The Science of Surveillance

What’s technically possible.
Published. Funded. Ratified.

This document catalogues the science behind surveillance — the published research, ratified standards, and funded programmes that underpin both current capability and emerging trajectory.

This document is one of three evidence bases that together test a single hypothesis:

This document describes what is scientifically possible. The companion documents describe what it means.

Every capability in this tier reads you because you exist. No device. No injection. No consent form. Just a body in a space.

There is one exit from this tier, and it is extreme.

Your face is a permanent biometric identifier. Unique, stable across decades, readable without awareness or cooperation.

Your walking pattern is unique, stable, and — unlike a face — cannot be disguised without altering how you move. Identifies from behind, at distance, in darkness, through disguise.

Your body is part of the electromagnetic environment, not just in it. Sweat ducts act as helical antennas. Skin structure interacts with radio frequencies at the tissue level.

Your body modifies WiFi signals. Presence, breathing, movement, gestures detectable through walls using existing consumer hardware.

Heart rate, respiration, movement detectable without touching you, seeing you, or you knowing.

Unique biometric — frequency, cadence, pronunciation, emotional markers. Readable on any call, in any room with a microphone, or from WiFi perturbation.

Your body radiates heat. In darkness, through walls, from orbit.

Your body generates electrical signals — heart rhythm, skin conductance, brain waves, biophoton emissions. These are signals the body produces, distinct from §1.3 (signals the body reflects).

Identifiers that are harder to disguise than a face.

Passive sensing capabilities arrive through two routes. Some are built first and standardised later — facial recognition deployed for a decade before any governance framework was proposed. Others are standardised first and built later — ISAC defines sensing as a property of 6G communication before any 6G network exists.

The second route is harder to resist, because the capability isn’t a product someone chose to deploy. It’s a property of the specification every manufacturer must implement.

The governance consistently arrives after the deployment, and the deployment doesn’t wait. UK facial recognition: deployed at scale from 2020, legal framework consultation December 2025 – February 2026, no legislation produced. WiFi sensing: deployed in consumer routers, no specific legal framework in any jurisdiction. Through-wall radar: operational in law enforcement, no public legal guidance.

This is the voluntary tier. You bought it. You love it. You can take it off.

It is also the tier generating the most granular continuous biometric data. The surveillance you choose provides more intimate information than the surveillance you can’t escape.

Voluntary → dependent → mandatory.

Each wearable begins as a lifestyle choice and ends as a data dependency. The Apple Watch that tracks your runs also holds your boarding pass, your car key, your medical ID, your payment method. Removing it doesn’t just stop the tracking — it removes your access to infrastructure that now assumes you’re wearing it.

Wearable data is governed by terms of service, not surveillance legislation. You consented when you created the account. The consent covers data collection, cloud storage, third-party sharing, and legal compliance — which means law enforcement access via subpoena, not warrant.

The governance frameworks designed for state surveillance don’t apply because you volunteered.

This tier has its own hierarchy of entry: clinical procedure — injection — ingestion — inhalation — dermal absorption — light.

The materials that make in-body sensing possible — graphene, carbon nanotubes, quantum dots, silicon nanowires, metamaterials — enter the body through each of these routes. Most are at research stage. Their relevance here is not current deployment but the fact that the exposure pathways are published, funded, and — in the case of medical nanomaterials and cosmetics — already in routine use.

The highest consent point in Tier 3. Fully informed, signed forms, surgeon operated. Still a surveillance vector — the device was designed to report, and reporting means addressable.

Direct neural interfaces. Surgical implantation. Currently therapeutic.

No surgery. Interface enters via injection, inhalation, or ingestion, distributes through tissue, addressed externally.

Sensors that distribute through tissue, operate without batteries, report externally. Making the body’s interior addressable.

Using light to control biological function at the cellular level.

Therapeutic → augmentative → integrative.

Each stage independently beneficial. Each deepens dependency. The line between “using a tool” and “being part of a system” dissolves incrementally. The medical implant that monitors your heart (§3.1) is the same architecture as the nanoparticle BCI that reads your thoughts (§3.3) — the difference is bandwidth, not principle.

Each component exists independently. Published. The chain they form describes a system where reading and writing neural states become indistinguishable.

The chain: External Computer ↔ Multielectrode Array ↔ Brain Organoid ↔ Bacterial Colony ↔ GO Scaffold ↔ Neural Tissue ↔ EM Backscatter ↔ External Receiver

Each interface demonstrated in isolation. The integration is an engineering gap, not a physics gap.

