Abstract
In a modern LEO constellation, a scheduler or flight computer can decide to transmit a burst, steer a beam, forward traffic over an inter-satellite link or switch on a user terminal's amplifier faster than any human can review it. Today that decision becomes radio energy because the command link was authenticated, the terminal was registered on the network, the command type was on an allowlist, or the flight process simply had access to the radio. Those controls decide who may talk to the satellite. None decides whether this burst, on this beam, to this next hop, over this country, in this mission window may leave the antenna now. Radiation cannot be taken back: a stale, replayed, substituted or autonomy-generated command becomes interference, a licensing breach or a safety event. This paper describes an aperture-side execution-finality architecture. Every radio, beam, inter-satellite, gateway or payload command is held as a non-effective candidate act. A protected enforcement domain binds vehicle, beam, frequency class, power class, duration, next hop, overflight epoch, command source and intended sink, commits evidence, and issues single-use, non-bearer authority. A finality sink at the power-amplifier enable, beam driver, inter-satellite switch, gateway feeder, user-terminal transmit path or payload radio re-checks the live command immediately before energy leaves, and consumes the authority. Any mismatch keeps the aperture dark; a faded command link falls back to a short, bounded envelope, never to the last "go". The design requires no change to waveforms, CCSDS, 3GPP NTN or ITU coordination. A runnable, non-radiating reference implementation passes 77 tests across seven consequence paths. Starlink, OneWeb, Kuiper and Telesat Lightspeed are referenced only as illustrative topologies. The author is open to acquihire or strategic collaboration. IETF draft: https://datatracker.ietf.org/doc/draft-das-ntn-rf-execution-finality/
KEYWORDS satellite security, LEO constellation, non-terrestrial network, 3GPP NTN, inter-satellite link, phased-array antenna, beam steering, user terminal, gateway, TT&C, CCSDS, power amplifier enable, spectrum compliance, ITU coordination, landing rights, replay protection, single-use authorization, fail-closed, zero trust, space cybersecurity
Creative Commons License
This work is licensed under a Creative Commons Attribution-Noncommercial 4.0 License
Recommended Citation
Das, Sangam Kumar, "One Register Write From the Sky: Why an Authenticated Satellite Can Still Transmit the Wrong Burst — and the Aperture-Side Gate That Stops It", Technical Disclosure Commons, (November 05, 2026)
https://www.tdcommons.org/dpubs_series/12749