What the field demos showed.

Structured SOS payloads relayed device-to-device over Bluetooth Low Energy and Wi-Fi Direct. Store-and-forward queues held payloads on relay devices when no responder was in range, and delivered them once a path appeared — with no cellular or internet connection involved.

• ✓Payloads capped at 250 bytes: category, coarse location, timestamp, verification level.
• ✓Dual radio paths (BLE for proximity, Wi-Fi Direct for longer hops) operated interchangeably.
• ✓Encrypted queues on relay devices could not be read by the relaying user.

One-touch SOS presented a structured emergency grid — trapped structure, medical, fire, water, food, threat — so a citizen could file a complete, responder-ready alert in seconds, without typing.

• ✓Structured categories removed free-text entry from the critical path.
• ✓Hands-free sentry mode was reachable directly from the SOS screen.
• ✓Identity verification was offered inline without blocking the alert.

The verification sheet presented all three tiers — Anonymous, Biometric Liveness Verified, and Official First Responder — and enforced their distinct trust levels across the interface.

• ✓Tier 0 alerts displayed an “Unverified Sender” warning to responders.
• ✓Tier 1 liveness checks ran on-device; only the secure-enclave signature left the phone.
• ✓Tier 2 activation required a pre-authorized organization code; unverified attempts were rejected.

With connectivity fully disabled, the compass view pointed to the nearest safe haven with distance and direction, and the offline map rendered shelter, water, medical, and hazard points from the preloaded city pack.

• ✓Compass gave bearing, distance, and estimated capacity for the nearest haven.
• ✓Triage filters (safe zone, medical, water, food) worked entirely offline.
• ✓Hazard markers such as debris and collapsed structures rendered on the vector map.

Family reunification search and “I'm alive” check-ins functioned over the mesh, and the encrypted incident log's decoy-PIN duress protection behaved as designed.

• ✓Check-ins propagated device-to-device without a central server.
• ✓Decoy PIN opened a sanitized view; the real log remained sealed and unprovable.