Cybersecurity and digital sovereignty · Article published on LinkedIn on 15 April 2026
The European Architecture of Trust: The Ethical-Systemic Protocol of Operational Sovereignty
The unanimity rule as a single point of failure, and a Byzantine fault-tolerant consensus with human control
Gaspar do Amaral · 15 April 2026
Translated from the Portuguese original. This version was issued on 30 October 2026.
On this site, this article has been

By Eng. Gaspar do Amaral
Integrating cyber-physical transport and communication systems — on land, at sea and in the air — teaches an unchanging premise: governance is not a debate of opinions. Governance is the “Critical Software” that runs the infrastructure of a nation or of a bloc. When the software fails, the hardware of security and of the economy collapses. Yet the rigour of engineering shields politics.
The current institutional deadlock in the European Union, exhaustively documented in the competitiveness reports of Mario Draghi and Enrico Letta (2024), demands a fail-safe systems architecture.
1. The Diagnosis: the Intransigent Veto as a Point of Collapse
In network engineering, any component with the power to halt the traffic of the whole infrastructure is classed as a Single Point of Failure (SPOF), a vulnerability that Albert-László Barabási shows to be catastrophic in decentralised networks. The unanimity rule in the European Council is exactly that: an institutional SPOF.
By requiring absolute consensus, the system creates tight coupling, a concept dissected by Charles Perrow, in which a single “compromised node” acts as a switch of total paralysis. In the face of hybrid attacks or geopolitical crises, this architecture generates a destructive Decision Latency. As Joseph Tainter warns, the blind maintenance of these hypercomplex structures is unsustainable. Believing that political persuasion solves structural vulnerabilities in an interconnected system is pure bureaucratic illusionism.
2. The Resilience Protocol: n ≥ 2f + 1 and Human Control
The solution to European paralysis is not political; it is architectural. Europe must urgently migrate to a Byzantine Fault Tolerant (BFT) Consensus model, whose founding principles were mathematically proved by Leslie Lamport, Robert Shostak and Marshall Pease.
In distributed computing, the BFT algorithm and its practical applications developed by Miguel Castro and Barbara Liskov (PBFT) assume that in a decentralised system there will always be nodes acting arbitrarily or maliciously (“traitors”). The security of the system is guaranteed by a rigorous mathematical formula:
n ≥ 2f + 1
This means that in a union of 27 (n) we need a quorum of 14 votes to validate an action, allowing the system to work even if 13 nodes (f = 13) act dysfunctionally. This mathematical choice is intrinsically political. It does not cancel the classic qualified majority, but creates a shielded quorum of operational security.
The Ethical Shield (the New Dimension):
- Auditability and Ethics by Design: the code of the consensus algorithm must be open and auditable by independent institutions and by citizens.
- Compliance Rules Defined Politically: the algorithm does not define ethics. The algorithm checks compliance rules that have been democratically and politically defined and validated by elected bodies.
- Transparent Restoration Mechanism: “islanding” (functional isolation) allows access to the benefits to be restored automatically and auditably at the exact moment when technical compliance (NIS2, etc.) and institutional compliance are verified and validated through transparent criteria.
Practical Demonstration: the Case of Hungary vs. Ukraine
The Hungarian blockage of the 50-billion-euro support package for Ukraine is the perfect example of the institutional SPOF.
- The Failure: a single node (Hungary), under internal investigation, hijacked the vital security function of the whole European network (the remaining 26).
- Resolution by Protocol: if the system operated under the BFT model, the intention of the 26 States would go ahead immediately, because the security quorum (26 > the 14 needed) would be validated. The “Byzantine traitor” would be isolated from the command process, preventing its internal dysfunction from injecting catastrophic latency into the geopolitical resilience of the continent.
3. The Action Plan: Installing Humanist Engineering
European leaders should treat the amendment of the Treaties not as a loss of power, but as the installation of a national and European security patch, based on:
- Audit of Pain Points (Deliberative Co-Design): use Nancy Leveson’s STAMP methodology to audit where decision paralysis most degrades the physical integrity of the continent (Energy, Defence), in a process of deliberative co-design with the participation of citizens.
