The Civilian Black Box

What Airlines, Soyuz, SpaceX and Modern Engineering Can Teach Us About Protecting People in War

When an airliner crashes, we search for the black box.

We recover the flight-data recorder.

We recover the cockpit-voice recorder.

Investigators reconstruct what the aircraft was doing, what its systems were doing, what the crew knew and what happened in the final moments.

The purpose is not simply to count the dead.

It is to understand the failure.

The International Civil Aviation Organization makes an important distinction. Under its international accident-investigation framework, the objective of a safety investigation is the prevention of future accidents and incidents; assigning blame or liability is not its purpose.

That separation helped aviation build one of the world’s most powerful cultures of learning from catastrophe.

Something terrible happens.

Record it.

Preserve the evidence.

Understand the sequence.

Change the system.

Try not to let it happen again.

Now consider war.

A missile strikes an apartment building.

A shell hits a street.

A drone explodes.

A building damaged months earlier collapses.

A child loses a leg.

A parent disappears beneath rubble.

The world counts casualties.

Sometimes there is an investigation.

Sometimes there is compensation.

Sometimes there is neither.

And eventually the world’s attention moves elsewhere.

Perhaps civilians need a black box too.

Not a black box belonging to Ukraine, Russia, Sudan, Israel, Palestine, America, China or any military alliance.

A black box belonging to humanity.

Call it the Civilian Black Box.

Its rule would be extraordinarily simple:

One civilian harmed. One record. One continuing responsibility.

First, Learn From Spacecraft

The engineering principle begins with Soyuz.

Place Russia’s Soyuz beside SpaceX’s Crew Dragon and the contrast is remarkable.

Dragon represents a modern engineering philosophy: sophisticated software, extensive automation, touchscreen interfaces, sensors and an integrated emergency escape system.

Soyuz comes from another lineage.

It is smaller and more mechanically conservative. Its fundamental architecture reaches back decades.

But Soyuz embodies one of safety engineering’s most valuable principles:

assume that something will fail.

Then create another route to survival.

And another.

If normal systems cannot bring Soyuz home under relevant failure conditions, the spacecraft has degraded modes, including ballistic re-entry.

The ride may become harsher.

Precision may be lost.

The mission may be over.

But the humans can survive.

SpaceX solves some of the same problems differently.

Crew Dragon integrates eight SuperDraco abort engines into the spacecraft. Instead of depending upon a traditional escape tower, Dragon itself can rapidly separate its crew from a failing launch vehicle.

Two different architectures therefore produce a common principle:

Normal. Backup. Survival.

Normal means accomplish the mission.

Backup means continue after failure.

Survival means forget the mission if necessary and save the human.

That hierarchy should exist in every conflict zone on Earth.

Then Learn From Airlines

Commercial aviation adds another principle.

Do not merely survive catastrophe.

Learn from it.

Aircraft recorders preserve information precisely because human memory, institutional incentives and physical evidence can disappear after disaster.

Investigators examine wreckage, aircraft systems, flight recorders, human factors and the sequence of events.

Aviation consequently turns individual catastrophes into collective knowledge.

War should do the same for civilians.

When a civilian is killed or seriously injured, there should be a permanent independent record.

Who?

Where?

When?

What happened?

Who depended upon this person?

What evidence survives?

What medical treatment is required?

Was the building already damaged?

Were warnings available?

Did rescue work?

Did emergency communications work?

Was compensation provided?

What happened to the children afterwards?

The objective is larger than casualty counting.

It is to reconstruct the human consequence.

Ukraine: The First Failure Mode

Ukraine demonstrates why.

UN human-rights monitors recorded at least 372 civilians killed and 2,349 injured during August 2026 alone.

During the first eight months of 2026, they verified 2,222 civilians killed and 13,058 injured—already exceeding the civilian casualties recorded during all of 2025.

Each casualty produces consequences extending far beyond the moment of impact.

A person loses a leg.

A parent loses a child.

A child loses a parent.

A family loses its home.

A worker can no longer work.

A rehabilitation requirement may last decades.

Ukraine has already developed part of the architecture required to document losses through the Register of Damage and emerging international compensation mechanisms.

But the principle should become universal.

Not one mechanism for Ukrainians.

Another for Palestinians.

Another for Sudanese.

Another after the next war.

Build the infrastructure once.

Every military. Every conflict. Every civilian.

Sudan: What Happens When Systems Collapse?

Sudan presents another problem.

What happens when the institutions needed to record suffering are themselves overwhelmed?

Conflict does not stop being dangerous when fighting moves elsewhere.

Unexploded ordnance remains.

Hospitals fail.

People become displaced.

Records disappear.

Communications collapse.

This is precisely where the Soyuz principle matters.

The Civilian Black Box cannot simply be an impressive cloud platform.

It needs degraded modes.

Cloud → regional server → local encrypted copy → paper → physical marking.

If the internet fails, the record survives.

If electricity fails, the record survives.

If government collapses, the record survives.

If political authority changes, the record survives.

Because the civilian existed regardless of which flag controlled the territory.

