Operational sequence
- Confirm compromise without using the suspected channel.
- Map knowledge and contact exposure.
- Give the asset concrete options and costs.
- Separate evidence preservation from extraction movement.
- Retire or fork identities with documented consent where possible.
Failure states
- Calling disavowal an extraction
- Using the asset as bait without player-visible consequence
- Erasing ordinary relationships from the decision