Infrastructure & Resilience
Air-Gapped Critical Systems • Cannot Go Dark • 72-Hour Backup
Broadband as Infrastructure • Bridges • Flood Defences • Utilities
No More RAAC Surprises • Inspect Everything • Build to Last
The Principle
Every other charter in the BUILD UK platform assumes the infrastructure works. The water charter assumes the pipes deliver water. The energy charter assumes the grid delivers power. The NHS charter assumes the hospital has electricity. The transport charter assumes the train control centre is operational. The defence charter assumes the communications network is secure.
This charter makes sure those assumptions are correct. It is the foundation beneath every other foundation. If the infrastructure fails, everything built on top of it fails. A hospital without power is a building full of dying people. A train network without a control centre is 40,000 tonnes of metal moving uncontrolled at 125mph. A water treatment plant without its control system is raw sewage flowing into the supply. A power grid without its management system is a national blackout.
The current approach to critical infrastructure resilience in Britain is hope. Hope that the systems will not fail. Hope that the backup will work. Hope that nobody targets the control system. Hope that the bridge does not collapse. Hope that the concrete is not rotting from the inside. BUILD does not hope. BUILD engineers.
If people die when it fails, it does not go dark. It does not connect to the internet. It does not run on hope. It runs on redundancy, backup, air gaps, and the absolute certainty that when the main system fails, the backup system works because it was tested last Tuesday.
Pillar 1: Air-Gapped Critical Systems
If the system controls something that people die when it fails, it does not touch the internet. Not through a firewall. Not through a VPN. Not through a ‘secured connection.’ No connection. Air. Physical separation.
1.1 — The Rule
All critical infrastructure control systems must be air-gapped — physically disconnected from the internet, from the corporate network, and from any other system that has internet access. An air gap means there is no cable, no wireless connection, no Bluetooth, no USB bridge, and no shared hardware between the control system and any internet-connected device. The only way to access the control system is to be physically present at the control terminal.
This applies to: power grid control systems (SCADA, energy management systems); water treatment and distribution control systems; railway signalling and train control systems; air traffic control systems; nuclear plant operational systems; hospital critical systems (life support, surgical equipment, pharmacy dispensing); emergency services dispatch (999/112); telecommunications core network management; and any other system whose failure would cause immediate risk to life.
1.2 — No Exceptions
Companies will argue that air-gapping is inconvenient, expensive, and unnecessary because their firewall is adequate. Their firewall is not adequate. Colonial Pipeline had a firewall. The Irish Health Service had a firewall. The Ukrainian power grid had a firewall. Every critical infrastructure system that has ever been hacked had a firewall. Firewalls are software. Software has vulnerabilities. Air has no vulnerabilities.
The argument that remote monitoring requires internet connectivity is rejected. Remote monitoring of critical systems is itself a vulnerability. If you can monitor it remotely, an attacker can access it remotely. The monitoring happens on site, by qualified personnel, physically present at the facility. If the facility requires 24/7 monitoring, it is staffed 24/7.
1.3 — The Enforcement
Any operator of critical infrastructure that refuses to air-gap its control systems has two options: air-gap the critical systems and maintain internet access for administrative functions on a physically separate network; or lose internet access entirely at the facility. Those are the only two options. There is no third option where the control system stays connected and the operator promises to be careful.
Compliance inspections will be conducted by the UK Cyber Defence Command (Defence Charter, Pillar 8.1) on an unannounced basis. Inspectors have the authority to physically verify the air gap — tracing every cable, scanning for wireless signals, and testing for any connection between the control network and any external network. Non-compliance results in an immediate enforcement notice and, if not rectified within 72 hours, facility closure until the air gap is verified.
Pillar 2: Cannot Go Dark
2.1 — 72-Hour Backup Power
Every critical infrastructure facility must have backup power capable of sustaining full operations for a minimum of 72 hours without mains supply. This means diesel generators with 72 hours of fuel on site, plus battery or UPS systems to cover the switchover period (typically 10–30 seconds for a generator to reach full output). The backup is tested under load every month. Not started and checked. Tested under full operational load to verify it can actually power the facility.
72 hours is the minimum time required for the grid to restore power following a major failure, for fuel resupply to reach the facility, or for emergency measures to be implemented. A hospital that runs out of backup power after 8 hours — as has happened in the UK — has failed the most basic test of infrastructure resilience. Under BUILD, that does not happen.
2.2 — Dual Redundancy
All critical control systems must have dual redundancy: two independent systems capable of performing the same function, operating on separate hardware, separate power supplies, and separate physical locations where practical. If System A fails, System B takes over automatically, without human intervention, within seconds. This is standard practice in aviation and military systems. It is not standard practice in the water, power, and railway systems that 66 million people depend on daily. BUILD will make it standard.
2.3 — What Cannot Go Dark
The following systems are designated Cannot Go Dark under this charter. They must maintain continuous operation under all circumstances, including mains power failure, cyberattack, physical damage, and natural disaster: power grid control centres; water treatment and pumping stations; railway signalling and control centres; hospital power and critical medical systems; emergency services dispatch centres (999/112); air traffic control; nuclear plant safety systems; telecommunications core switches and internet exchange points; and flood defence pumping stations and barrier controls.
If a system is on the Cannot Go Dark list, it has 72-hour backup, dual redundancy, air-gapped controls, and a tested failover plan. No exceptions. No deferrals. No ‘planned for the next financial year.’ Now.
