IST-Africa 2026 Conference

25 - 29 May 2026

Operationalizing Digital Sovereignty: A Privacy-Preserving Protocol for Cross-Border Threat Intelligence in East Africa

Authors

Steve Gamba, University of Nairobi, Kenya

James Kimuyu, National Defence University, Kenya

Elisha Abade, University of Nairobi, Kenya

Published in

IST-Africa 2026 Conference Proceedings

ISSN: 2576-8581

ISBN: 978-1-905824-76-2

DOI: https://doi.org/10.67725/IST-Africa.2026.LKMA2986

Publisher

IST-Africa Institute and IIMC International Information Management Corporation Ltd

Published in Ireland

Abstract

Data-localization regimes across Africa impose strong constraints on cross-border handling of sensitive operational telemetry, yet effective cyber defense requires timely supervisory visibility across interconnected Critical Information Infrastructure (CII). This paper proposes the Secure Regulatory & Audit Query Protocol (SRAQP), implemented as a Cryptographically Verifiable State Machine (CVSM), to enable regulators to verify execution of mandated supervisory analytics without exfiltrating protected institutional data. SRAQP combines TrustLang, a formally constrained declarative policy language for specifying supervisory conditions, zk-SNARK attestations of correct local execution over pre-committed datasets, and Byzantine Fault Tolerant consensus to record outcomes as deterministic, replayable state transitions suitable for audit. An analytical pilot model of a National Monetary Authority supervising forty banks demonstrates feasibility of deterministic verification under data-localization constraints and highlights how protocol-based verification can reduce reliance on discretionary institutional reporting while preserving privacy.

Keywords

Data Localization, Regulatory Verification, Digital Sovereignty, Zero-Knowledge Proofs, Byzantine Fault Tolerance, Critical Information Infrastructure

Cite this paper

S. Gamba, J. Kimuyu and E. Abade (2026) "Operationalizing Digital Sovereignty: A Privacy-Preserving Protocol for Cross-Border Threat Intelligence in East Africa", IST-Africa 2026 Conference Proceedings, Miriam Cunningham and Paul Cunningham (Eds), IST-Africa Institute and IIMC, 2026, ISSN: 2576-8581, ISBN: 978-1-905824-76-2, https://doi.org/10.67725/IST-Africa.2026.LKMA2986

Access Paper

Click here to access this paper

IST-Africa Community Members can download papers by logging into their existing account.

If you wish to become a member of IST-Africa Community, please register your profile and you will then receive login details which you can use to access the papers.

Access to papers in the IST-Africa 2026 Conference Proceedings is for INDIVIDUAL USE only. Neither the Conference Proceedings (or individual double blind peer reviewed papers) are to be included in any public or institutional repository or processed in the context of any AI tool or large language model without prior written permission from the Publishers.

While the IST-Africa Institute and IIMC retain copyright of the Conference Proceedings, each author retains copyright to their individual paper. No paper or part thereof may be reproduced without the written permission of both the Conference Proceedings Publishers and appropriate author(s).