THIRTEEN MICROSECONDS

Thirteen millionths of a second. A position fix built on that would be off by a few kilometres — enough to matter to a missile and not to a motorist. But a great deal of equipment on the ground was not using GPS to find out where it was. It was using GPS to find out what time it was, and for that equipment thirteen microseconds is an eternity.

18 min read

The substrate underneath the other six, and the one nobody ever bought

Article 7 of 8  ·  Series II of III  ·  Published 25 November 2026  ·  Analysis → Forecast → Recommendations

Series II, seventh and final substrate row. Each article has measured one physical layer with the same three questions — concentration, criticality, substitution time — and added a row to one comparison table. This one scores well on every question the instrument asks and is arguably the most exposed layer in the series. Understanding that contradiction is the point of the article, and it is what the eighth and closing piece will build on.


1. Thirteen Microseconds

At 22:00 UTC on 25 January 2016, the United States Air Force removed the oldest satellite in the GPS constellation, SVN 23, from service. A routine decommissioning, planned and unremarkable.

A ground software fault meant that the removal introduced an error into the timing message broadcast by several other satellites. The Coordinated Universal Time signal went out thirteen microseconds wrong.

Thirteen millionths of a second. A position fix built on that would be off by a few kilometres — enough to matter to a missile and not to a motorist. But a great deal of equipment on the ground was not using GPS to find out where it was. It was using GPS to find out what time it was, and for that equipment thirteen microseconds is an eternity.

First alarms were logged at 00:21 UTC. The first support call came at 02:00. Fixed-line operators in the United Kingdom and Sweden saw failures, along with mobile carriers, transport communications networks and broadcast systems. One major customer found roughly two thirds of its GPS timing equipment affected, and nearly 2,500 alarms fired across customer networks. Public acknowledgement came at 07:49 UTC, about seven and a half hours after the first alarm, and the disruption ran for roughly twelve hours with some effects persisting for two more days.

Nobody had attacked anything. A satellite was retired on schedule and a software defect translated that into a continent-scale telecommunications incident.

The finding that organises this article. Every other substrate in this series is something an organisation buys. There is a contract, an invoice, a supplier, a line in a budget and somebody whose job includes it. Timing is not bought. It arrives free from the sky, it is embedded in equipment by manufacturers rather than selected by purchasers, and it appears on no bill of materials. So the constraint here is not price, politics, repair capacity or the incumbent's pricing power. It is that the dependency has no owner — and a dependency nobody owns cannot be managed, budgeted for, or in most cases even located.

That is why this row closes the series. It is the layer underneath the other six, and it is the one about which the least is known by the people most exposed to it.

2. What a Timing Failure Actually Does

Almost everyone thinks of satellite navigation as navigation. For critical infrastructure it is overwhelmingly a clock, and that distinction decides what failure looks like.

What actually depends on it

Each of the six substrates in this series rests on precise time, usually without anyone thinking about it.

—  Electricity. Synchrophasor measurement compares the phase of alternating current at points hundreds of kilometres apart, which requires them to agree on time to within microseconds. Fault location and protection schemes depend on it.

—  Computing. Distributed databases order transactions by timestamp and data centres synchronise across sites. Without a common clock, consistency guarantees degrade in ways that are hard to detect and harder to unwind.

—  Shipping, water and logistics. Navigation, port operations, the identification systems the earlier articles used for traffic counts, and supervisory control that timestamps events across dispersed sites to reconstruct what happened in what order.

—  Connectivity. Mobile networks time-align transmissions between base stations; without synchronisation, cells interfere with each other and capacity collapses. The 2016 event hit exactly this.

Finance adds its own layer: regulated timestamping of trades requires traceability to a reference clock, with tolerances specified in microseconds.

Running the instrument

Question

For timing

Answer

Concentration

How many separate sources exist?

Four global constellations, several national systems. Diverse on paper, and all one physical principle: a weak unauthenticated signal from space

Criticality

What stops if it fails?

Eventually almost everything, but not at once. Holdover clocks mask the loss for hours to days, which is why it is invisible

Substitution time

How long until the alternative works?

Short. Terrestrial and fibre-based timing are mature, deployable technology. This is the best answer in the series

Restoration time

How long before the original returns?

Usually hours. A signal is restored, not rebuilt. Also the best answer in the series

Four questions, four good answers, and an exposure that two governments have now priced in the billions a day. Something is missing from the instrument.