The system must therefore be designed to outlive governments.

Gaza: When the Explosion Is Only the Beginning

Gaza illustrates a third failure mode.

War can continue harming people long after an individual explosion.

A damaged building may remain standing.

Families move back inside because there is nowhere else to go.

Then it collapses.

Unexploded ordnance remains among homes and roads.

Medical infrastructure is degraded precisely when traumatic injuries require years of care.

The Civilian Black Box must therefore record hazards as well as casualties.

Where qualified engineers can conduct assessments, damaged buildings should receive understandable safety classifications.

GREEN: assessed for occupation under defined conditions.

AMBER: damaged; restricted occupation or further engineering assessment required.

RED: unsafe for occupation.

These classifications must come from competent structural assessment, not an algorithm looking at photographs.

But the principle is simple.

A parent deciding where children will sleep should not need to understand structural engineering.

Danger must become visible.

And the record should survive digitally and physically.

The Fourth Failure Mode: Surviving Is Not Recovery

There is one more mistake in the way we think about civilian casualties.

We divide people into two categories:

dead and alive.

Medicine knows that reality is considerably more complicated.

A person can survive an explosion and lose both legs.

Survive and lose an arm.

Survive with spinal injury.

Survive with brain injury.

Survive with severe burns.

Survive while losing the ability to work independently.

WHO now explicitly describes rehabilitation as an essential health service during conflict. Early rehabilitation can prevent complications, shorten hospitalisation and improve long-term recovery.

The scale in Gaza alone is extraordinary.

WHO’s May 2026 rehabilitation assessment estimated approximately 5,161 to 6,710 limb amputations since October 2023.

Among 2,277 amputees who had been evaluated, only 502 had received prosthetics.

Eighteen per cent of those evaluated were children.

Only eight prosthetists were working in Gaza.

This is not merely a humanitarian crisis.

It is an engineering challenge.

And potentially an extraordinary scientific mission.

The Real-Life Iron Man Project

For decades we have imagined technology augmenting the human body.

Science fiction gave us Iron Man.

Reality gives us something more important:

the possibility of restoring capability to somebody who has lost it.

Modern prosthetics already combine biomechanics, materials science, electronics, sensing, robotics, rehabilitation and increasingly sophisticated human-machine interfaces.

Imagine treating every conflict-related amputation not merely as a request for a prosthetic limb but as entry into a lifelong Restoration Programme.

The Civilian Black Box identifies the person.

Medicine stabilises them.

Rehabilitation begins early.

Engineers understand their individual biomechanics.

A prosthetic is fitted.

Physiotherapists train the user.

Sensors measure pressure, gait and movement where clinically appropriate.

The device is adjusted.

Children receive replacements as they grow.

And anonymised clinical evidence feeds back into better prosthetic design.

Now invite industry.

Apple understands miniature computing, sensors and human-machine interaction.

Samsung understands electronics, wearables and manufacturing.

Tesla and advanced robotics companies understand actuators, batteries, motors and control systems.

Neuralink and university neuroscience laboratories are investigating neural interfaces.

Medical-device companies understand regulatory pathways and clinical safety.

Universities understand biomechanics, rehabilitation, robotics and materials science.

The objective should not be to turn wounded civilians into experimental subjects.

Exactly the opposite.

Clinical ethics, informed consent and patient benefit must come first.

But conflict injuries create an enormous unmet need for better assistive technology.

The world’s best engineers should help meet it.

The aspiration should be simple:

restore as much human capability as safely possible.

Walking.

Gripping.

Working.

Writing.

Cooking.

Playing.

Eventually perhaps running.

Not a science-fiction superhero.

Something more meaningful:

a child able to stand again.

The Civilian Black Box Institution

That requires an institution rather than another database.

Its architecture should have five functions.

1. RECORD

Create a permanent case for every credibly documented civilian killed, seriously injured or missing because of armed conflict.

Identity where known.

Age.

Dependants.

Location.

Medical consequences.

Property and livelihood loss.

Available evidence.

Potential responsible actors.

And evidentiary status:

verified, corroborated, disputed, under investigation or unresolved.

The institution records uncertainty.

It does not erase people because certainty is difficult.

2. RESCUE

Maintain civilian-hazard information.

Unsafe buildings.

Unexploded ordnance.

Disabled hospitals.

Water-system failures.

Evacuation constraints.

Where feasible, share relevant safety information with humanitarian responders.

This is the live component of the Black Box.

Do not merely explain yesterday’s deaths.

Prevent tomorrow’s.

3. SUPPORT

Create a Global Civilian Fund.

Immediate humanitarian assistance should not always wait for courts to determine legal responsibility.

Those are separate questions.

A court asks:

Who is legally responsible?

The Fund asks:

What does this family need now?

Food.

Housing.

Medicine.

Rehabilitation.

Psychological support.

Education.

Disability assistance.

Children cannot wait ten years for international litigation.

4. RESTORE

This is the missing layer.

The Fund should maintain a dedicated Civilian Restoration Programme for people living with permanent injuries.

Prosthetics.

Orthotics.

