Executive Summary
The Sovereign WISP Kit (SKU: RIOS-KIT-WISP) is a turnkey decentralized infrastructure solution designed to transform networking hardware from a passive expense into an autonomous profit center. Developed through a partnership between DeReticular’s Infrastructure Division and TriFiWireless, the “WISP-in-a-Box” enables “Sovereign Entrepreneurs” and remote business operators—such as those in mining, agriculture, and eco-tourism—to function as Micro-ISPs. By fusing high-performance hardware with the “Tollbooth” software agent and Starlink Business backhaul, the kit automates local Wi-Fi retail sales and IoT backhaul leasing. The system is designed for off-grid resilience, featuring LTE failover and integrated billing gateways that split profits between the operator and the DeReticular ecosystem.
Product Identity and Market Position
The Sovereign WISP Kit is positioned as a “ruggedized telecom business in a box.” It is intended for deployment in environments where traditional internet infrastructure is lacking or where transient populations create high demand for connectivity.
- MSRP: $1,749.00 (Hardware/Software bundle) plus additional costs for Starlink Business hardware and monthly data plans.
- Primary Role: Turnkey Micro-ISP, Automated Captive Portal Billing, SD-WAN Bonding, and IoT Backhaul.
- Target Audience: RV Park owners, remote mining camps, agri-business landowners, and eco-tourism operators.
Bill of Materials (BOM)
The kit is a hybrid of proprietary hardware and specialized software, requiring external partner dependencies for satellite backhaul.
Physical Hardware
| Component | SKU | Role |
| Sovereign Sentry (Pro) | RIOS-SS-PRO | Acts as the SD-WAN router, Captive Portal host, and Local RADIUS server. |
| Mesh Beacons (x2) | RIOS-EXT-01 | IP67-rated outdoor access points; broadcasts Wi-Fi 6 and 915MHz LoRaWAN. |
| Nomad Link | RIOS-NL-01 | Industrial LTE failover modem to maintain payment gateways during rain-fade. |
| Power Hardware | N/A | 2x PoE+ Injectors and 1x DC Step-Down for solar or UPS integration. |
Core Software and Partners
- OpenClaw “Tollbooth” Agent: A dedicated software image (dereticular/openclaw-wisp:latest) that integrates with the Sentry’s pfSense VM. It manages MAC address whitelisting, Stripe/Crypto API calls, and per-user bandwidth metering.
- TriFiWireless API Bridge: A secure container ensuring compliance with Starlink Enterprise billing and Acceptable Use Policies (AUP).
- Partner Dependencies: Requires a Starlink Flat High-Performance Kit (approx. $2,500) and a Starlink Priority Data Plan (approx. $250/mo), both managed via TriFiWireless.
Operational Workflow
The fulfillment of the Sovereign WISP Kit follows a structured three-phase process to ensure the hardware is pre-configured and compliant with enterprise data agreements.
- Phase 1: Partner Handoff: Upon purchase via DeReticular, a webhook triggers TriFiWireless to finalize the Starlink Business contract and ship the satellite dish directly to the customer.
- Phase 2: Physical Fulfillment: Technicians at the Node 3 Workshop flash the Sentry Pro with a “WISP Golden Image,” pre-configuring ports for Starlink (WAN), Nomad LTE (WAN2), and Mesh Beacons (LAN).
- Phase 3: Activation: The user connects the hardware and inserts a Sovereign Key. A local WISP Dashboard allows the user to configure payout details (bank or crypto wallet), at which point the node begins broadcasting a public SSID (e.g., “Sovereign_Connect_$5_GB”).
Technical Specifications and Network Topology
The system is engineered for high-availability and broad coverage in rugged environments.
- Backhaul Bonding: Uses pfSense Multi-WAN failover. Starlink serves as the primary (Tier 1) connection, with Nomad Link LTE as the Tier 2 backup, triggered by packet loss exceeding 15%.
- Compute Performance: The Sentry Pro’s i3-N305 processor handles Deep Packet Inspection (DPI) and RADIUS tasks without throttling the 220Mbps+ Starlink connection.
- Coverage: Provides Wi-Fi coverage for 5–10 acres and LoRaWAN IoT coverage up to 3 miles, assuming a 15ft elevation with clear line of sight.
- Legal Compliance: The “Tollbooth” agent enforces Layer 2 Client Isolation and logs MAC/IP associations for 90 days to provide the operator with DMCA Safe Harbor protection and CALEA compliance.
Monetization and Revenue Models
The node operates in two distinct modes to generate revenue for the operator.
Mode A: Transient Consumer Micro-Transactions
Users connecting to the Wi-Fi are redirected to a locally hosted Captive Portal.
- Pricing: Standardized at $5.00 per GB.
- Logic: Upon payment via Stripe or the Lightning Network, the Tollbooth Agent allocates 1,024 MB to the user’s MAC address.
- Enforcement: Sessions are instantly revoked once the data limit is reached, redirecting the user to a top-up page.
Mode B: M2M IoT Backhaul (LoRaWAN)
Operators can lease the node’s long-range capabilities to neighboring entities (e.g., farms using soil sensors).
- Pricing: Flat $10.00 per month subscription per device.
- Logic: Neighbors’ LoRa device EUIs are whitelisted via the Sovereign Dashboard.
- Route: Telemetry is caught by the Mesh Beacon at 915MHz and routed securely over the Starlink backhaul.
Risk Management and Mitigation
The internal documentation identifies several operational risks and provides specific technical mitigations.
| Risk ID | Description | Mitigation Strategy |
| R-QOS-01 | Bandwidth Hogging (e.g., 4K streaming) | Strict QoS shaping: 15 Mbps Down / 2 Mbps Up limit per MAC address. |
| R-AUP-01 | Starlink Terms of Service Violations | System is hardware-locked to TriFiWireless Enterprise API; will not boot with residential dishes. |
| R-SEC-01 | Captive Portal Bypass (MAC Spoofing) | Sovereign Audit monitors for rapid MAC cycling and triggers localized blocklists. |
Support and Revenue Sharing
DeReticular provides a managed service approach to the WISP-in-a-Box model.
- Revenue Split: DeReticular handles chargebacks, tax reporting, and gateway management in exchange for a 50% data margin split.
- Auditing: Operators use a “Locutus Ledger” dashboard to cryptographically audit all micro-transactions.
- Maintenance: Hardware includes a 1-year limited warranty. Software, including the pfSense firewall and Tollbooth agent, receives Over-The-Air (OTA) updates via the DeReticular registry.