The question the instrument should be asking

Who owns this dependency — whose budget, whose contract, whose job description?

For the grid, the answer is a utility. For chips, a procurement director. For water, a plant manager. For timing, in the overwhelming majority of organisations, the answer is nobody. The GPS receiver came inside a base station, a protection relay, a trading appliance or a network switch. It was specified by the manufacturer, it costs nothing to run, and no one has ever renewed a contract for it.

A dependency with no owner is invisible to every process an organisation uses to manage risk. Not in the supplier register, because there is no supplier. Not in the contract review, because there is no contract. Never touched by a cost exercise, because it has no cost. And it survives every reorganisation, because nothing that is nobody's job gets reassigned.

Why holdover makes it worse

Equipment that depends on precise time generally carries an internal oscillator that keeps running when the satellite signal is lost. A modest oscillator holds accuracy for hours; a good one for days; a rubidium standard for considerably longer.

Excellent engineering with an awkward consequence. An outage produces not a failure but a quiet countdown, invisible from outside, ending at different moments for different equipment depending on the oscillator each contains. The failure arrives late, scattered and without an obvious common cause — precisely the signature that defeats diagnosis.

In January 2016 the cause was not a loss of signal but a wrong signal, which holdover does not protect against at all. Equipment that would have ridden out a twelve-hour outage without noticing failed within minutes of being told the wrong time, because it had no reason to doubt it.

3. Subtheme One — The Dependency With No Customer

If nobody buys timing, then nobody is in the market for an alternative, and that explains the strangest feature of this substrate: mature replacement technology exists and has struggled for decades to find a buyer.

The alternatives are not hard

Terrestrial long-range navigation — eLoran — is a low-frequency ground-based system, hard to jam because of its signal strength and accurate enough for most infrastructure uses. Fibre-based time distribution from national laboratories is in service, local atomic clocks have been commercially available for years, and receivers with signal authentication are now shipping; Galileo's authenticated navigation message has been operational since July 2025.

None of this requires invention. It requires somebody to buy it.

Why the market does not clear

The failure is structural and it is worth stating precisely, because it is the mechanism that keeps the exposure open.

—  The incumbent is free. Any alternative competes against a service with zero marginal cost, which is an unusual competitive position and a brutal one.

—  The buyer is diffuse. The benefit of resilient timing accrues to a whole economy; the cost falls on individual equipment owners, none of whom captures much of it. This is the standard shape of a public good, and markets do not supply those.

—  The risk is invisible until it is not. Holdover means the exposure produces no incidents in ordinary operation, so the business case has no incident to point at.

—  Nobody holds the brief. With no owner, no one is positioned to propose the purchase, and a proposal from an engineer who noticed the problem competes against projects with revenue attached.

Second-order effect worth naming. Because the market cannot clear, this dependency is resolved by the state or not at all. That makes the national programmes now appearing the only route to a fix, and it means the timetable is set by budget cycles and elections rather than by engineering. The same structure appeared in the fifth row, where a price floor was needed to make an alternative viable, and in the sixth, where repair capacity earns nothing between faults. Three of the last three substrates share it.

What the state response actually looks like

The United Kingdom provides the clearest worked example, because the figures are public. On 19 November 2025 it committed £155 million across four lines: £71 million for a national eLoran system, £68 million for a national timing centre led by the national physical laboratory, £13 million for interference monitoring, and £3 million for research into space-based time transfer. The justification cited was that a twenty-four hour satellite navigation outage could cost the economy around £1.4 billion.

Two things are worth drawing out of those numbers rather than the announcement around them.

The first is the ratio. A programme of £155 million addresses a stated exposure of £1.4 billion a day, so if the estimate is even approximately right the whole thing costs less than three hours of the outage it prevents. This was never a question of affordability. It was a question of ownership, and the exposure sat unaddressed through the two decades in which the dependency was built.

The second is the composition. Only £13 million of the £155 million goes to monitoring — finding out what is happening — while £139 million goes to building alternatives. That split is unusual and, on the evidence of this series, correct. The equivalent spending in the connectivity row has gone overwhelmingly the other way, toward surveillance rather than repair.

4. Subtheme Two — Interference Became Weather

While the structural dependency went unmanaged, the threat environment changed completely, and it changed into a form that is easy to adapt to and hard to treat.

The numbers

European flights encountering satellite navigation interference rose from roughly 200 a day in the first quarter of 2024 to around 900 a day in the second. Signal-loss events reported by the airline industry increased by about 220 percent between 2021 and 2024. Up to 38 percent of European en-route traffic now operates through regions intermittently affected by radio-frequency interference.

