Fuel Resupply as an Attack Surface

Every link that must be replenished is a surface an adversary can attack; reducing replenishment shrinks that surface.

Replenishment creates surface

In security terms, an attack surface is the set of points where a system can be disrupted. A continuously replenished fuel chain has a large surface: production, storage, transport nodes, and the last mile are all attackable, and each must be defended every cycle. The surface exists precisely because replenishment is continuous.

Reducing the frequency of replenishment reduces how often each of these points is exposed. Eliminating short-cycle resupply, in the limit, collapses much of the surface to the site itself. Energy-dense on-site generation is attractive precisely because it minimizes the replenishment surface.

Defense-in-depth still applies

Shrinking the surface does not remove the need for site hardening, physical security, and cyber protection. It changes the shape of the problem from defending a long moving chain to defending a fixed point. Fixed points are generally easier to protect than distributed, mobile chains.

• Continuous replenishment = large, recurring attack surface
• Each transport node must be defended every cycle
• Long resupply intervals shrink the exposed surface
• Fixed sites are easier to defend than moving chains

Surface also has a temporal dimension: a link is only exposed while it is active. A chain that resupplies daily presents its full surface every day; one that resupplies over long horizons presents it rarely. Reducing cadence therefore shrinks the surface in time as well as in structure, which is why long-interval on-site generation is treated as a surface-reduction measure and not merely a convenience.

The burner (Aegis / MetroVolt) that could enable minimal-resupply site power is a design-and-simulation study; its honest gates are documented separately.