By Micky Irons, founder and CEO of Mickai.
When a case collapses, it rarely collapses on the facts. It collapses on the story of the facts: who touched the exhibit, when, on whose authority, and whether anyone could have altered it in the hours between the scene and the courtroom. For police forces, the chain of custody is not paperwork. It is the difference between a conviction that holds on appeal and a defendant who walks because the audit trail cannot answer a simple question with certainty.
Mickai is a Sovereign Intelligence Operating System, a SIOS, built to hold that certainty for the people who own the evidence. We designed it for the regulated boundary that public cloud cannot cross on the force's own terms: on hardware the constabulary controls, air-gapped or on-premise, with zero data egress and a tamper-evident, cryptographically-signed audit ledger underneath every action. This article is about one thing that ledger does better than any filing cabinet or case-management screen ever could. It enforces chain of custody by construction, not by trust.
The chain of custody is only as strong as its weakest log entry
Every disclosure regime a modern force answers to assumes an unbroken record. In the United Kingdom the Criminal Procedure and Investigations Act framework, and the disclosure duties that flow from it, require that the movement and handling of material be accountable end to end. Data protection law, the General Data Protection Regulation (GDPR), layers a second obligation. Personal data in an investigation must be processed lawfully, logged, and defensible. A traditional custody log satisfies neither test convincingly, because it is editable, because it is centralised, and because the log itself has no independent witness to say it was not changed after the fact.
That is the crack defence counsel are trained to find. A spreadsheet timestamp can be back-dated. A database row can be updated by an administrator with the right credentials. A signature can be added later. The problem is not that officers are dishonest. The problem is that the record cannot prove its own integrity, so the burden falls back on human recollection, and human recollection loses in cross-examination.
A signed action before it happens, not a note about it afterwards
Mickai inverts the order. Before any handling event executes, whether an exhibit is booked in, transferred, unsealed, sampled, imaged, or released, the system generates an Operation Attestation Record, an OAR, that signs the action before it is allowed to proceed. The OAR captures who is acting, which brain or subsystem is involved, the exhibit reference, the purpose, and the authority under which it happens. Nothing touches the evidence until that record is signed.
Like Pandora guarding what must not be opened without cause, every sealed exhibit stays gated until the record is signed.
This is the crucial move. In legacy systems the log is a consequence of the action. In Mickai the signed record is the precondition for it. An officer cannot open a sealed device and then decide whether to write it down. The unsealing is gated by the attestation. If the OAR is not produced and signed, the operation does not run. The record and the reality become the same event, which is exactly what a court needs and exactly what a written log can never guarantee.
Why the ledger cannot be quietly rewritten
Each OAR is written into a hash-linked chain using SHA-3-512, so every entry carries a cryptographic fingerprint of the one before it. Change a single character in any historical record and every subsequent hash breaks, visibly and immediately. There is no way to alter one custody event without shattering the whole chain after it, and that break is detectable by anyone holding a copy of the ledger, including the defence, the prosecution, and an independent expert.
Cerberus lets nothing pass unchallenged, the way a signed attestation gates every action before it can proceed.
The signatures themselves are post-quantum. Mickai uses the Federal Information Processing Standard 204 (FIPS 204) ML-DSA-65 scheme, a standardised digital signature designed to remain sound even against a future quantum adversary. That matters for evidence with a long tail. A conviction challenged on appeal a decade from now must still rest on signatures that no one can plausibly claim were forgeable. We built the ledger to outlive the case.
Critically, the whole record can be verified offline. A force does not need to phone a supplier or query a cloud to prove a chain is intact. The ledger verifies itself from the mathematics alone, on the force's own equipment, which is the only posture a court should accept for evidence of liberty-affecting weight.
High-stakes handling gated by more than one pair of hands
Some actions should never rest on a single person. Destroying an exhibit, releasing a firearm, unsealing a sexual-offences kit, or exporting a copy of digital media are decisions where the failure mode is catastrophic and irreversible. Mickai lets a force require multi-brain plus voice-biometric approval for these actions, so a high-stakes operation only proceeds when more than one authorised authority, and a verified human voice, concur. One compromised credential is not enough to open the box.
Brains in Mickai are revocable. If an officer leaves, is suspended, or has a role changed, the authority tied to their identity can be withdrawn instantly across the whole system, and every action that identity ever signed remains permanently attributable in the ledger. Revocation stops future power without erasing past accountability, which is precisely the asymmetry evidence handling demands.
Ananke holds the chain of necessity, each link binding the next just as each record binds the one before it.
Sovereignty is the point, not a feature
Sensitive investigative material cannot leave the force's control, and for good reason. Mickai runs on hardware the customer owns, air-gapped or on-premise, with zero data egress. Nothing about an exhibit, a suspect, or a source is streamed to a third party to make the system work. The intelligence, the reasoning, and the ledger all live inside the perimeter the force is legally responsible for.
The public cloud giants, OpenAI, Microsoft, Amazon Web Services, Google, and Oracle, are allies operating at a different layer, and Mickai works alongside them rather than against them. But there is a boundary the public cloud cannot cross on a police force's terms: material that must never egress, under statute and under public trust. Mickai is built to serve exactly that boundary, which is why it sits on the customer's own iron rather than someone else's.
Built to be shown to a jury, not just an auditor
The capability sits inside a wider intellectual-property position. Mickai LTD holds 104 filed United Kingdom patent applications covering about 2,340 claims, spanning the attestation, signing, hash-linking, and offline-verification methods described here. We frame these filings by what they contain: mechanisms that let an organisation prove an action happened, by whom, and that no one changed the record afterwards. For a police force, that is not an abstract asset. It is the machinery that turns a custody log into evidence a jury can be told to rely on.
Themis stands watch over what is lawful, the way the ledger stands over evidence that must survive the courtroom.
Everything is designed to be legible under scrutiny. An expert witness can be handed the ledger and walk a court through it: here is the signed attestation for the seizure, here is the hash that links it to the transfer, here is the offline verification that no entry between them was touched. The story of the facts stops being a matter of testimony and becomes a matter of proof.
The bottom line
Chain of custody fails when the record can be doubted. Mickai removes the doubt by signing every handling action before it executes, chaining those records so tampering is mathematically visible, protecting them with post-quantum signatures, and keeping the whole thing verifiable offline on hardware the force owns. It is a SIOS, built and live for exactly this: evidence that can prove its own integrity, from the scene to the appeal, without asking anyone to simply take the record's word for it.
Written by Micky Irons. Originally published at https://mickai.co.uk/articles/sovereign-ai-for-police-forces. More from Micky Irons and Mickai at mickai.co.uk.
Top comments (0)