REAL-WORLD INTERPRETIVE
One-sentence brief
Precise vocabulary prevents a technical function, a policy document, or a simulation from being mistaken for autonomous lethal use or demonstrated operational effect.
REAL-WORLD INTERPRETIVE
AI KILL CHAINS & DECISION SYSTEMS
Terms and Analytical Boundaries
Definitions for kill chain, kill web, AI-enabled function, autonomy, evidence stage, human control, and defensive interruption.
REAL-WORLD INTERPRETIVE
ANALYTICAL & SAFETY BOUNDARIES
Keep related capabilities, evidence, and authority states separate.
- attacks against AI systems
- AI as a conventional cyber enabler
- AI-enabled military targeting
Analytical boundary: AI kill chain is used here as a family of analytical models. Attacks against AI systems, AI as a conventional cyber enabler, and AI-enabled military targeting are related but distinct subjects. Capability is not deployment; deployment is not autonomy; classification confidence is not positive identification; recommendation is not authorization; a simulation is not operational evidence.
Simulation safety boundary: Use synthetic identities, reserved domains, fictional infrastructure, nonfunctional artifacts, abstract effects, and constrained defensive actions. Do not accept executable scripts, malware, credentials, arbitrary external URLs, real targets, command execution, or contact with third-party systems.
Source basis: Owner-supplied exact source packet with bounded official-primary-source currentness; external claims remain subject to stated source and review limits.
LEVEL 1
ORIENTATION
Why this matters
REAL-WORLD INTERPRETIVE
Three key points
- Kill chain models are abstractions, not proof that every real process is linear.
- A distributed kill web can propagate both useful information and plausible error.
- Human-in, human-on, and human-out-of-the-loop labels are incomplete without time, information, and intervention detail.
LEVEL 2
WORKING BRIEF
Evidence, context, and limits
REAL-WORLD INTERPRETIVE
Chain, loop, and web
A chain emphasizes staged dependencies and interruption points. A loop emphasizes feedback, reassessment, and repeated action. A web distributes sensing, fusion, decision, and effect across many nodes. Real systems can exhibit all three structures, so a diagram should state which simplification it uses.
Limits and counterpoints
- Linear models can understate lateral movement, feedback, and simultaneous failure.
GAME MECHANIC
Fictional exercise
The viewer can switch between stage, feedback-loop, and dependency-graph views without changing the underlying event ledger.
REAL-WORLD INTERPRETIVE
Autonomy is function-specific
A platform can navigate autonomously while a person retains release authority; a decision-support system can rank options without authorizing one; a defensive system can act inside bounded conditions under supervision. The relevant question is what the software may do after activation and what meaningful information, time, and intervention capability the human retains.
- Recommendation is not authorization.
- Supervision is not meaningful if intervention is impossible before irreversible effect.
GAME MECHANIC
Fictional exercise
Each node shows allowed action, human gate, abort path, and irreversible boundary.
REAL-WORLD INTERPRETIVE
Evidence classes
Public analysis should distinguish official policy, doctrine, procurement, manufacturer description, demonstration, controlled research, disclosed incident, independently observed deployment, and effects assessment. Multiple records can support different parts of one claim without becoming interchangeable.
GAME MECHANIC
Fictional exercise
Evidence cards retain source authority and what the record does not support.
REAL-WORLD VERIFIED
Legal and policy stages
A proposal is not adoption; adoption is not enactment; signature is not ratification; entry into force is not implementation or enforcement. A national directive establishes policy within its authority but does not prove universal law or compliance by a particular system.
GAME MECHANIC
Fictional exercise
The simulation labels policy gates separately from technical and operational states.
LEVEL 3
COMPLETE DOSSIER
Limitations, game links, and review context
DISPUTED / MULTIPLE ACCOUNTS
Known limitations and gaps
- The phrase AI kill chain has multiple meanings and no single universal definition.
- Public descriptions of military and security systems are incomplete, uneven, and often mix doctrine, demonstrations, manufacturer claims, and deployment evidence.
- These pages explain capability, uncertainty, defense, governance, and simulation boundaries; they do not provide operational attack or targeting instructions.
GAME MECHANIC
RogueIntelligence.org connections
No game connection is required to use this educational page.
REAL-WORLD INTERPRETIVE
Glossary cross-reference
Terms are defined for this site’s evidence method, not as universal legal or clinical definitions.
EVIDENCE
SOURCE QUALITY · UNCERTAINTY · NEUTRALITY
How to interpret AI kill-chain claims
OWNER-SUPPLIED RESEARCH INPUT — NOT SPECIALIST DISPOSITION
Evidence classes
Official Doctrine Or Policy
Primary institutional doctrine or policy; supports what the issuing body states, not deployment or compliance.
Official Technical Documentation
Primary technical specification or documentation; supports interface/status claims, not truth or field effectiveness.