The hotspots are legible: the Baltic, eastern Europe, the Black Sea, the eastern Mediterranean, and a broad band across the Middle East. Around Vilnius, pilots reported more than 800 interference cases in late 2024 against 124 in the same period of 2023.

Operational consequences have followed. One airline suspended service to Tartu in 2024 after interference prevented approaches. A flight to Vilnius was diverted to Warsaw in January 2025. The European aviation regulator published a fourth revision of its safety bulletin on satellite navigation outages on 3 July 2026, and updated an interference ranking dashboard on 15 July.

Jamming and spoofing are different problems

The distinction matters more than the headline figures, because the two call for opposite responses.

Jamming denies the signal. It is loud, obvious and locally detectable; equipment knows it has lost its reference and falls back to holdover. Unpleasant, manageable, and the thing most preparation addresses.

Spoofing supplies a false signal that the receiver accepts as genuine. There is no fallback, because nothing has failed from the receiver's point of view. It is the 2016 failure mode produced deliberately, and it defeats holdover entirely — an aircraft, a base station or a trading system told the wrong time with full confidence behaves worse than one told nothing.

Authentication addresses spoofing and does nothing about jamming. A second constellation addresses neither, since both affect the whole band. Terrestrial timing addresses both and costs money. The responses are not interchangeable and they are frequently discussed as if they were.

The adaptation problem

Aviation has adapted well, which is the uncomfortable part. Procedures exist, crews are trained, approaches are flown on other aids, bulletins are revised, dashboards are published. Flights continue. Nothing has fallen out of the sky.

Successful adaptation converts an emergency into a condition, and conditions do not get fixed.

This is the same mechanism the previous article found in submarine cables, where rerouting worked so well that the forty-day repair window became invisible. Here it is stronger, because the adaptation is genuinely excellent and the affected sector is the one with the most mature safety culture in the world. Aviation absorbed it. Power, telecommunications, finance and water have the same underlying exposure, far less visibility into it, and no equivalent of a safety bulletin.

5. What Most Analysis Gets Wrong

Four errors recur, and each changes a decision.

—  Treating it as navigation. For critical infrastructure this is a clock, not a map. An organisation that concludes it has no satellite navigation exposure because nothing it owns moves has answered the wrong question entirely.

—  Counting constellations as diversity. Four global systems sound like four alternatives. They are four instances of one physical principle — a faint signal from orbit, in adjacent bands, received by equipment that cannot easily tell a good signal from a convincing fake. Jamming takes them together.

—  Reading holdover as resilience. Holdover is an excellent delay and not a solution. It converts an immediate, diagnosable failure into a scattered one arriving hours or days later with no obvious common cause, and against a wrong time rather than a missing one it provides no protection at all.

—  Assuming the market will solve it. The incumbent is free, the benefit is diffuse, and the risk is invisible in ordinary operation. Those three conditions together describe something markets reliably fail to supply, which is why the only real progress here is appearing on government balance sheets.

6. Base, Stress and Extreme

Three ways the next decade runs, so the forecasts below have a frame.

Base — national programmes, sectoral silence

Interference stays routine in the current hotspots and spreads modestly while aviation continues to adapt well. One or two more states fund terrestrial timing and national timing centres, delivering late in the decade. Power, telecommunications and finance largely do not act, because the exposure stays invisible and unowned and no regulator requires them to look. The most probable path, and it describes 2026.

Stress — a spoofing incident outside aviation

A wrong-time event, deliberate or accidental, reaches a sector without aviation's procedural depth: mobile networks desynchronise, a protection scheme misoperates, or timestamped records diverge across a financial venue. The outage runs hours and the diagnosis takes longer than the outage, because nobody there owns timing and nothing in the monitoring would name it. The lasting effect is not the disruption. It is that the dependency acquires an owner.

Extreme — sustained denial over a region

Interference turns continuous rather than intermittent across a populated region for weeks, during wider confrontation. Holdover expires in waves across equipment classes. The cost estimates that look theoretical — around a billion a day for a mid-sized economy — get tested. Low probability, and the scenario that would retrospectively make every national timing programme look cheap.

7. Forecast — One Year, to end-2027

Direction. At least one further G7 or European Union government announces a national positioning, navigation and timing resilience programme with committed funding of at least €50 million. Probability 0.60. Confidence: Medium.

