that sign their readings. The safety plane expects a safety heartbeat from the control plane. On loss of the heartbeat, on a reset signal, or on a tamper or attack signal, it stops access to data (fail closed) and brings any machinery under the node's control to a safe state (fail safe). Neither of the other planes can disable, reconfigure or bypass it. The same three-plane design applies at every scale, from a personal vault device to an edge cabinet to rack modules in a data hall, and each layer of the node is certified separately.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Recommended Citation
Wang, Edward D. H., "SI Data Bank™: A Data Custody Node Divided into Control, Data and Safety Planes, with a Safety Plane on Its Own Power and Channel that Halts, Gates and Restores", Technical Disclosure Commons, (October 13, 2026)
https://www.tdcommons.org/dpubs_series/12164