← Blackridge Autonomy Download PDF
Technical White Paper — v2.1

Constraint-Aware Throttle Control for Mission Feasibility Under Tight Energy Budgets

An energy-robust adaptive control layer that increases mission survivability under tight resource constraints for autonomous platforms operating in degraded, energy-constrained, and contested operational environments.

OrganizationBlackridge Autonomy LLC
ClassificationUnclassified // Distribution A
DateFebruary 2026
Version2.1

Executive Summary

Energy-constrained autonomous systems fail not because their routes are wrong, but because their energy allocation is. When fuel budgets are tight and disturbances are unpredictable, fixed-throttle policies waste fuel in favorable conditions and starve the actuator in adverse ones.

WHACO (Warranted Hierarchical Autonomous Cooperative Operations) is a mode-switching throttle controller that operates downstream of any existing route planner. It does not modify the route — it modulates how aggressively the agent follows it, selecting from five discrete thrust levels based on local environmental sensing, fuel state, and proximity to objective.

Across 1,000 randomly generated out-of-distribution environments with non-stationary conditions, sensor degradation, actuator lag, model mismatch, and partial observability:

96.5%
Mission Success
17.4%
Fuel Savings
15:1
Rescue Ratio
15µs
Compute Cost

WHACO converts infeasible missions into successful operations. In ultra-tight fuel scenarios where conventional controllers achieve 0% success, WHACO achieves 95% — on the exact same route.

Key differentiator: WHACO is not an optimizer. It is a feasibility controller. Its purpose is not to make good missions faster — it is to make impossible missions possible.

Technical Hypothesis

Hypothesis: State-dependent discrete throttle modulation improves mission feasibility probability under quadratic fuel dynamics relative to fixed-magnitude thrust policies, without requiring modification to directional planning architecture.

Mechanism claim: The improvement derives from real-time burn-rate shaping — reducing thrust when environmental conditions are favorable, increasing thrust when mission geometry demands it, and applying full authority at terminal approach under adverse conditions. This exploits the quadratic relationship between thrust magnitude and fuel consumption, where small reductions in thrust yield disproportionate fuel savings.

Falsification criteria: The hypothesis would be falsified if (a) WHACO's advantage disappeared when tested on identical routes with only throttle magnitude varying (counterfactual test), or (b) random mode selection produced equivalent results to intelligent selection (ablation test). Neither condition was observed.

Technology Readiness

TRL 5
Current Level
TRL 5
Phase I Complete
TRL 6-7
Phase II Target
TRL 8
Transition Goal
TRLDescriptionStatus
3Analytical and experimental proof of conceptComplete — 10-test validation suite, 1,000 OOD worlds, statistical significance established
4Component validation in laboratory environmentComplete — validated in high-fidelity simulation with non-stationary dynamics, sensor noise, actuator lag, model mismatch, partial observability
5Component validation in relevant environmentCurrent — PX4 SITL closed-loop validation (7/7 scenarios); composable swarm autonomy stack with 221 verification checks, 20 certifiable invariants, ASDP survival arbitration with cluster-consistent SVI
6-7System demonstration in relevant/operational environmentPhase II target — flight testing on UAS platform with real wind conditions, integration with operational MPC planner

Problem

Autonomous platforms operating under energy constraints face a fundamental resource allocation problem: the planner must commit to thrust levels before the full cost of the trajectory is known. When the environment is uncertain and the energy budget is tight, this leads to predictable failure modes:

Fuel depletion follows a quadratic cost model: fuel_used = k · |thrust|² · dt. This creates a direct, non-linear tradeoff between speed and range. A 2x increase in thrust produces a 4x increase in fuel consumption. State-dependent throttle modulation exploits this non-linearity.

Architecture

WHACO operates in a two-stage hybrid pipeline, separating directional planning from energy management:

┌──────────────────┐ unit vector d ┌──────────────────┐ thrust d × m ┌────────────┐ │ │ ──────────────────────→│ │ ───────────────────→ │ │ │ ROUTE PLANNER │ │ WHACO THROTTLE │ │ ACTUATOR │ │ (MPC / any) │ │ MODE SELECTOR │ │ │ │ │ ┌──────────────│ │ │ │ └──────────────────┘ │ └──────────────────┘ └────────────┘ │ ▲ wind sensing fuel state, wind fuel estimate alignment, distance noise estimate look-ahead probe

The route planner provides a unit direction vector. WHACO replaces only the magnitude decision. It requires no modification to the planner and no access to the planning objective function.