The United Kingdom has published a template with a costed four-part structure and an explicit economic justification, and the European Union already runs a complementary timing programme that has not yet produced a comparable national commitment. Interference is concentrated on European borders, which keeps the issue in front of the right ministries. The threshold is deliberately modest, since the bar is a real budget line rather than a strategy document.

Second-order effect. A second national programme turns a national decision into a norm, and norms in this area propagate through standards bodies rather than through politics. Once two states fund terrestrial timing, equipment manufacturers have a reason to support it by default, and the dependency starts acquiring an owner inside the supply chain rather than only inside government.

What weakens it. Defence budgets are absorbing most of the attention and most of the money in exactly the states most exposed to interference, and PNT resilience is easy to fold into a defence programme where it becomes invisible as a civil commitment. A classified or defence-badged equivalent would not resolve this forecast.

8. Forecast — Three Years, to 2029

Direction. At least one national regulator imposes a binding requirement for satellite-independent timing or minimum holdover on a critical civil sector — power, telecommunications or finance. Probability 0.55. Confidence: Medium.

This forecast tests the article's central claim directly. Funding alternatives is the easy half; assigning the dependency to someone is the half that closes the gap, and regulation is the only mechanism that creates an owner where no commercial relationship exists. Financial timestamping rules show that regulators will specify time to microsecond tolerances when they care, so the instrument exists and has not been pointed here.

Second-order effect. A holdover mandate would create the buyer this market has never had. The moment a sector must demonstrate a minimum holdover under audit, atomic clocks and terrestrial timing acquire a procurement category, a budget line and a compliance deadline — which is how a public good gets purchased privately.

What weakens it. Regulators move after incidents, and this exposure has conspicuously failed to produce one in a civil sector outside aviation. Three years is a short window for a mandate with real cost attached and no event behind it, and guidance without a binding requirement is the far more likely output.

9. Forecast — Five Years, to 2031

Direction. Satellite navigation interference is still reported by European aviation authorities as a routine operational condition at the end of 2031, with guidance material in force. Probability 0.75. Confidence: Medium-High.

Interference is cheap to produce, hard to attribute and useful to several parties on Europe's eastern and southern approaches. Nothing in the trajectory suggests it reverses, and the regulatory response has been to institutionalise it: four revisions of a safety bulletin and a standing dashboard are the apparatus of a permanent condition, not of an incident. The forecast is essentially that successful adaptation keeps working.

Second-order effect. Five more years of normalised interference will complete the transfer of this problem from the category of threat to the category of weather, and weather is budgeted for differently. The risk is not that aviation stops coping. It is that other sectors conclude from aviation's competence that the underlying exposure is handled.

What weakens it. A broad de-escalation across the Baltic, Black Sea and eastern Mediterranean would remove most of the current sources at once, since this interference is overwhelmingly a by-product of confrontation rather than an end in itself.

10. Forecast — Ten Years, to 2036

Direction. A satellite timing failure or denial causes a publicly attributed outage of more than four hours in a non-aviation critical sector — power, telecommunications, finance or broadcast — in a G7 country, between 2027 and 2036. Probability 0.60. Confidence: Medium.

The mechanism has already happened once, in January 2016, from a software defect during a routine decommissioning rather than from any hostile act. Nothing structural about that pathway has been closed: the dependency is wider now, holdover provides no defence against a wrong time, and spoofing capability has become common enough to appear in routine aviation reporting. Ten years is a long window for a repeat with a clearer attribution.

Second-order effect. Public attribution is the variable that matters more than the outage. The 2016 event was diagnosed and then largely forgotten, because telecommunications failures get attributed to telecommunications. An outage named publicly as a timing failure would give this dependency an owner in every affected sector within a year — which is a decade of policy accomplished by one bad afternoon.

What weakens it. Attribution is genuinely hard and rarely published. The failure mode this forecast describes may well occur and be recorded as a network fault, a protection misoperation or a vendor defect, exactly as much of 2016 was. This forecast could fail while the underlying claim is entirely correct.

11. Signals to Watch

Five observable items, each published, each moving before the outcomes above.

—  National PNT programme funding, counted as committed budget lines rather than strategies, and split between monitoring and building alternatives. The split tells you whether a government intends to watch the problem or fix it.

—  Regulatory language moving from guidance to requirement in any civil sector. The word that matters is whether holdover is recommended or mandated, and it is a one-word difference with an entire market behind it.

