05 / analyses · 22 September 2026

In, on or out of the loop

Download PDF

Three terms for the human role in systems that detect and engage targets on their own have entered the industry's everyday language. Documents give them specific meanings, and each of them costs a different number of seconds.

Counter-drone systems are said to have a human in the loop, on the loop or out of it. The terms appear in sales material, in debates and in government documents, often without an explanation of what they mean. This piece puts them in order using the documents that give them content. It also shows how much time each of the three roles costs.

Three roles

In the loop, a human decides on every use of force, and the system only detects and designates the target. On the loop, the system selects and engages the target itself, while a human supervises it and can stop it. Out of the loop, the system operates without supervision once activated. The roles differ in who takes the decision and how much time a human has to change it.

What the documents say

The most frequently cited document is American. Department of Defense Directive 3000.09 of 2023 requires autonomous systems to allow appropriate levels of human judgment over the use of force. It does not require a human in the loop in every scenario. Its definition of an autonomous weapon system expressly includes systems supervised by an operator who can override them, which is the role on the loop. The directive also exempts a certain group of operator-supervised systems from additional review at the highest level. These are systems that engage materiel targets to intercept time-critical or saturation attacks against installations and their personnel. That is almost exactly a description of defending a site against drones.

The International Committee of the Red Cross takes a different view. In its 2021 position it called on states to adopt new, binding rules. It proposes prohibiting systems that are unpredictable or that target people directly, and strictly restricting the rest. This two-tier division has made its way into the work of the United Nations.

The group of governmental experts under the Convention on Certain Conventional Weapons adopted eleven guiding principles in 2019. One of them states that human responsibility for decisions on the use of weapons must be retained, because accountability cannot be transferred to machines. The UN General Assembly adopted resolutions on autonomous weapon systems in 2023, with 152 states in favour, and in 2024, with 166. A third followed on 1 December 2025, with 164 in favour. The working draft of a future instrument, developed by the same group of experts, rests on the division between prohibitions and restrictions. The review conference of the convention will decide on the next steps between 16 and 20 November 2026.

All these documents concern war and international humanitarian law. Protecting a power plant or a refinery in peacetime falls under national law.

What the laws of the three countries say

The Polish Aviation Law lists the persons authorised to destroy a drone, including employees of specialised armed security formations. The Czech bill requires a designated employee first to establish that the flight is unauthorised, to warn the pilot where possible and to weigh proportionality. The Latvian law allows a guard to act without warning, on the guard's own assessment of the threat. All three texts assume that a human decides and acts, and none expressly provides for a device that decides on the use of force itself. Grzegorz Matyasik of the Eastern Flank Institute notes that the Polish operator-decision requirement, meant to secure legality, is also the system’s main operational weakness.

What each role costs

The time-budget model makes it possible to compare the three roles on the same target. In the loop, the system checks the flight's authorisation automatically and a human decides, with a median of 45 seconds. A guard then carries out the decision. On the loop, the rule is set in advance and the system fires unless a human vetoes it within a fixed time window. Out of the loop, there is no such window. The table shows the chance that the procedure finishes before a medium-speed target covers the detection distance.

Detection distanceIn the loopOn the loop, veto 20 sOn the loop, veto 10 sOn the loop, veto 5 sOut of the loop
2 km81.8%100.0%100.0%100.0%100.0%
1 km12.6%100.0%100.0%100.0%100.0%
500 m0.0%0.0%99.2%100.0%100.0%
300 m0.0%0.0%0.0%21.5%99.6%

Illustrative model, target flying at 21 metres per second, 20,000 draws per cell with a fixed random seed. The code for this table is in the model package available for download.

With detection at two kilometres, every role usually finishes in time. At one kilometre, a human in the loop finishes in time in only one case in eight. The supervised system still finishes in every draw. At 500 metres, even a twenty-second veto window is too long. At 300 metres, only the system out of the loop finishes reliably in time. The shorter the veto window, the less time a human has to understand what the system is about to do and to stop it.

The cost in time and the cost in control

Each role has two costs. A human in the loop gives the fullest control and costs the most time. A human on the loop saves time, but their control depends on the length of the veto window. Out of the loop, time is shortest and human control ends at the moment of activation. The documents differ on where a reasonable balance lies. The Department of Defense treats supervised autonomy against materiel targets in the defence of installations as a standard case. The Red Cross wants strict limits. National laws in the region still assume a human who decides. Choosing the role for a given site is therefore a legal and political question, not only a technical one.

Model code and inputs (ZIP, Python)

Declaration of interest. The author is the founder of Silesian Advanced Systems, a team developing an autonomous counter-drone system ahead of incorporating a company. The system is intended to operate in the role this piece calls on the loop, with a human veto in automatic mode. This gives the author a direct interest in the subject. The text describes the terms and their time cost on the basis of the sources listed and the published model, without assessing any particular solution.

Sources

  1. CCW GGE LAWS (Group of Governmental Experts on Emerging Technologies in the Area of Lethal Autonomous Weapons Systems). 2019. Guiding Principles, in report of the Meeting of the High Contracting Parties, CCW/MSP/2019/9. ↗
  2. DefenseScoop. 2023. "Pentagon Updates Guidance for Development, Fielding and Employment of Autonomous Weapon Systems." 25 January. ↗
  3. Digital Watch Observatory. 2026. "GGE on Lethal Autonomous Weapons Systems." dig.watch. ↗
  4. Grozījumi Apsardzes darbības likumā. 2025. Latvijas Vēstnesis, adopted 18 December 2025, in force from 20 January 2026. likumi.lv, id 365606. ↗
  5. ICRC (International Committee of the Red Cross). 2021. "ICRC Position on Autonomous Weapon Systems." 12 May. ↗
  6. ICRC. 2026. "Advocacy Paper. A Key Opportunity to Prevent the Development of Unacceptable Autonomous Weapons." June. ↗
  7. Matyasik, Grzegorz. 2026. “Czy obiekty infrastruktury krytycznej są chronione przed dronami?” Instytut Wschodniej Flanki, 27 July. ↗
  8. Ministry of the Interior of the Czech Republic. 2026. Návrh zákona, kterým se mění některé zákony s cílem posílit odolnost subjektů kritické infrastruktury proti bezpilotním systémům, with explanatory memorandum. eKLEP KORNDW7JRL1U, 21 July. ↗
  9. Republic of Poland. 2002. Act of 3 July 2002, Aviation Law, consolidated text Journal of Laws 2025, item 1431, Article 156ze. ↗
  10. UN General Assembly. 2023. Resolution 78/241, Lethal Autonomous Weapons Systems. 22 December. ↗
  11. UN General Assembly. 2024. Resolution 79/62, Lethal Autonomous Weapons Systems. 2 December. ↗
  12. UN General Assembly. 2025. Resolution 80/57, Lethal Autonomous Weapons Systems. 1 December. ↗
  13. UNODA (United Nations Office for Disarmament Affairs). 2025. "Briefing by the Chair of the CCW GGE on LAWS on the Margins of the First Committee." October. ↗
  14. U.S. Department of Defense. 2023. DoD Directive 3000.09, Autonomy in Weapon Systems. 25 January. ↗

Download PDF

More about the Sentry-N2 system: White papers

← All analyses