EHOX Global First: Human-On-The-Loop (HOTL) Cryptographic Heartbeat Proof — EW Jamming Silicon Benchmark
Gerhard Hirschmann · Zenodo (CERN European Organization for Nuclear Research) · 2026
This technical note documents the world-first physical hardware demonstration of Human-On-The-Loop (HOTL) compliance under total Electronic Warfare (EW) jamming conditions. The EHOX Silicon Interlock on AMD ZynqMP UltraScale+ (ARM Cortex-R5F, TCM bare-metal) physically clamps the effector output to 0.0 Volts within 44 nanoseconds when the cryptographic operator heartbeat token times out under EW jamming — before any firing or motor circuit can activate. Legacy OS-based software guardrails require 100ms–5000ms to detect the same condition. Formally verified: Z3 SMT 43/43 theorems, CBMC 198/0 assertions (v19 firmware, NRULES=31, 12 domains). Compliance: DODD 3000.09 (Autonomy in Weapon Systems), UN CCW GGE, STANAG 4774/4778, NATO AEP-55 Vol.2, NATO AEP-101. Court-admissible proof: 64-round NIST SHA-256 NOR-Flash chain. TRL-7 silicon-proven. Hardware: Kria KV260, ZynqMP XCZU5EV, INA260 power monitor (0.042 microjoule/decision). Origin: Gerhard Hirschmann / EHOX / ORION Genesis Workspace System, 10.08.2026.