The argument
The parties do not speak.
People talk to their commune and are rarely understood. The commune talks to the state and is rarely supported, and rarely understood either. Around all of it sits the lobbying, the interests, the money with a preference, and the politicians who hold interests of their own.
Someone called this an intelligent system for society. It is not. It is old. It is slow. It cannot see itself.
Already happening
And it is already being replaced, from outside.
Not soon. Now. The Danish police run Palantir and its consultants can reach the data inside it, confirmed by the Justice Ministry to the Folketing. The Swedish police run it too, and told neither their own oversight board, nor the data protection authority, nor the inspectorate. Finland has run it since 2013. Norwegian customs extended to 2030 with no fresh competition.
In February 2023 the German Constitutional Court struck the mechanism down. Insufficient thresholds. Profiling risk. The highest court in Germany said what the Nordics have not said yet.
Public procurement and public court record, verified August 2026 · institutions and companies only, never a person
Denmark
POL-INTEL and PET-INTEL at the national police since 2016, won against BAE and SAS Institute in open competition. The vendor’s consultants can reach data stored inside POL-INTEL.
Confirmed by the Justice Ministry in answers to Retsudvalget, spm. 908 and 948. Greenland’s police migrated November 2025.
Sweden
A Gotham variant has run at Polismyndigheten for about five years, with vendor staff working inside police headquarters. The police can neither confirm nor deny the relationship, citing national security. Neither the insynsråd, nor IMY, nor SIN was informed.
No award notice exists in TED for any of it. The only public proxy is the vendor’s own filed Swedish revenue, SEK 146.7m for all of 2024, across every customer combined.
Finland
In use at customs, police and the border guard since 2013, as Toivo, renamed Atrain in 2024.
Thirteen years of use, no public figure.
Norway
Tolletaten since 2017, under open EEA competition, then extended to 2030 with an option to 2035 and no fresh competition.
NOK 300m at award, NOK 594.5m by 2024.
Germany
The Federal Constitutional Court voided Hesse’s and Hamburg’s automated data analysis laws, for insufficient intervention thresholds and profiling risk.
BVerfG, 16 February 2023, 1 BvR 1547/19 and 1 BvR 2634/20.
The wrong question
Surveillance is being sold as the answer.
It answers the wrong question. The failure is not that authority cannot see its people closely enough. The failure is in the grounding system itself. Nobody compares anything. Nobody can see what anything should cost. Nobody knows who already solved this.
So the record stays dark, and someone arrives selling a light that only points one way. At you.
What it does
Halantir heals the grounding system. It does only that.
The public record of the Nordics, joined and searchable, with a receipt on every figure. Ask what a thing should cost and the answer is the commune that already bought it. Ask what happens next and the answer is the commune that already hit this wall, with what it cost them and how long it took.
What the record holds today, dataset by dataset and counted at the moment you ask, is at the record. A thousand more communes follow, one country at a time, and never before the layer below is green.
The founding refusal
What it will never do.
No person is scored. No person is ranked, flagged, or tracked. Not now and not later, because the join that would allow it does not exist in the database. That is architecture, not a policy, and architecture does not change its mind under pressure.
No control layer. No governance imposed on anyone. The record renders, receipts, and stops. The verdict stays where it belongs, with the reader and with the officials who hold the legal authority to act.
Be exact about what that means, because vagueness here would be its own tell. Committee minutes are stored exactly as the register published them, and register prose does name officials. Removing those names would be editing the record, which this system may not do.
What does not exist is a person table, a person key, and any index over that prose. Not a btree, not a GIN, not a tsvector expression, not a vector index. No index means no search across it, no aggregation over it, and no join that could assemble a person out of it. The acceptance suite scans pg_index on every build and fails if one ever appears.
Every competitor can write a privacy policy. Only a system whose schema forbids the join can say this, and anyone can read the migrations and check.
The name
Hala-týr. God of heroes, lord of men.
The wordmark is Old Norse and it owes nothing to anyone else's seeing-stone. The lineage is published so it can be checked, which is the same standard every figure on this site is held to.
Hala-týr
The descriptor is the official layer. That is what the product is, not what it is called. Built here, held here, for a sovereign future. Nothing leaves. Nobody watches you.
The ledger opens empty
Track record: zero. That figure publishes today.
The misses publish beside it. The claims ledger opens in public and no hit rate renders until claims mature. Every version's curve stays on the record permanently, which law 29 requires.