Mode-Switching Policy

WHACO selects from eight discrete thrust modes based on real-time sensing:

ModeThrustTrigger Condition
RIDE20%Strong tailwind (alignment > 3.0)
CONSERVE30%High fuel pressure (fuel_ratio < 0.5)
BRAKE40%Look-ahead: headwind increasing
CRUISE55%Default — neutral conditions
RECOVER55%Post-anomaly stabilization
BOOST75%Look-ahead: tailwind increasing
SPRINT85%Strong headwind + surplus fuel
PUNCH100%Terminal approach or stall override — prevents terminal spiraling
Terminal awareness is the critical mechanism. Within 15 units of target, WHACO senses wind conditions at the goal position. If headwind exceeds threshold, full thrust is applied to prevent the terminal spiraling failure mode that defeats conventional low-thrust approaches.

Fuel Pressure Estimation

fuel_ratio = current_fuel / estimated_fuel_to_reach_goal estimated_fuel = f(distance, moderate_thrust_55%, wind_assisted_speed) When fuel_ratio < 0.5 → switch to CONSERVE mode (30% thrust) When fuel_ratio < 0.3 → evaluate mission rescue protocol

Compute Overhead

ComponentCost per callShare of pipeline
MPC direction oracle836.9 µs98.2%
WHACO throttle selector15.1 µs1.8%

WHACO adds negligible computational overhead. It is suitable for embedded deployment on resource-constrained platforms.

Validation Results

All results are from a ten-test validation suite designed to establish generalization, safety, causal mechanism, and statistical significance. All baselines share the same route planner — only thrust magnitude varies.

Out-of-Distribution Generalization (1,000 worlds)

Each world has independently randomized start/goal positions, wind structure, fuel budget, and five categories of perturbation:

MetricMPC BaselineWHACODelta
Mission success rate86.7%96.5%+9.8pp
Mean fuel consumed4.489 units3.736 units-17.4%
Missions rescued (WHACO wins)—105
Missions lost (WHACO loses)—7
Rescue-to-loss ratio—15:1

Perturbation Robustness

Perturbation TypeN WorldsWHACO Win Rate
Non-stationary wind (corridor drift)48784.0%
Burst sensor noise (spikes)48682.7%
Actuator lag (1-3 timestep delay)48788.9%
Model mismatch (drag 0.5x-1.5x)59182.9%
Partial observability43081.9%

WHACO's advantage is stable across all perturbation categories. It is not exploiting a specific environmental feature.

Counterfactual Fairness (Same Route, Different Throttle)

All policies use the same live MPC direction oracle called from each agent's own position, with identical wind noise seeds. Only thrust magnitude varies.

ScenarioMPC 75%WHACOConstant 60%Bang-Bang
Tight fuel (5.0)44%100%100%91%
Moderate fuel (8.0)100%100%100%64%
Hostile headwind100%100%100%68%
Ultra-tight (4.0)0%95%72%89%
Key result: Under ultra-tight fuel constraints, MPC throttle achieved 0% mission success. WHACO achieved 95% on the same directional commands. This isolates the throttle mechanism as the causal driver of the performance delta.

Statistical Significance (Bootstrap, n = 10,000)

MetricPoint Estimate95% Bootstrap CIEffect Size
Success delta+9.8pp[+7.8, +11.8]ppCI excludes zero
Fuel savings+17.4%[+16.5, +18.4]%Cohen's d = 1.30
Time cost+17.6%[+17.0, +18.3]%Cohen's d = 1.65
Paired t-statistic38.0df = 859p < 0.01
Rescue ratio105:7 (15:1)[87-124]:[2-13]CIs non-overlapping

Worst-Case Safety

Adversarial ScenarioMPC SuccessWHACO SuccessDelta
Trap corridor (extreme strength)100%100%+0pp
Zero structure (no corridor)100%100%+0pp
High sensor noise (σ = 4.0)100%100%+0pp
Tight headwind (fuel = 5)0%86%+86pp
Reverse corridor (away from goal)100%100%+0pp
Ultra-tight fuel (fuel = 4)0%100%+100pp

No degradation in mission success was observed across tested adversarial conditions. In the two hardest cases, it rescues missions that are infeasible under conventional throttle policies.

