Counterintelligence5 state paths
Identify a clandestine insider through access, behavior, damage, and controlled tests.
- Evidence behavior
- Privileges chain of custody, access matrices, temporal opportunity, and behavior after controlled disclosures.
- Common false read
- Skepticism equals paranoia; disciplined skepticism differs from unbounded suspicion.
Open complete persona model →
Counterintelligence5 state paths
Determine whether a source has claimed access, authentic reporting history, independence, and stable motivation.
- Evidence behavior
- Compares knowledge boundaries, source chronology, corroboration, and incentive to fabricate.
- Common false read
- A validated source is truthful; validation establishes bounded confidence, not purity.
Open complete persona model →
Counterintelligence5 state paths
Extract usable knowledge from a person crossing sides while testing deception and protecting welfare.
- Evidence behavior
- Seeks names, timelines, procedures, knowledge limits, and repeated accounts under different framing.
- Common false read
- A defector’s first account should be complete and consistent; memory, secrecy, trauma, and strategic withholding complicate it.
Open complete persona model →
Counterintelligence5 state paths
Monitor people and systems from inside an institution without openly controlling them.
- Evidence behavior
- Notices deviations in routine, permissions, audience, record changes, and unexplained contact.
- Common false read
- Watching proves hostile intent; internal watchers may be protective, abusive, compromised, or mixed.
Open complete persona model →
Counterintelligence5 state paths
Design or manage controlled narratives, false channels, double-agent traffic, and adversary perceptions.
- Evidence behavior
- Uses adversary reactions, planted indicators, channel integrity, and behavioral feedback as evidence.
- Common false read
- A deception controller always knows the truth; compartmentation can leave them with only a larger model.
Open complete persona model →
Counterintelligence5 state paths
Continue an investigation while covert pressure, coercion, divided loyalty, or manipulated evidence distorts decisions.
- Evidence behavior
- Produces correct low-risk findings alongside omissions, timing distortions, or selective escalation.
- Common false read
- Any bad conclusion proves corruption; compromise is demonstrated through patterned control, not mere error.
Open complete persona model →
Analysis & Evidence5 state paths
Rebuild event order across incompatible clocks, logs, testimony, records, and missing intervals.
- Evidence behavior
- Marks observed time, recorded time, reported time, altered time, and inferred intervals separately.
- Common false read
- A timeline is objective because it has timestamps; timestamps inherit system and author errors.
Open complete persona model →
Analysis & Evidence5 state paths
Preserve provenance, versions, omissions, redactions, and the ability to reconstruct who changed a record.
- Evidence behavior
- Notices version gaps, metadata collisions, selective retention, and records created to legalize a prior action.
- Common false read
- Records are passive; archives are active power over whose reality can be proven.
Open complete persona model →
Signals & Technical5 state paths
Recover and explain digital events from devices, logs, memory, metadata, and deletion traces.
- Evidence behavior
- Seeks artifact provenance, access path, alteration, and alternative user or process explanations.
- Common false read
- Deleted means guilty or logged means true; both require context.
Open complete persona model →
Cover, Identity & Logistics5 state paths
Design a complete cover life that survives routine and adversarial scrutiny.
- Evidence behavior
- Looks for identity collisions, bureaucratic dependencies, pocket evidence, and social questions the cover cannot answer naturally.
- Common false read
- A legend is a lie layered over a true self; long-lived identities accumulate authentic experience and attachment.
Open complete persona model →
Cover, Identity & Logistics5 state paths
Maintain, recover, split, or suppress the documentary histories that make people legible to institutions.
- Evidence behavior
- Detects duplicate identifiers, impossible chronology, selective deletion, and records created to authorize prior action.
- Common false read
- Records merely describe identity; records can create, erase, confine, or protect it.
Open complete persona model →
Cover, Identity & Logistics5 state paths
Keep network endpoints separated by moving only the information, signal, or item needed for one transfer.
- Evidence behavior
- Reads route, timing, recognition signals, surveillance, and unexpected context.
- Common false read
- Limited context means low importance; a cut-out can be the single failure point protecting an entire network.
Open complete persona model →
Cover, Identity & Logistics5 state paths
Move physical or digital material across time and space while minimizing attribution and interception.