Pillar 3: Bridges, Tunnels, and Structures
3.1 — No More RAAC Surprises
Reinforced Autoclaved Aerated Concrete — RAAC — was used in thousands of buildings from the 1950s to the 1990s, including schools, hospitals, and public buildings. It has a design life of approximately 30 years. Many RAAC structures are now 50–70 years old. They are failing. Panels crack, sag, and in some cases collapse without warning. The government discovered in 2023 that it did not know which buildings contained RAAC. Children were sent home from schools that might fall down. This is not infrastructure management. It is negligence.
BUILD will commission a full structural audit of every public building, bridge, tunnel, car park, hospital, school, and critical structure in England. Every structure is inspected. Every material is identified. Every defect is catalogued. Every remediation is scheduled and funded. No more discovering in September that the school roof might collapse in October.
3.2 — Bridge Inspection Regime
Every road bridge, rail bridge, footbridge, and viaduct in England will be inspected on a five-year cycle, with high-risk structures inspected annually. The inspection is structural, not visual — qualified engineers examine the fabric, test the materials, and assess the load capacity. The current system, where many bridges are inspected by a council officer who drives over them and notes whether they ‘look OK,’ is not inspection. It is a windscreen survey.
3.3 — Flood Defences
All flood defence infrastructure — barriers, walls, pumping stations, drainage systems — will be inspected annually and maintained to operational standard at all times. Flood defence pumping stations are on the Cannot Go Dark list (Pillar 2.3). The Environment Agency’s replacement body under BUILD’s reforms will maintain a real-time operational status dashboard for every flood defence asset in the country. When a flood warning is issued, every asset in the affected area must be confirmed operational before the water arrives, not discovered to be broken when it is too late.
Pillar 4: Underground Utilities
4.1 — National Utilities Map
BUILD will create a comprehensive, accurate, digital map of every pipe, cable, duct, and conduit beneath every street, field, and footpath in England. Gas, water, electricity, telecoms, sewage, drainage — all mapped to sub-metre accuracy and available to every contractor, utility company, and local authority before any excavation begins.
The current system is based on paper records, some dating from the Victorian era, supplemented by survey data of varying quality from multiple utility companies who do not share information with each other. A contractor digs a trench and hits a gas main because the map said it was two metres to the left. This happens thousands of times per year, causing gas leaks, water mains bursts, power outages, and occasionally explosions. A single national utilities map, maintained in real time, solves a problem that has existed since the first pipe was laid underground.
Pillar 5: Broadband as Critical Infrastructure
5.1 — Minimum Speed Guarantee
Broadband is critical infrastructure. It is as essential to modern life as water, electricity, and roads. BUILD will guarantee a minimum broadband speed of 100Mbps to every premises in England — urban, suburban, and rural. The current model, where rural properties receive 2–5Mbps while urban areas get gigabit, is a digital divide that excludes millions of people from working, learning, and participating in modern society.
This connects to the right to offline (Life, Liberty & Freedom Charter, Pillar 2.2) — nobody should be forced to use the internet. But those who choose to should not be punished for where they live. A farmer in Yalding deserves the same internet speed as a consultant in Canary Wharf.
5.2 — British Internet Exchange Sovereignty
The UK’s internet exchange points — LINX in London, IXManchester, and others — are critical national infrastructure through which the majority of British internet traffic flows. These facilities are on the Cannot Go Dark list (Pillar 2.3). They will be designated as sovereign infrastructure with the same protection status as power grid control centres. No foreign ownership. No offshore management. Air-gapped administrative systems. 72-hour backup. Dual redundancy.
Pillar 6: Wind Turbines and Wildlife
Offshore and onshore wind turbines kill an estimated 10,000–100,000 birds per year in the UK. Raptors, seabirds, and migrating species are disproportionately affected. The Wildlife & Rewilding Charter commits to recovering these populations. The Energy Charter commits to offshore wind as a supplementary power source. This pillar ensures the two do not conflict.
6.1 — Minimum Standards for New Installations
All new wind turbine installations in the UK must incorporate at least one of the following wildlife protection measures: shrouded or ducted turbine design that encloses the blades, preventing bird contact; bladeless turbine technology (oscillating cylinder designs that generate electricity from vibration with zero bird strike risk); or as a minimum standard where shrouded or bladeless designs are not feasible, painted blade markings (one blade painted black) which reduce bird mortality by up to 70% by making the rotation visible.
6.2 — Retrofit Existing Installations
Existing wind turbines will be retrofitted with painted blade markings within two years. This is the cheapest and fastest intervention available. One blade painted. 70% fewer bird deaths. The cost is negligible. The delay is inexcusable. As turbines reach end of life and are replaced, the replacements must meet the full standard (shrouded, bladeless, or painted).
6.3 — Migration Corridor Shutdowns
Wind farms located on known bird migration corridors will be required to shut down during peak migration periods. The lost generation during shutdown is minimal compared to the total annual output, and the birds that survive the crossing go on to breed. This is a temporary, predictable, scheduled interruption — not an operational failure. The grid plans for it the same way it plans for scheduled maintenance.
If people die when it fails, it does not go dark. It does not connect to the internet. It does not run on hope. BUILD’s infrastructure runs on air gaps, backup power, tested failover, and the absolute certainty that when the question is ‘what happens if this breaks,’ the answer is ‘the backup takes over and nobody notices.’
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
BUILD UK
builduk.club
August 2026
Download this charter as a document (.docx) — the paper as written. What follows is the same text, readable.