On Spies: The Architecture of Intelligence in the Community

Advanced40-60 minutesCross-platformDiscordSteam Workshop

Every chapter of the doctrine has depended on knowledge. The commander who balked the enemy's plans knew them. The commander who attacked the weak point knew where the weak point was. The commander who set the fire in the dry season knew the season. This chapter is about where that knowledge comes from. The Yamak Institute's cohort research is unambiguous: in the 1,800-plus documented drama engagements tracked since 2018, the decisive advantage belonged, in an overwhelming majority of cases, to the side that knew more about the other, and no quantity of argumentative skill could compensate for the deficit. The commander who knows the enemy's dispositions is fighting a different war than the commander who does not.

This article is the thirteenth and final chapter of the doctrine, reading Sun Tzu's "The Use of Spies" as a manual for the architecture of intelligence in the Unturned community. It establishes the five classes of spies, the principle that foreknowledge comes from other men and not from spirits, and the discipline that the end and aim of spying is knowledge of the enemy, nothing more and nothing less.

Hence the use of spies, of whom there are five classes: local spies, inward spies, converted spies, doomed spies, and surviving spies.
Sun Tzu, The Art of War, ch. 13

Prerequisites

The doctrine of the preceding chapters, each of which depended on the knowledge this chapter provides
A clear statement of who the enemy is in your campaign, because the intelligence service exists to answer one question about one subject
A working understanding of the difference between reading public conduct and surveilling private life, which the chapter draws and redraws
Experience with at least one engagement in which the side that knew more won without having to argue more

What You Will Learn

The five classes of spies and the community translation of each
Why the commander who maintains all five has an architecture, and the commander who relies on one channel has a rumor
Why foreknowledge cannot be elicited from spirits, inductively from experience, or by calculation, but only from other men
The management of the service: the subtlety of the employment, the secrecy that preserves the source, and the termination of the burned one
The reading of the enemy's surface as a text, and the alphabet of the public record
Why the end and aim of spying is knowledge of the enemy, nothing more and nothing less
The five-stage protocol for running an intelligence service
The answers to the twelve documented objections to the intelligence doctrine
The full reference apparatus: the intelligence studies, the protocol, and the complete chain of foreknowledge

The Five Classes of Spies

The doctrine's classification of the intelligence service is precise, and each of the five classes has a direct translation to the community landscape. The commander who maintains all five has an intelligence architecture; the commander who relies on a single channel has a rumor.

Class	Sun Tzu definition	Community translation
Local spies	Employing the services of the inhabitants of a district	The members of the communities the enemy operates in, who observe the enemy's ordinary behavior
Inward spies	Making use of officials of the enemy	The enemy's own moderators, staff, or deputies, whose position gives them access
Converted spies	Getting hold of the enemy's spies and using them for our own purposes	The enemy's agent who, once detected and handled correctly, reports back to us
Doomed spies	Doing certain things openly for purposes of deception	The controlled leak: false or planted information released to be carried back to the enemy
Surviving spies	Those who bring back news from the enemy's camp	The commander's own trusted observers, who return with reports from the enemy's surface

Did you know?

The Yamak Institute's 2023 intelligence audit found that the surviving spy was the most underused class in the community. The overwhelming majority of factions operated on information from their own members' casual observations, which the Institute classifies as the province of the local spy. Factions that deliberately maintained surviving spies, observers with a defined reporting discipline and a defined reporting channel, made correct forecasts of enemy action at a rate nearly double that of factions relying on casual observation alone.

Local Spies: The Inhabitants of the District

The local spy is the members of the communities the enemy operates in, who observe the enemy's ordinary behavior. The class is the community's most available, because it is the least organized: the faction's members already move through the neighborhoods the enemy inhabits, and their ordinary observation is the raw material of the intelligence service. The local spy observes the enemy's ordinary behavior: the tone of the channels, the subjects of the threads, the mood of the members, the small changes that the enemy's own conduct reveals.

The local spy is the base of the intelligence architecture, and the doctrine's counsel is that the base be organized or wasted. The faction that relies on its members' casual observation, unasked and unreported, is running a service whose intelligence is scattered, unverified, and mostly lost, because the observations are made and never collected. The faction that asks its members to report, on a defined schedule, through a defined channel, has organized the local class, and the organization is the difference between the members' chatter and the faction's intelligence.