The governance arrived before the technology — the only tier where this is true (ISO/IEC JTC 1/SC 43, UNESCO). Whether governance that precedes deployment constrains it or merely legitimises it is not a question this document answers.

The three tiers describe what can be read from your body. This section describes what happens to the reading — how it travels from contact to global.

The router, the smart speaker, the RIS panel, the mesh network, the smart meter. A room that contains these is a sensing environment. IEEE 802.11bf standardises WiFi sensing across all future devices. RIS — programmable metamaterial surfaces on walls, windows, ceilings — demonstrated with 300,000+ individually addressable pixels (Malevich et al., Nature Communications, March 2025, Manchester National Graphene Institute).

Access control, smart meters, HVAC, workplace monitoring, elevator cameras, building management systems. The building knows who is in it, where they are, and when they arrived.

CCTV networks (UK: ~6M cameras, one per 11 people). ALPR (Flock Safety: 6,000+ municipalities, 20B+ vehicle scans/month). Cell tower triangulation. Acoustic sensors (ShotSpotter/SoundThinking, 170+ cities). Facial recognition at scale.

Palantir Gotham/Foundry connects disparate government datasets into individual intelligence profiles. £900M+ UK government contracts. NHS FDP (£330M): April 2026 FT leak revealed “Admin” role granting Palantir staff unlimited access to identifiable patient data.

Data brokers: LexisNexis, Acxiom, Experian. Available to law enforcement without warrant. Identity systems: GOV.UK One Login, DIATF, Data Use and Access Act 2025.

Five Eyes: Tempora (GCHQ: 21 petabytes/day, 200+ fibre optic cables, 850,000 staff with access). XKeyscore (NSA: real-time searchable database of all internet activity). PRISM. MUSCULAR. Restrictions “policy-based, not technically based.”

Satellites: commercial 30cm, KH-11 est. 6–10cm. GPS: every phone reports position. Undersea cable taps: GCHQ Tempora.

The range of any device is not the device. It is the pipeline.

Your Apple Watch → iPhone → iCloud → and from there, through terms of service, SDK telemetry, data broker purchase, advertising network, analytics API, or legal request → LexisNexis → Palantir Gotham.

The legal request is the route that requires a decision. The others operate by default.

The architecture by which these pipelines function without breaking any law is the subject of the companion document, The Interoperable State.

The tiers describe what reads you. The relay chain describes how the data moves. This describes why you participate. The architecture’s power doesn’t come from coercion. It comes from the fact that the deepest surveillance is the most wanted.

The coerced participation gives the least. The loved participation gives the most.

The mandate captures your face — a surface. The health benefit captures your heartbeat — continuous, 24/7, inside the body. The happiness tier captures your attention, your preferences, your emotional state.

The architecture doesn’t need to force the deepest surveillance. It needs to make the deepest surveillance the most pleasant experience.

19 structural (cannot be altered). ~10 alterable (surgery or sustained retraining). ~17 suppressible (masks short-term, reasserts). No individual countermeasure addresses more than one. The aggregate is inescapable.

Full countermeasure analysis lives in The Null Hypothesis.

Convergence

The three tiers, the relay chain, and the engagement gradient are presented separately because they answer different questions. But they do not operate separately.

Any single tier is often sufficient for identification or tracking. CCTV facial recognition identifies you from Tier 1 alone. Your Apple Watch tracks you globally from Tier 2 alone. The combination makes evasion functionally impossible.

Your Apple Watch (Tier 2) captures your HRV. Through-wall radar (Tier 1) detects your heartbeat. The match happens in a database (Infrastructure: National/Global). Three tiers, one identification.

WiFi sensing (Tier 1) detects your presence through walls. Your phone (Tier 2) provides your identity. CCTV (Infrastructure: City) captured your face arriving. Cell tower logged your phone. Palantir correlates the streams. Five sources, one picture.

This convergence does not need to be designed.
It needs only to be interoperable.

Each system was built for a different purpose, and the correlation emerges because data formats are interoperable, standards are shared, and integration platforms exist.

Whether the convergence was planned, emerged, or both, is a question the architecture is built to make unanswerable.

That convergence is the subject of the companion documents:

The Surveillance Architecture — the observation layer.

The Interoperable State — the identity layer.

The Null Hypothesis — the frame.