- Evidence behavior
- Produces transit traces, environmental observations, and chain-of-custody evidence.
- Common false read
- A courier is interchangeable; local knowledge and judgment determine whether the network survives.
Open complete persona model →
Cover, Identity & Logistics5 state paths
Maintain refuge, supplies, routines, separation, and believable ordinary life around people who cannot safely be visible.
- Evidence behavior
- Notices altered routine, neighbor attention, supply anomalies, and interpersonal tensions that create exposure.
- Common false read
- A safehouse is only a location; it is a social system whose manager carries the exposure.
Open complete persona model →
Cover, Identity & Logistics5 state paths
Design and manage the movement of a person, evidence, or team out of compromise.
- Evidence behavior
- Uses surveillance pattern, transport, border, medical, weather, and adversary-response evidence.
- Common false read
- Successful extraction equals rescue; removal can become detention, disappearance, or a new dependency.
Open complete persona model →
Cover, Identity & Logistics5 state paths
Obtain equipment and services without exposing purpose, identities, timing, or supply-chain dependence.
- Evidence behavior
- Reads invoice structures, delivery routes, serial patterns, beneficial ownership, and unusual specification choices.
- Common false read
- Procurement is administrative background; it creates persistent evidence and operational capability.
Open complete persona model →
Clinical & Institutional5 state paths
Audit whether clinical, personnel, access, and incident records preserve truth, consent, chronology, and lawful authority.
- Evidence behavior
- Compares versions, authors, timestamps, reason codes, and operational consequences.
- Common false read
- An accurate field equals an accurate record; context and purpose can still be false.
Open complete persona model →
Narrative & Relationship Functions5 state paths
Possess knowledge or skill the player needs while resisting responsibility for another recruit, patient, or operative.
- Evidence behavior
- Reveals procedures, cautionary omissions, and the shape of old mistakes.
- Common false read
- Mentor means benevolent authority or hidden omniscience.
Open complete persona model →
Narrative & Relationship Functions5 state paths
Use warmth, attention, humor, admiration, or intimacy to shape another person’s choices.
- Evidence behavior
- Reads need, self-image, social context, and the target’s preferred explanation of their own decision.
- Common false read
- Charm proves evil or genuine affection proves absence of manipulation.
Open complete persona model →
Narrative & Relationship Functions5 state paths
Oppose the player through rules, custody, safety protocols, jurisdiction, or evidence standards rather than personal hatred.
- Evidence behavior
- Produces permits, logs, denials, thresholds, and procedural contradictions.
- Common false read
- Antagonism means malice; procedural opposition may be principled, captured, fearful, or mixed.
Open complete persona model →
Narrative & Relationship Functions5 state paths
Protect a person while withholding truth, restricting choices, or serving another authority.
- Evidence behavior
- Leaves evidence in prevented access, altered records, guarded routes, and exceptions made in private.
- Common false read
- Protective intent makes coercion harmless or coercion proves absence of care.
Open complete persona model →
Narrative & Relationship Functions5 state paths
Control access to multiple partial truths and decide which audience receives which version.
- Evidence behavior
- Offers documents, introductions, context, and contradictions rather than one final answer.
- Common false read
- The broker knows canonical truth; they know intersections others cannot see.
Open complete persona model →
Narrative & Relationship Functions5 state paths
Connect otherwise separated characters, factions, evidence streams, or locations while appearing peripheral.
- Evidence behavior
- Reveals who can reach whom, whose story changes by audience, and which transfer actually occurred.
- Common false read
- Peripheral status means minor character; network position can make them central.
Open complete persona model →
Narrative & Relationship Functions5 state paths
Appear to possess mandate, knowledge, expertise, or command beyond what can be independently verified.
- Evidence behavior
- Produces polished conclusions with weak provenance, ambiguous jurisdiction, or borrowed expertise.
- Common false read
- Confidence and credentials prove legitimacy; authority is a claim with a chain of custody.
Open complete persona model →
Narrative & Relationship Functions5 state paths
Oppose the player consistently because of duty, values, faction, protection, or a different risk calculation while remaining honest about the conflict.
- Evidence behavior
- Provides reliable warnings, visible principles, and evidence about what the opposing side truly protects.
- Common false read
- Opposition equals villainy or future friendship erases consequence.
Open complete persona model →