The Emergency Lifeline.
A specification for a household connection that stays dark until somebody needs to call for help. It is written down here so it can be argued with, not because you can buy it.
Read this first
Read this before anything else
- Always call 911 first when a life is at risk. Nothing described here may ever replace the emergency number, and no design on this page should be relied on in an emergency.
- This is a design and specification exercise. It is not a shipping product, not a service, and not a recommendation to build one without qualified legal and radio advice.
- Any radio element must be lawful use of licensed or licence-free bands under the rules of your country. Jammers and interference are illegal under United States federal law.
- Nothing here authorises interfering with, deauthenticating, or transmitting over anybody else’s network or radio traffic.
The problem it responds to
A household that has gone dark on purpose — because a device is compromised, or the provider is down, or the region has lost service — still has to be able to reach out. The instinct is to reconnect everything and hope. That is precisely the wrong move, because the thing you disconnected from is often the thing that caused the incident.
The Lifeline concept separates two ideas that normally travel together: being connected, and being able to call out.
The four design principles
Dark by default
No listening service, no inbound path, no standing connection. If it is not being used to call out, it is off.
Allow-listed destinations
An emergency-only handset that can reach a short, explicit list: emergency services, two family numbers, the utility, the bank fraud line. Nothing else, in either direction.
Break-glass, not always-on
The connection is raised deliberately by a person, for a bounded time, with a visible indicator, and it drops itself again. A held button, not a toggle you forget.
Auditable and honest
Every raise is logged locally with a time and a reason. If it fails, it says so loudly rather than appearing to work.
What it would need to satisfy
| Requirement | Why it is non-negotiable |
|---|---|
| Never presented as an alternative to 911 | Emergency calling is a regulated, life-critical service with location delivery and call-back obligations that no household design can match. |
| Lawful spectrum use only | Licence-free and amateur bands each carry rules on power, content, encryption and identification. Off-grid mesh links must respect them. |
| No inbound reachability | An inbound path is an attack surface. The whole value of the design is that there is nothing to reach. |
| Physically evident state | A person under stress must be able to see whether the link is up, without interpreting a screen. |
| Independent power | A lifeline that depends on mains power fails exactly when it is needed. |
| Degrades honestly | If the destination is unreachable, it says so and points at the printed call tree instead of retrying silently. |
What it is not
- Not a replacement for the emergency number. Not in any circumstance, not even briefly.
- Not a private network for evading anybody, and not a tool for anonymity.
- Not a licence to transmit on bands you are not permitted to use, and not permission to interfere with anyone.
- Not a guarantee of connectivity. A design that promises to work in every failure is lying about at least one of them.
The version you can have today
Everything valuable about the Lifeline exists already in a form that requires no engineering at all: a charged handset, a written call tree on paper, a battery bank, a radio to listen with, and an agreed meeting point. That is the whole concept, implemented with objects you already own.