A New Kind of Arms Race
The pressure to field autonomous military systems has never been higher. Across the U.S., UK, and NATO, defense leaders are pouring money into programs that promise to move from concept to deployment at something close to commercial speed.
But there’s a catch. The hardware — drones, ground vehicles, loitering munitions — often gets the headlines. The real bottleneck sits deeper: the trusted information infrastructure that these systems depend on to function safely, securely, and reliably in contested environments.
That infrastructure includes secure data links, resilient command-and-control networks, and the software pipelines that feed AI models with trustworthy data. Without it, autonomy is just a liability.
Why Speed Is Trumping Caution
Traditional defense acquisition was built for a slower era. Programs took a decade or more, with rigid milestones and exhaustive testing. That model is cracking under the weight of new threats.
Adversaries are fielding autonomous systems faster than Western allies can respond. China and Russia have invested heavily in swarming drones and AI-enabled targeting. The U.S. Department of Defense responded by creating the Replicator initiative, aiming to field thousands of attritable autonomous systems in under two years. The UK has its own ambitious programs, and NATO is pushing for interoperability at scale.
The result is a race where speed is the metric that matters. But speed without trust is dangerous.
The Trust Problem: Data, Links, and Vulnerabilities
Autonomous systems are only as good as the data they consume. If a drone’s navigation feed is spoofed, or its target identification model is poisoned with bad training data, the consequences are catastrophic.
Trusted information infrastructure means more than just encryption. It requires:
- Resilient communication links that survive jamming and cyberattacks
- Verified data provenance, so AI models know where their inputs came from
- Secure software supply chains, from code repositories to the final fielded build
- Human oversight mechanisms that can intervene when systems behave unpredictably
Each of these is hard on its own. Together, they form a web of requirements that many fast-moving programs are struggling to meet.
What the U.S., UK, and NATO Are Actually Doing
The U.S. military has made trusted information infrastructure a priority in its joint warfighting concept. The Combined Joint All-Domain Command and Control (CJADC2) effort aims to connect sensors, shooters, and command centers across all services. But progress has been uneven, with service-specific programs often duplicating efforts.
The UK’s Defence Digital strategy focuses on similar goals, emphasizing secure data sharing across platforms and with allies. NATO, meanwhile, is working on standards for data interoperability — a critical piece that often gets overlooked until exercises reveal how hard it is to share information across national systems.
All three are experimenting with agile acquisition pathways, but the gap between rhetoric and fielded capability remains wide.
The Hardest Part: Testing and Certification
You can build an autonomous system in a lab. Certifying it for real-world use is another matter entirely.
Testing autonomy requires simulating millions of scenarios, including adversarial attacks on the information infrastructure itself. How does a system behave when its GPS is jammed, its datalink is cut, or its sensor feed is flooded with false data? These are not hypothetical questions. They are the core of what makes autonomy trustworthy.
Current certification frameworks were designed for human-in-the-loop systems. They don’t easily accommodate the complexity of AI-driven decision-making. Defense agencies are scrambling to develop new assurance methods, but they are lagging behind the pace of deployment.
What Needs to Happen Next
The race won’t slow down. Adversaries are not waiting for the West to perfect its infrastructure. So the question becomes: how do you accelerate without compromising trust?
One answer is modularity. Build systems with open standards and plug-and-play interfaces, so that new capabilities can be integrated without rewriting the entire stack. Another is investment in cyber resilience from the start, not as an afterthought.
Most importantly, defense leaders need to treat trusted information infrastructure as a first-class requirement, not a support function. That means funding it, testing it, and holding programs accountable for it — just as rigorously as they hold them accountable for speed.
The military autonomy race is real, and it’s moving fast. But the winner won’t be the side with the most drones. It will be the side that can trust its own systems when it matters most.