—  European interference reporting — flights affected, regions listed, bulletin revisions. This is published, frequently updated, and the best available proxy for the threat environment.

—  Shipment of authenticated and multi-source timing receivers as a default rather than an option. Manufacturer defaults change exposure faster than procurement decisions, because the equipment arrives already resilient.

—  Any incident in a civil sector attributed publicly to timing. One such attribution would move this substrate further in a month than the preceding decade managed.

Read together: the first two measure whether the dependency is acquiring an owner, the third measures the environment, and the last two are where change actually becomes visible. This substrate improves when somebody becomes responsible for it, and every other indicator is downstream of that.

12. Recommendations — Individuals

This is the substrate on which an individual has the least direct leverage, and the most useful thing to take from it is conceptual rather than practical.

Immediate — 30 days

If your work touches infrastructure, engineering, networks, trading systems or industrial control, find out whether anything you are responsible for takes its time from a satellite. One conversation, and in most organisations nobody has asked it. You are likely to be the first, which is the point of this article.

Build — 12 months

Treat satellite navigation on your phone and in your car as a convenience that is already intermittently unreliable in parts of Europe and the Middle East, rather than as a utility. Keep the habit of knowing roughly where you are and how you would get there without it. This costs nothing and it is the only part of this subject that touches daily life.

Position — 3 years

The transferable lesson is larger than timing. Look for the dependencies in your own work that nobody owns because they have never cost anything — a tool everyone uses that no one administers, a source everyone trusts that no one verifies, a process that works because one person happens to run it. These survive every review, because reviews examine things that have a budget.

Avoid. Concluding that this does not concern you because you own nothing that navigates. The dependency is on time, not position, and it is embedded in equipment that was specified by someone else years ago.

Why this works. The specific question — does anything here take time from a satellite — is cheap to ask, usually unanswered, and in an organisation of any size it is the start of the first inventory anyone has made.

13. Recommendations — Business

For any organisation running networks, industrial control, distributed systems or regulated timestamping, this is the exposure most likely to be entirely undocumented.

Immediate — 60 days

Inventory your timing sources. Which systems take time from a satellite receiver, which take it from a network protocol that itself traces back to one, and which hold their own reference? This is a half-day exercise in a small organisation and a short project in a large one, and it is almost always the first time the question has been asked.

Then establish each system's holdover: how long after losing the signal does it stay within tolerance, and what happens when it drifts out? Manufacturers publish this and users rarely read it. The output is a list of your systems ordered by how long they survive, which is your failure sequence.

Build — 12 months

Give the dependency an owner, explicitly, in a job description. The highest-value action in this article, and it costs nothing. Without it the inventory above gets done once, filed and not maintained, and the organisation is back where it started within two years.

Then address the wrong-time case rather than the no-time case. Holdover handles signal loss; nothing in a default configuration handles a plausible but incorrect time. Receivers with signal authentication, cross-checks between independent sources, and alarms on unexpected time steps are the specific countermeasures, and they are cheap relative to the systems they protect.

Position — 3 years

Specify timing in procurement. Equipment is selected on function and price, with its timing source an undisclosed implementation detail — which is how this dependency was acquired. Asking at purchase is how an organisation stops acquiring more of it.

And for genuinely critical operations, hold an independent reference — a local atomic standard, a fibre time feed, or a terrestrial service where one exists. The cost is modest against the systems concerned, and the case has to be made on exposure rather than on incidents, because the incidents are what this is meant to prevent.

Avoid. Treating a second satellite constellation as diversity. Receiving two constellations protects against one system's error and not against interference, which affects the band rather than the satellite.

Why this works. The inventory and the named owner together convert an invisible dependency into a managed one, and everything else in this substrate — budget, procurement, countermeasures — follows from having someone whose job it is.

14. Recommendations — Capital

The structural point is that a dependency with no customer cannot be priced, and this one is being transferred onto public balance sheets in a way that creates a market where none existed.

Immediate — this quarter

For holdings in network operation, utilities, exchanges or industrial control, establish whether timing appears anywhere in their risk disclosure. It generally will not, and the absence is informative rather than reassuring: an exposure not inventoried, rather than one assessed and found small.

Build — 12 months

Watch regulation rather than technology. The technology has been available for decades and has not sold, because there is no buyer. A holdover mandate in any major jurisdiction creates that buyer at a stroke, with a compliance deadline attached, and that is a different kind of demand from the one this sector has lived with.