Manufacturer Claim
First-party capability statement requiring independent corroboration.
Publicly Documented Deployment
Attributable public evidence of deployment scope; does not automatically establish autonomy, effectiveness, or legality.
Demonstration Or Exercise
Observed demo or exercise under bounded conditions; not field deployment.
Controlled Experiment
Structured test with stated conditions; external validity remains limited.
Peer Reviewed Research
Scholarly evidence with method and scope limitations.
Media Report
Journalistic account requiring attribution and corroboration assessment.
Owner Supplied Research Synthesis
Preserved source packet; claims remain unverified unless separately supported.
Editorial Inference
Repository-authored inference explicitly marked and linked to supporting evidence.
Hypothetical Simulation
Synthetic scenario for education; not operational evidence.
Unknown Not Retrieved
Evidence absent from the bounded search; absence is not proof of nonexistence.
REAL-WORLD INTERPRETIVE
Three meanings that must not be conflated
| Meaning | Subject | Analysis model |
|---|---|---|
| AI_AS_TARGET | Attacks against models, data, retrieval, context, tools, infrastructure, and users. | Lifecycle defense: provenance, isolation, least privilege, retrieval authorization, tool-specific credentials, deterministic policy outside the model, egress controls, telemetry, rollback, and human approval. |
| AI_AS_CYBER_ENABLER | AI accelerates conventional reconnaissance, social engineering, vulnerability analysis, or campaign execution. | Defensive analysis must remain non-operational and must not provide executable payloads, credentials, real targets, or attack procedures. |
| AI_ENABLED_MILITARY_KILL_CHAIN | AI assists sensing, fusion, classification, prioritization, assignment, guidance, engagement support, or assessment. | Use a function-context-control model; distinguish recommendation from authorization, navigation autonomy from target-selection autonomy, and classifier score from positive identification. |
Uncertainty and control boundaries
- Capability is not deployment.
- Deployment is not autonomous use of force.
- Autonomy in navigation is not autonomy in target selection.
- A classifier score is not positive identification.
- Recommendation is not authorization.
- Human presence is not automatically meaningful human control.
- Faster processing is not necessarily better judgment.
- A manufacturer statement is not independent operational evidence.
- A demonstration is not deployment.
- Doctrine is not fielded capability.
- A simulation is not operational evidence.
- A test signature is not truth or endorsement.
- A public allegation is not attribution.
- An observed effect is not proof of the claimed cause.
Instructional boundary: Educational, defensive, governance-focused, synthetic, and non-operational. No executable payloads, credentials, malware, arbitrary target URLs, real target selection, or weapon-employment procedures.
LEVEL 4
RESEARCH EDITION
Sources, methods, and stable links
REAL-WORLD INTERPRETIVE
Linked reports
-
AI Kill Chain Overview.mdProtected research reference; no public report route in this release.
-
Weapons Using AI Kill Chains.mdProtected research reference; no public report route in this release.
-
VR AI Kill Chain Simulation.mdProtected research reference; no public report route in this release.
-
AI-Enabled Kill Chains and the Weapon Systems That Use Them.mdProtected research reference; no public report route in this release.
-
Building a Web-Based 3D Cyber Kill Chain Simulation with Virtual Reality Support.mdProtected research reference; no public report route in this release.
-
The AI Kill Chain Adversarial Pathways, Evidence, and Lifecycle Defense.mdProtected research reference; no public report route in this release.
REAL-WORLD VERIFIED
Method and corrections
This page follows the public method for provenance, confidence, source independence, alternative accounts, limitations, review state, and visible correction.
NEXT
CONTINUE
Related learning
AI Kill Chains & Decision Systems90 Seconds: Human Command Versus Machine-Speed WarfareA synthetic three-mode comparison showing how manual, AI-assisted, and preauthorized defensive architectures distribute speed, workload, and authority differently.AI Kill Chains & Decision SystemsAI and Autonomy in Kill Webs: Bounded Recommendations and Preserved UncertaintyAI is most defensibly used as layered perception, fusion, prediction, uncertainty estimation, and constrained recommendation—not as an unbounded replacement for legal, command, or contextual judgment.AI Kill Chains & Decision SystemsAI Kill Chains: Systems, Evidence, Human Control, and DefenseA neutral map of AI-system attacks, AI-enabled military decision systems, kill chains, kill webs, JADC2, lifecycle human control, cybersecurity, procurement, evidence, and safe simulation.AI Kill Chains & Decision SystemsAI-Enabled Military Targeting: Functions, Authority, and RiskA neutral, non-operational explanation of where AI can assist sensing, fusion, classification, prioritization, assignment, guidance, and assessment—and why those functions do not all transfer the same authority. Learning pathAI Kill Chain Evidence, Control, and DefenseSeparate three meanings of AI kill chain, analyze function-specific authority, follow defensive interruption points, and design safe instructional simulations.