Wheelchairs.

Reconstructive surgery.

Rehabilitation.

Assistive computing.

Education.

Vocational retraining.

And, where evidence establishes safety and clinical benefit, advanced robotic and neural-interface technologies.

Industry could compete for open humanitarian engineering challenges:

lighter prosthetic legs;

lower-cost powered knees;

better sockets;

more durable components;

repairable modular designs;

better sensory feedback;

prosthetics designed for children who grow rapidly.

Instead of weapons competitions alone, create a human restoration competition.

5. LEARN

Finally, anonymised evidence should be converted into prevention.

Which buildings collapsed?

Which shelters survived?

Which evacuation systems worked?

Which injuries were most common?

Where did prostheses fail?

Which rehabilitation interventions restored independence?

Which emergency systems saved lives?

The institution publishes lessons without becoming an intelligence service for belligerents.

The purpose is civilian protection.

Just as aviation accident investigation exists to make future aviation safer.

Who Runs It?

The Civilian Black Box cannot belong to the governments it monitors.

States may finance it.

They cannot control individual findings.

Its governance should therefore contain four independent bodies.

An International Civilian Board containing expertise in humanitarian law, medicine, engineering, rehabilitation, forensic investigation, child protection, actuarial science and data governance.

A permanent Civilian Harm Secretariat responsible for documentation and field operations.

A separate Global Civilian Fund Authority administering support and restoration.

And an Independent Audit and Appeals Chamber able to review disputed classifications, financial decisions and institutional misconduct.

No serving military officer or government minister should adjudicate individual cases.

Funding should be predictable rather than dependent upon politically convenient donations.

One option would be assessed state contributions partly related to national income and military expenditure.

The underlying principle is difficult to argue with:

if humanity can finance war, humanity can finance its civilian consequences.

Compensation Must Be Separate From Guilt

The Black Box should not become an international criminal court.

That would destroy its clarity.

International humanitarian law already provides routes for responsibility and compensation in certain circumstances.

But not every civilian casualty automatically proves an unlawful attack.

So separate the systems.

Humanitarian support: immediate.

Evidence: preserved.

Legal attribution: independent and evidence-based.

Reparations: follow established responsibility through competent mechanisms.

A Palestinian child should not have to prove the entire legal history of the Gaza conflict before receiving a prosthetic leg.

A Ukrainian widow should not need to resolve international criminal responsibility before her children receive food.

A Sudanese amputee should not disappear because no functioning institution recorded his injury.

Help the human first.

Determine legal responsibility properly.

The Qur’anic Standard

There is a striking principle in the Qur’an:

“Stand firm for justice … even if it is against yourselves, your parents, or close relatives.

— Qur’an 4:135.

That is precisely the institutional ethic required.

If we record only civilians harmed by our enemies, we have created propaganda.

The system must work symmetrically.

Ukrainian civilian.

Russian civilian.

Sudanese civilian.

Israeli civilian.

Palestinian civilian.

Their political circumstances are not identical.

The legality of the incidents may not be identical.

Responsibility may not be identical.

But their humanity is.

The Qur’an also describes saving one life as though saving humanity.

That gives the system its unit of measurement:

one human being.

Record. Rescue. Restore. Learn.

The proposal can therefore be reduced to four words.

RECORD.

One civilian harmed, one permanent record.

RESCUE.

Use information to prevent the next casualty.

RESTORE.

Support families, educate orphans, rehabilitate injuries and use the best technology humanity possesses to restore capability.

LEARN.

Turn catastrophe into knowledge that protects somebody else.

That is the Civilian Black Box.

Airlines taught us that catastrophe should produce evidence.

Soyuz taught us that a system needs another layer when the first one fails.

SpaceX shows what sophisticated sensing, automation and engineering integration can achieve.

Ukraine demonstrates the importance of documenting civilian harm.

Sudan demonstrates why systems must continue functioning when institutions and infrastructure fail.

Gaza demonstrates that survival itself can leave enormous long-term needs: unsafe buildings, damaged healthcare, amputations and children requiring years of rehabilitation.

And modern robotics presents another possibility.

Perhaps one of the technologies born from today’s wars should not be another weapon.

Perhaps it should be the world’s best prosthetic hand.

The world’s most affordable powered leg.

A socket that does not cause chronic pain.

A child’s prosthesis that can adapt as the child grows.

A new generation of assistive interfaces that eventually benefits an elderly stroke survivor in London, a factory worker injured in Dhaka or somebody born without a limb in São Paulo.

That would transform something terrible into knowledge capable of restoring life.

The black box of an aircraft cannot undo a crash.

It can make the next aircraft safer.

The Civilian Black Box cannot resurrect the dead.

But it can refuse to let their deaths disappear.

It can care for those left behind.

It can restore those who survive.

And it can force humanity to learn.

If we can record every important parameter of an aircraft crossing the sky, track satellites orbiting the Earth and account for billions spent on weapons, then we can account for the human being standing underneath them.

No civilian should disappear into the rubble of history.

And no survivor should be told that merely remaining alive was the end of our responsibility.