And read national programme composition, not size. The United Kingdom put £139 million of £155 million into building alternatives and £13 million into monitoring. A programme weighted the other way is a government studying the problem, which generates far less procurement than one building a system.

Position — 3 years

The durable observation is that this is the third consecutive substrate in this series where the market structurally cannot supply resilience and the state has become the only available buyer — after the price floor for refined materials and the repair capacity for submarine cables. Three instances is a pattern rather than a coincidence, and the common feature is an asset that earns nothing in normal operation and everything in a failure that has not happened yet. That is an observation about where public capital is being pulled, not a recommendation about any instrument.

Avoid. Pricing this on incident history. There is almost none outside aviation, and the absence reflects holdover and poor attribution rather than a low underlying exposure. The 2016 event was recorded by most of those affected as a telecommunications fault.

Why this works. Government programme documents, regulatory consultations and interference dashboards are all public and slow-moving, and in this substrate they lead the commercial market rather than following it, because the commercial market has never existed.

15. What Would Change Our Mind

Each forecast carries its own weakening condition. Three developments would undermine the article as a whole.

—  The dependency acquires an owner without regulation. If a significant number of operators inventory and budget for timing on their own initiative, the public-good framing is wrong and the market is slower than we claim rather than structurally unable.

—  Manufacturer defaults close the gap. If authenticated multi-source receivers with long holdover become the standard fitment in infrastructure equipment, the exposure shrinks without anyone deciding anything, and the ownership problem stops mattering.

—  Interference reverses. We treat it as a durable condition. A broad de-escalation that returned European reporting to 2021 levels would mean we have mistaken a phase of a conflict for a structural change.

Jurisdiction and sourcing, recorded on the seventh row. A European article with an American root cause: the interference data is European aviation reporting, the policy example British, the 2016 event from the United States constellation. Asia is absent apart from a passing reference, and China's own eLoran deployment is an omission we could not source to the standard used here. On sourcing, the 2016 event is well documented in an industry case study. The interference statistics are counts of reports rather than of events, so some of the rise is better reporting. And the estimate of roughly £1.4 billion a day is a government-cited model, not an observed cost, with no outage of that duration to test it. Each is labelled below.

The Series II Table — seven rows, complete

Substrate

Concentration

Criticality

Substitution time

Direction

Electricity grid

One per region; no alternative path

Total and immediate; binary

4–7 yrs to connect; 3+ yrs transformer

Worsening. Waits doubled in 15 years

Computing (frontier)

Leading packaging effectively one supplier at volume

Total for frontier AI; low for ordinary electronics

52–78 wks packaging; years for a second source

Constraint moving downward, not disappearing

Maritime chokepoints

Multiple routes exist; Cape route used within weeks

Low for supply; high for cost and schedule

Days to weeks to reroute

Partial recovery; structurally below pre-crisis

Water

One per basin; cannot be imported

Total for fabs, quickly. Moderate for data centres

No engineering answer. Reallocation takes as long as the politics

Managed continuously; efficiency rising, volume faster

Refined materials

Geologically wide, industrially near-single: ~91% of refining

Magnets, and so vehicles, turbines, aircraft, munitions

3–7 yrs to build; indefinite to become viable, because the incumbent sets the price

Two-tier market forming; controls now permanent

Connectivity

574 systems converging at chokepoints and ~71% of capacity in a few hands

None at the core; total at the edge

Seconds, automatic. Restoration ~40 days median

Faults steady; repair fleet ageing and not growing

Timing and position

Four constellations, one physical principle: a weak unauthenticated signal from space

Eventually almost everything; masked by holdover for hours to days

Short. Alternatives are mature and have no buyer

Interference normalised; first state programmes funded

What seven rows show. The instrument needed repair three times, and each repair went deeper than the last. Water showed that substitution time can be political. Refined materials showed it can be financial. Connectivity showed it can be the wrong measurement, and added restoration time as its companion. This row shows something different again: all four questions can return good answers while the exposure remains severe, because every one of them describes the world and none of them describes the organisation standing in front of it.

A substrate is not managed by anybody until somebody owns it. That is not a measurement of concentration, criticality, substitution or restoration. It is a question about a job description, and it turns out to be the one that decides whether the other four ever get asked.

Series II closes next week by putting the seven rows together — what they share, where they intersect, and what the whole table says that no single row could.