Ablation Analysis

Systematic removal of each WHACO mechanism identifies the causal contribution of each subsystem:

VariantAvg Fuel SavingsAvg ΔSuccessTight Fuel Success
WHACO (full system)+12.9%+10.5pp100%
No look-ahead probe+15.4%+10.5pp100%
No terminal mode+28.5%+10.5pp100%
Flat (always 55%)+33.4%+10.5pp100%
Random mode selection+10.7%+7.5pp88%
Critical insight: Removing components increases average fuel savings — because WHACO's modes (PUNCH, mode-switching) deliberately trade fuel savings for robustness. The full system uses more fuel in easy scenarios because it invests fuel in guaranteeing terminal arrival. Under tight constraints, intelligent mode selection achieves 100% success vs. random's 88%. Mode switching minimizes tail-risk, not mean cost.

Integration Specification

Interface

INPUT: planned_heading : unit vector (2D) — from existing planner local_wind : vector (2D) — from onboard sensing fuel_remaining : scalar — from fuel gauge distance_to_goal : scalar — from navigation noise_estimate : scalar (optional) — from sensor diagnostics OUTPUT: throttle_magnitude : scalar in [0, max_thrust] COMPUTE: ~15 microseconds per call DEPENDENCIES: None beyond planner's existing wind sensing

Deployment Gating Rule

ENABLE WHACO when: fuel_budget >= 4.0 units AND wind_noise_sigma < 4.0 DISABLE and revert to planner native throttle when: fuel_budget < 4.0 units OR wind_noise_sigma >= 4.0

Operational Envelope

Constraint LevelWHACO ValueRecommendation
Tight fuel (< 2x minimum)+56 to +95pp successAlways enable — mission-critical
Moderate fuel12-18% fuel savingsEnable for operational efficiency
Loose fuel (> 3x minimum)7-10% fuel savingsOptional — marginal benefit
Extreme noise (σ > 4.0)UntestedDisable — fail-safe

Composable Autonomy Stack (v2.0)

Beyond single-agent throttle control, WHACO v2.0 extends to a composable multi-agent autonomy stack for swarm-scale operations. The stack comprises five authority layers with strict precedence and deterministic conflict resolution.

LayerModuleAuthorityCapability
L5ResilienceHighest — safety-criticalASDP survival arbitration, degradation, SCORCH technology denial
L4Node SwitchingContinuityHeartbeat monitor, hot standby, 1-tick handoff
L3GovernanceConsensusElection, posture quorum, task allocation, merge reconciliation
L2PredictorSensingWind estimation, fuel forecast, threat prediction, anomaly detection
L1Base GovernorExecution11-mode throttle policy, 15µs/call

Adaptive Survival & Denial Protocol (ASDP)

ASDP is a survival-first arbitration layer within Resilience (L5). It computes a Swarm Viability Index (SVI) per connected cluster and exhausts non-destructive survival modes before falling through to technology denial:

NOMINAL (SVI > 0.70) → No intervention → RECOVER (0.50–0.70): fuel rebalancing, comms reconnection → ISOLATE (0.30–0.50): quarantine compromised agents, buddy assist → DENY_LOGICAL (0.15–0.30): crypto lock, volatile memory zeroization → DISPERSE / TERMINATE (< 0.15): fall through to SCORCH

Cluster-consistent SVI: During network partition, SVI is computed per connected component. Each cluster selects its own ASDP mode independently. A healthy cluster stays NOMINAL while a dying cluster escalates to denial.

Anti-oscillation: Asymmetric hysteresis prevents mode thrashing. Escalation is immediate. De-escalation requires SVI to exceed threshold by +0.05 margin, a 10-tick lockout, and single-step progression.

Verification at Scale

SuiteChecksCoverage
ASDP Validation82/82SVI, mode selection, hysteresis, cluster SVI, R0 authority
SCORCH Lifecycle70/705-condition AND gate, interlocks, veto, 4 modes
Authority Matrix15/15All pairwise module conflicts including R0
N=100 Collapse50/50Full-composition deterministic collapse
Total221/22120 certifiable invariants, < 7.5ms compute @ N=100
Audit properties: Every decision is deterministic (no randomness), explainable (reason codes), traceable (event log with state hashes), and monotonic where appropriate (degradation never reverses, compromise never de-escalates).

Hardware Transition Plan

The primary transition target is a PX4-based UAS testbed operating in outdoor wind conditions. The integration architecture preserves WHACO's bolt-on design principle: the controller inserts downstream of the existing autopilot's MPC direction output, modulating only thrust magnitude.

