pacn.nw
Public Accountability Camera Network
Independent Public Observation of Government Facilities
by NeuraWeb Global Inc.

Two systems. The same hardware.

License plate cameras have been deployed across American communities for over a decade. In that time the public has objected in nearly every jurisdiction that held a hearing, and the purchases continued anyway.

Below are two things that can be built with identical equipment. The one on the left is available commercially today and could be deployed this quarter. The one on the right is what we are building instead. Read them together. The difference between them is not the camera.

Same lens. Same pole. Same plate. Different fate for the read.
The Antithesis

What we could build

Nothing described here needs to be invented. Every component is on the market now. The only change required is where the cameras point and whose name seeds the list.

The premise

Take the surveillance apparatus already aimed at ordinary people and aim it at the officials who authorized it. Same readers, same network, same retention. Seed the watch list with names from the county directory instead of a stolen vehicle file.

It would work immediately, and it would be popular.

What it would know

Day 30 Departure and return within a few minutes each day. The route. Which mornings differ from the rest, and by how much.
Day 90 The pattern underneath the routine. Which addresses recur. Which nights the vehicle does not come home. Which other vehicles are consistently present when this one is.
Day 365 Deviation. The system flags a change in someone's life before they have told anyone: a new address appearing, a standing appointment that stops, a second vehicle that starts.

None of that requires a camera on anyone's house. It falls out of enough roadside readers and a retention policy.

The extraction layer

A file like that has buyers. Movement alerts for subscribers. Officials ranked by activity. Tiered access sold to press, to opposition research, to vendors bidding on contracts, to anyone with a reason to know where a decision-maker sleeps.

At that point the person is no longer the subject of oversight. They are the inventory.

Who else ends up in it

Every frame contains people who hold no office and cast no vote on any of this. A spouse. A teenager whose arrival home is now a timestamp. A home health aide. A neighbor whose car sits across the street.

The system cannot tell them apart from the target, and it does not need to in order to work.

Nothing in this design distinguishes a government official from anyone else. The only difference is the list it was seeded with. Change the list and it points at you.

That is not a flaw

That is the design, and it is the same design already installed on the road outside your neighborhood. The version aimed at officials is not a correction of it. It is a second copy.

Our position

We are not building this. Not because it is illegal, because much of it is not. Because a system that turns a human being into a product is wrong when they operate it, and it does not become right in our hands.

The Thesis

What we are building

Law enforcement has real needs that plate recognition genuinely serves. Four of them. Three can be met in full without keeping a record of a single person who is not already wanted.

What police actually use it for

  • Hot list match A stolen vehicle passes a camera and an alert fires. Legitimate
  • Amber and Silver alerts A missing child, or a missing adult with dementia, matched against a live list. Legitimate
  • Active lookout A specific vehicle wanted in a specific crime, right now. Legitimate
  • Retroactive search Everywhere a plate has been for the last thirty days. Every vehicle that passed an intersection between eleven and one. A general warrant

The fourth is only possible if the movements of everyone were stored in advance, in case some of it mattered later. Collect on all, decide relevance afterward. That is the thing the Fourth Amendment was written against, and it is also the actual product being sold.

The mechanism

Match at the edge. Destroy on no match.

The camera holds the list on the device. A plate passes, it is compared locally, and if there is no match the read is destroyed where it was made. It is never transmitted, never stored, never becomes a record anywhere.

A city running a thousand cameras with eleven hits that day holds eleven records that day. Not four million.

Retroactive search does not need to be prohibited. There is nothing left to search.

The controls, and what each one forecloses

Hashed watch lists
The device holds one-way hashes, not readable plates. It can confirm a match. It cannot be read out as a list of who is being sought.
ForeclosesA seized, stolen, or subpoenaed device yielding a target list.
Signed device attestation
Each camera publishes a signed statement of its own configuration: which list it runs, which features are enabled, what it retains. A city can prove nationwide lookup is off instead of taking a vendor's word.
ForeclosesA vendor-side change silently re-enabling nationwide query, as happened in Ventura County, California, where the county reported a large volume of unauthorized accesses before the change was discovered.
Warrant-gated tracking with cryptographic expiry
Following a specific vehicle over time requires a warrant. The authorization carries a hard expiry the device itself enforces. A judge grants ten days and the device stops on the eleventh.
ForeclosesIndefinite tracking sustained by administrative renewal. The limit is not a policy anyone has to honor. The key stops working.
Court-held keys for any buffer
Where a jurisdiction insists on a short buffer for a scene canvass, it stays encrypted at the edge under a key held by the court, not by the agency and not by the vendor. Nobody browses it. A judge unlocks one place and one window.
ForeclosesRetroactive search becoming a routine desk tool rather than a judicial act.
Jurisdiction enforced by keys
A hit is encrypted to the key of the jurisdiction that issued the list entry. Sharing outside it is not a setting anyone can toggle.
ForeclosesLocal data reaching out-of-state agencies against state law because sharing was a checkbox, as alleged in California's action against the City of El Cajon.
Public audit by default
Every list addition, every hit, every warrant grant and expiry, published in aggregate as it happens. No request required.
ForeclosesPlates approved onto a watch list with no written policy governing who decides, or why, or for how long.

Why this is better for police, not worse

  • Evidence that survives the motion to suppress A hit from a system that cannot be abused is far harder to challenge than a hit from one that has been.
  • No contract cancelled mid-term Departments have lost this capability entirely, in the middle of a term, over data-sharing controversies they did not create and could not verify.
  • No audit finding your alerts were wrong Attestation and public audit surface a false-hit rate in weeks rather than after an inspector general spends a year on it.
  • The fight ends Communities are not objecting to stolen cars being recovered. They are objecting to being logged. Stop logging them and the objection has nowhere to stand.
Our commitment

This is the system PACN builds, publishes as an open standard, and holds itself to first. Any vendor may implement it. Any city may require it. We would rather the standard win than the product.

Privacy by mathematics, not by policy

A promise can be broken quietly and discovered years later. A key that has expired cannot be talked into working, and a read that was destroyed at the camera cannot be produced by anyone, for any reason, under any pressure.

That is the whole difference between the two columns above.

PACN cameras will observe government facilities: entrances, exits, vehicle access points, service areas, and government-controlled parking. Every site will be published before it operates, with its declared subject, its operator, and the basis for its placement. The declared subject of a PACN camera is always a facility, never a residence and never a person, whatever street the camera stands on. A courthouse on a residential corner can be observed; the houses beside it cannot be the subject. That limit is not a policy that could be revised later. It is the reason the network exists.