Language:
PRODUCTS
MORE
Quantum Security 🔍 Search Request Access →
gateForeignDirectInvestment — Critical Infrastructure FDI Screening Gate
// IMMO.QUICK · GATEFOREIGNDIRECTINVESTMENT · GATE 26 · AWV § 55/55A · EU-VO 2019/452 · NIS2

One obscured holding, no notarial contract.

gateForeignDirectInvestment forensically seals that an investment in critical infrastructure passes four clusters, sector classification, UBO chain resolution, sanctions & national security, and NIS2 CRITIS operator status, before ownership is transferred. Support for notaries and authorities, never a replacement for a regulator's own recognition as evidence.

In one sentence: gateForeignDirectInvestment resolves the ownership chain up to ten levels deep and blocks the notarial deed as soon as a sanctioned state actor or an obscured holding surfaces.
✓ RELEVANT IF...
  • You sell critical infrastructure (ports, power grids, 5G) to foreign investors
  • You need to prove the UBO chain and sanctions freedom before the notarial deed
✕ NOT RELEVANT IF...
  • You expect the BMWK to automatically recognise the result as investment-screening clearance
  • No critical infrastructure or security-relevant sector is involved
// The problem

The sell-off of critical infrastructure is a matter of national security.

The sale of ports, power grids, or 5G networks to foreign investors directly affects national security. gateForeignDirectInvestment enforces the complete forensic resolution of the ultimate beneficial owner chain before the notarial contract is executed.

The notarial contract is not executed
If the algorithm finds a sanctioned state actor or an obscured holding in the background, the T=0 lock fires. The notarial contract is deterministically blocked before ownership can be transferred, the transfer does not proceed until the obfuscation is resolved.
// Architecture

Four clusters, checked sequentially.

Every cluster is dispositive (material_block_mode: true), a hit blocks bindingly, not merely for documentation. That is the default at this systemic bottleneck.

CLUSTER 1
Sector Classification
Checks CRITIS sector membership and the participation threshold (CRITIS 10%, sensitive 20%, standard 25%), the BMWK notification duty, and blocks acquisitions above 50% without clearance.
kritis_sector_flag · participation_threshold_pct · bmwk_notified
CLUSTER 2
UBO Chain Resolution
Resolves the ownership chain up to ten levels deep, cross-checks against the transparency register, and detects obfuscation as well as state-actor/SOE flags.
ubo_chain_depth · transparency_register_match · obfuscation_detected
CLUSTER 3
Sanctions & National Security
Screens against EU/US sanctions lists, Common Position 2008/944/CFSP, and the BMWK prohibition list.
sanctions_list_hit · bmwk_block_list_hit
CLUSTER 4
NIS2 CRITIS Operator Status
Checks BSI CRITIS registration and certification of BSI minimum standards under the NIS2 Directive and the BSI CRITIS Ordinance.
bsi_kritis_registered · bsi_minimum_standards_certified
Fatal test case: obfuscation in the UBO chain
A 25% stake in a telecom 5G backhaul operator with obfuscation in the UBO chain triggers BLOCK_F2_UBO_KETTE_UNAUFGEKLAERT. The notarial contract is not executed until the obscured holding is uncovered.
// Test results

Two tested scenarios.

All values on this page are fictional test data and serve only to illustrate the gate logic.

Scenario C1C2C3C4 Verdict Latency
BMWK Bremen port 35% TRANSPORT, UBO 10 levels clean, NIS2-BSI-CRITIS OKPASSPASSPASSPASSFDI_SEALED719ms
Hamburg 5G backhaul 25% TELECOM, obfuscation in UBO chainPASSFAILnot evaluatednot evaluatedBLOCK_F2_UBO_KETTE_UNAUFGEKLAERT540ms
Cryptographic chain continuation
Every test produces a deterministic receipt_id (VAR-FDI-{TENANT}-{SEQ}), an input_snapshot_hash, an HMAC-SHA256 signature, and a merkle_link to the previous receipt. Persistence occurs in the FDIReceipt entity with a 10-year retention period.
// Clarification

What gateForeignDirectInvestment is not.

  • Not automatic recognition by the BMWK or an investment-screening authority. The gate delivers a cryptographic proof, not regulatory clearance.
  • Not an independent transparency register. The gate checks against integrated registers, it does not operate its own register.

For notaries and authorities that want to make critical-infrastructure investment screening provable.

Request Access →