Phase I: PX4 SITL Closed-Loop Validation COMPLETE

WHACO has been validated inside PX4 Autopilot v1.14.3 running in SITL mode with jMAVSim. The companion process connects via MAVLink (UDP 14540), reads vehicle state at 50Hz, runs mode selection, and issues OFFBOARD velocity commands. 7/7 scenarios pass across fuel-stress, terminal headwind, and extended mode-cycling conditions.

ComponentSpecificationStatus
AutopilotPX4 v1.14.3 (SITL + jMAVSim)Validated
Insertion pointOFFBOARD mode velocity commands scaled by WHACO thrust fractionValidated
Wind sensingGroundspeed-based wind proxy (EKF2 WIND_COV unavailable in jMAVSim); stall detection overrideValidated
Fuel/energy statePX4 SYS_STATUS battery percentage → fuel model mappingValidated
Compute platformCompanion process via MAVLink UDP. 50Hz control loop with 10Hz telemetry capture.Validated
TelemetryCSV + JSON: mode transitions, fuel pressure, wind alignment, battery, position, PX4 nav stateValidated
State managementOFFBOARD → MANUAL → force-disarm → heartbeat confirmation; arm retry with 5 attemptsValidated

PX4 SITL Results

Scenario / PolicyResultDistTimeBattery
A / WHACOPASS3.6m21.0s62%
A / Fixed 75%PASS3.5m15.0s63%
B / WHACOPASS3.6m3.3s72%
B / Fixed 55%PASS3.7m3.0s67%
B / Fixed 75%PASS3.7m2.7s67%
III / WHACOPASS3.7m20.0s62%
III / Fixed 75%PASS3.8m15.6s70%

Phase II: Flight Test

Outdoor flight testing under real wind conditions (5-15 kt sustained, gusts to 25 kt). Test protocol: identical waypoint missions flown back-to-back with WHACO enabled vs. fixed-throttle baseline. Metrics: battery consumption delta, mission completion rate under deliberately constrained battery, terminal approach accuracy in crosswind.

Embedded footprint: WHACO requires approximately 2KB of code memory and no heap allocation. All mode selection logic is stateless (no history buffer). This enables deployment on bare-metal microcontrollers without RTOS dependency, suitable for resource-constrained platforms where companion computers are not available.

Application Domains

The core capability — maintaining mission feasibility under tight energy budgets in uncertain environments — maps to multiple autonomous platform categories:

DomainDisturbance AnalogEnergy AnalogValue Proposition
Defense swarms (sUAS)Threats, EW, attritionBattery + survivabilitySurvivable multi-agent autonomy with ASDP, N=100+ scale
Delivery drones (UAS)Wind, thermalsBatteryRescue battery-critical last-mile deliveries
Electric vehicle fleetsGrade, temperature, trafficBattery rangeReduce range anxiety, extend serviceable area
Maritime autonomy (USV)Ocean currents, tidesFuel reservesCurrent-aware throttle for operational range
Warehouse AMRsCongestion, queue delaysBattery chargeCharge-aware throughput optimization
Aircraft operationsJet stream, turbulenceFuel burnFuel burn shaping for marginal-range flights
SpacecraftGravity wells, solar windPropellantPropellant-optimal trajectory following

Limitations

  1. Time cost. WHACO trades time for fuel (+17.6% mean mission time). For time-critical missions with adequate fuel, standard throttle may be preferred.
  2. Empirical validation, not formal proof. Safety properties were observed across all tested scenarios but have not been formally verified. Safety-critical deployment would require additional formal analysis and certification.
  3. 2D domain validation. Current test environment is a 2D continuous plane. Transfer to 3D, turbulent, or discontinuous environments requires further validation.
  4. Fixed mode thresholds. Mode selection uses calibrated thresholds that may require domain-specific tuning for different physics models.
  5. SITL only. PX4 validation is software-in-the-loop; outdoor flight testing under real wind conditions is Phase II.

About Blackridge Autonomy

Blackridge Autonomy LLC develops mission-critical adaptive control systems for energy-constrained autonomous platforms operating in degraded, energy-constrained, and contested operational environments.

Our technology is designed as a bolt-on control layer — deployable downstream of existing planners with no system rearchitecture required. We focus on the energy management problem: maintaining mission feasibility when fuel budgets are tight and environments are uncertain.

NAICS Codes

Contact

Blackridge Autonomy LLC [email protected] https://blackridgeautonomy.com

This document is UNCLASSIFIED and approved for public release. Distribution Statement A: Approved for public release; distribution is unlimited.