16. Bottom Line

On 25 January 2016 the United States Air Force retired the oldest satellite in the GPS constellation, and a ground software fault put thirteen microseconds of error into the time signal broadcast by several others. Fixed-line operators in Britain and Sweden failed, along with mobile carriers, transport communications and broadcast systems. One company found two thirds of its timing equipment affected and nearly 2,500 alarms firing.

Nobody attacked anything. A routine decommissioning and a software defect produced a continent-scale telecommunications incident, because an enormous amount of equipment was using satellites not to find out where it was but what time it was.

That is this row, and it is the layer underneath the six before it. Grids compare phase across hundreds of kilometres. Databases order transactions by timestamp. Mobile networks time-align between base stations. Exchanges timestamp trades to a regulated tolerance. All of it on a signal from space that nobody buys.

Which is the actual finding. Every other substrate in this series has a contract, a supplier, an invoice and somebody whose job includes it. Timing has none of those. The receiver arrived inside equipment specified by a manufacturer years ago, it costs nothing to run, and it appears on no bill of materials. A dependency nobody owns is invisible to every process an organisation uses to manage risk — not in the supplier register because there is no supplier, not in the contract review because there is no contract, and never cut in a cost exercise because it has no cost.

Holdover makes it worse by making it quiet. Equipment carries its own oscillator and rides out a lost signal for hours or days, so an outage produces a hidden countdown rather than a failure — ending at different moments for different systems, scattered and late, with no obvious common cause. Against a wrong time rather than a missing one it protects nothing, which is what January 2016 demonstrated and what spoofing now reproduces deliberately.

Meanwhile the environment changed completely. European flights encountering interference went from roughly 200 a day to 900 within one quarter of 2024, reported signal-loss events rose about 220 percent between 2021 and 2024, and up to 38 percent of European en-route traffic now crosses affected regions. Aviation adapted superbly, and that success is the problem: successful adaptation converts an emergency into a condition, and conditions do not get fixed. Power, telecoms, finance and water share the exposure with none of the visibility.

The fix is not technically hard. Terrestrial timing, fibre distribution and local atomic clocks are mature and have struggled for decades to find a buyer, because the incumbent is free, the benefit is diffuse and the risk is invisible until it is not. So the state has become the only available purchaser. Britain committed £155 million in November 2025 against a stated exposure of £1.4 billion a day — a programme costing less than three hours of the outage it prevents, which tells you this was never about affordability.

For anyone with a decision in front of them: ask whether anything you run takes its time from a satellite, find out how long each system holds out when that stops, and put somebody's name against it. The last of those is free and it is the one that matters, because nothing that is nobody's job ever gets done.


Forecast record

Four forecasts, one per horizon, each with a threshold, a named source that will settle it, and a date fixed before the answer is known.

Horizon

Forecast, resolving yes or no

P

Resolves

1 year

At least one further G7 or EU government announces a national PNT resilience programme with committed funding of at least €50 million

0.60

31 December 2027 · government announcements and published budget documents

3 years

At least one national regulator imposes a binding requirement for satellite-independent timing or minimum holdover on power, telecommunications or finance

0.55

31 December 2029 · regulations and statutory instruments in force

5 years

European aviation authorities still report satellite navigation interference as a routine operational condition, with guidance material in force

0.75

31 December 2031 · EASA safety publications and EUROCONTROL reporting

10 years

A satellite timing failure or denial causes a publicly attributed outage of more than four hours in a non-aviation critical sector in a G7 country

0.60

31 December 2036 · regulator incident reports and operator statements

Correlation. Two drivers, pulling in opposite directions on the same endpoint. The first and second share a parent cause in the policy response and move together: a government that funds alternatives is more likely to be one that eventually mandates them. Both bear inversely on the fourth, since resilience built is outage avoided. The third tracks the interference environment, which is driven by confrontation rather than by policy, and bears positively on the fourth. So the ten-year forecast is the only one that is not independent of anything — it sits downstream of both other drivers, pulled down by the policy pair and up by the interference forecast. That is a weaker set than it looks, and the weakness is in the one with the longest horizon.

Directional statements elsewhere in this article carry no threshold and are excluded from the record.