- n ≥ 2f + 1 Consensus in Critical Agencies: quorum algorithms in Energy and Defence, where physics allows no delays.
- Transparency and Accountability: establish a body for the Democratic Oversight of the Protocol, with powers of audit and veto over the coded compliance rules.
Leaders, systems engineering does not deny ideology; precision mathematics is what keeps the circuit breakers of democratic freedom switched on.
References and Technical Grounding
- Albert-László Barabási - Network Science (2016): shows mathematically that systems highly dependent on centralised nodes or global validations (unanimity) are catastrophically fragile to ruptures. Justifies removing the EU’s structural SPOF.
- Charles Perrow - Normal Accidents (1984): introduced the concept of “tight coupling”. Proves that forced decision interdependence creates systems in which the dysfunction of one node triggers inevitable cascading collapses.
- Leslie Lamport, Robert Shostak and Marshall Pease - The Byzantine Generals Problem (1982): the mathematical pillar of the manifesto. Proves that a distributed system can act correctly even with “traitor” nodes, as long as unanimity is abandoned in favour of robust consensus metrics.
- Miguel Castro and Barbara Liskov - Practical Byzantine Fault Tolerance / PBFT (1999): turns Byzantine theory into a practical protocol for modern networks. Provides the software-engineering basis for redesigning the European Council.
- João Peças Lopes - Integration of Wind Energy and Smart Grids (Islanding): micro-grid models that allow problematic sections to be isolated while keeping the rest alive. It is the physical basis for the functional exclusion of infringing States.
- Paulo Veríssimo - Intrusion Tolerance: argues that cyber-physical networks must operate even under the control of the internal enemy. Supports the implementation of a Zero Trust policy at Treaty level.
- Mario Draghi and Enrico Letta - Reports on Competitiveness and the EU Single Market (2024) (Draghi, Letta): high-level reports on Europe’s loss of productivity and fragmentation. Gaspar do Amaral turns this economic warning into an imperative need for systemic security.
- NIS2 Directive (EU) and the Cybersecurity of Critical Infrastructure: imposes the shielding of strategic infrastructure. Acts as the “algorithmic passport” that validates or suspends States’ privileges of political decision.
- Nancy Leveson - Engineering a Safer World (STAMP methodology): proves that systemic failures derive from poor design of the control architecture between components. Focuses the problem on the design of the European voting protocol.
- Joseph Tainter - The Collapse of Complex Societies (1988): warns that increasing bureaucratic complexity to accommodate vetoes generates an unsustainable maintenance cost that precedes collapse.
Methodological note
What this page is. A translation of the article the author published on LinkedIn on 15 April 2026; the full Portuguese version is on this site. The only calculation is the quorum of the formula n ≥ 2f + 1 for n = 27: with f = 13, 2 × 13 + 1 = 27, and the article takes a quorum of 14 (= 27 − 13) votes, exactly as in the original.
Links. In the original, the links in the list of references pointed to a private working notebook that readers cannot open. Here each reference links to the source the article itself cites in the body, where there is one; the others are left without a link.
Changes of form, not of content. Titles of works stay as in the original. The heading of section 3, which in the original runs into the first sentence, is split into heading and paragraph. The original illustration is reproduced with its Portuguese texts and a translated caption.
The discussion is on LinkedIn (in Portuguese)
Comments on this text are made on LinkedIn, where the article was shared in Portuguese. You are welcome to write in English. Agree, disagree or add data: every well-founded objection receives a reply.
Gaspar do Amaral · Original in Portuguese of 15 April 2026, published on this site; translation issued on 30 October 2026 · Figures and tables © Aprecisa.com · AI-assisted
How to cite: Gaspar do Amaral (2026). A Arquitetura de Confiança Europeia: O Protocolo Ético-Sistémico da Soberania Operacional. Zenodo. https://doi.org/10.5281/zenodo.23814374 · Permanent archive on Zenodo.