Sources

Figure

Class

Source

26 January 2016 event: SVN 23 removed from service 25 January 22:00 UTC; ground software fault; UTC timing signal off by 13 microseconds; four satellites reported errors; first alarms 00:21 UTC, first support call 02:00, public acknowledgement 07:49; roughly 12 hours of significant impact with effects into 28 January; around two thirds of one customer's GPS timing estate affected and nearly 2,500 alarms; failures in UK and Swedish fixed-line operators, mobile carriers, transport communications

Measured

Industry case study of the event, with operator-reported detail

European flights encountering GNSS interference rose from ~200 a day in Q1 2024 to ~900 a day in Q2 2024

Reported

European aviation reporting as compiled, 2026. A count of reports, not of events

GPS signal-loss events up ~220% between 2021 and 2024

Reported

Airline industry association figures as compiled. Part of the rise reflects improved reporting

Up to 38% of European en-route traffic operates through regions intermittently affected by radio-frequency interference

Estimate

European air traffic management analysis as compiled

More than 800 interference cases reported around Vilnius in late 2024 against 124 in the same period of 2023; Finnair suspended Tartu service in 2024; a Vilnius flight diverted to Warsaw in January 2025

Reported

Operator statements and contemporaneous reporting

EASA published a fourth revision of its GNSS outage safety bulletin on 3 July 2026 and updated a 30-day interference ranking dashboard on 15 July 2026

Measured

Regulator publications, dated

Galileo Open Service Navigation Message Authentication operational since July 2025

Measured

Programme announcement

UK commitment of £155 million announced 19 November 2025: £71m eLoran, £68m national timing centre, £13m interference monitoring, £3m space-based time transfer research

Measured

Government announcement and programme documentation

A 24-hour satellite navigation outage estimated to cost the UK economy around £1.4 billion

Modelled

Government-cited economic model derived from a 2017 study of a five-day disruption. No outage of this duration has occurred to test it

 

THRIVE IN CHAOS

Signal Over Noise  ·  thriveinchaos.ai

AI intelligence system with human editorial oversight. Analytical material, not investment, legal or tax advice.

Join the newsletter

Be the first to read our articles.

Read More

Oct 7, 2026

12 min read

DAILY PULSE | October 7, 2026

The Strait of Hormuz provides the clearest example. Gulf oil exports have recovered sharply. At the same time, maritime-security sources recorded at least 12 attacks, attempted attacks or harassment incidents involving oil, LNG and LPG tankers around Hormuz between September 28 and October 5 — the highest weekly total since the Iran war began. Separate IMO data recorded nine incidents over the same period.

Oct 7, 2026

12 min read

DAILY PULSE | October 7, 2026

The Strait of Hormuz provides the clearest example. Gulf oil exports have recovered sharply. At the same time, maritime-security sources recorded at least 12 attacks, attempted attacks or harassment incidents involving oil, LNG and LPG tankers around Hormuz between September 28 and October 5 — the highest weekly total since the Iran war began. Separate IMO data recorded nine incidents over the same period.

Oct 7, 2026

16 min read

THE WRONG DENOMINATOR

The explanations offered were cyclical, and they are correct as far as they go. Mortgage rates in Japan are rising for the first time in a generation. Investors who bought to resell quickly are unloading inventory ahead of stricter rules. The Financial Services Agency has signalled closer supervision of property lending. Prices are still up 24% on a year earlier. Nobody serious is calling this a crash.

Oct 7, 2026

16 min read

THE WRONG DENOMINATOR

The explanations offered were cyclical, and they are correct as far as they go. Mortgage rates in Japan are rising for the first time in a generation. Investors who bought to resell quickly are unloading inventory ahead of stricter rules. The Financial Services Agency has signalled closer supervision of property lending. Prices are still up 24% on a year earlier. Nobody serious is calling this a crash.

Oct 6, 2026

14 min read

Daily Pulse | October 6, 2026

Oil is moving again. Gulf crude flows have recovered strongly. Alternative routes are being used. Governments are preparing emergency reserve releases. Companies are finding replacement suppliers. If we looked only at physical supply, this would be a story of recovery. But the economic system is telling us something different. Refined fuel supply remains much weaker than crude supply. Replacement barrels are expensive. Freight and insurance remain elevated. Strategic reserves are being consumed. Commercial shipping risks are spreading. Financing remains expensive.

Oct 6, 2026

14 min read

Daily Pulse | October 6, 2026

Oil is moving again. Gulf crude flows have recovered strongly. Alternative routes are being used. Governments are preparing emergency reserve releases. Companies are finding replacement suppliers. If we looked only at physical supply, this would be a story of recovery. But the economic system is telling us something different. Refined fuel supply remains much weaker than crude supply. Replacement barrels are expensive. Freight and insurance remain elevated. Strategic reserves are being consumed. Commercial shipping risks are spreading. Financing remains expensive.