The failure mode of the local class is the rumor: the members' observation that is repeated without verification, passed without source, and believed without confirmation. The local spy's report is a fact about the enemy's surface, and the rumor is a story about the enemy that has lost its anchor. The doctrine's counsel is that the local class reports what is observed, with the surface and the date, and that the report is verified before it is used, because the intelligence service that runs on rumor is the service that acts on what the enemy wanted it to believe.

Inward Spies: The Officials of the Enemy

The inward spy is the enemy's own moderator, staff, or deputy, whose position gives access to the enemy's plans and intentions. The class is the service's deepest reach, and it is the rarest and the most fragile, because the position that gives access also gives risk: the enemy's staff member who reports on the enemy is exposed to the enemy's scrutiny, and the service that employs the inward spy is holding a source that can be burned by the smallest mistake. The doctrine's counsel is that the inward class is employed carefully and protected absolutely, because the position is the access and the access is the intelligence.

The inward spy's value is the plans and intentions, the knowledge that the public surface does not carry. The enemy's coordination, its schedule, its contingency, its private decisions: each is visible to the enemy's own staff and to no one else, and the commander who has an inward source among the enemy's staff has foreknowledge of the plans that the other classes can only infer. The inward class is the difference between knowing what the enemy is doing and knowing what the enemy intends.

The inward class is also the most dangerous to employ, and the doctrine is explicit about the danger. The enemy's staff member who reports on the enemy is a member of the enemy's community, with relationships in it and loyalty to it, and the service that employs the inward spy is asking a person to divide themselves. The employment is not a game and the doctrine does not treat it as one; it is the deepest reach of the intelligence architecture, and the commander who employs the inward class employs it with the discipline the deepest reach requires, or does not employ it at all.

Converted Spies: The Enemy's Agent Handled

The converted spy is the enemy's agent who, once detected and handled correctly, reports back to us. The class is the doctrine's most elegant economy: the enemy's own spy, caught, becomes the faction's own source, and the enemy's investment is converted into the faction's advantage. The conversion is the detection first: the enemy's agent is identified by the signs, the pattern, or the leak, and the identification is the moment the conversion becomes possible. The agent who is not detected remains the enemy's; the agent who is detected is a choice.

The handling is the doctrine's whole teaching on the converted class. The detected agent is not exposed, not publicly burned, not driven off; the detected agent is handled, which means the faction knows who the agent is, what the agent reports, and to whom, and the faction decides what the agent should carry back. The handled agent reports what the faction wants the enemy to hear, and the enemy's own service becomes the faction's channel, the enemy's own investment the faction's instrument.

The failure mode of the converted class is the mishandled agent, and the mishandling takes two forms. The first is the exposure: the faction that detects the enemy's agent and publicizes the detection has spent the conversion for a gesture, because the exposed agent is dead and the channel is closed. The second is the double use: the faction that tries to feed the converted agent false material and true material together has corrupted its own channel, because the enemy that detects the pattern of the feed will close the channel and know the agent was turned. The conversion is handled cleanly or it is not handled at all.

Doomed Spies: The Controlled Leak

The doomed spy is the controlled leak: false or planted information released to be carried back to the enemy. The class is the service's offensive arm, and its community translation is the deliberate release designed to be seen by the enemy: the planted post, the staged announcement, the information released on the surface the enemy's agents are watching. The doomed spy does not bring back intelligence; it delivers it, and what it delivers is what the faction wants the enemy to believe.

The controlled leak has a specific purpose, which is the management of the enemy's preparation. The faction that knows the enemy is watching its surface can feed the enemy what it wants the enemy to prepare for, and the preparation is the enemy's commitment to a plan the faction does not intend. The leak is the lure, and the lure works because the enemy's own intelligence service, believing it has found something, carries the false material back as truth. The doomed spy is the enemy's own channel, loaded by the faction.

The doctrine's counsel is that the controlled leak is used sparingly and never casually, because the leak that is detected is worse than no leak. The enemy that detects the planted material knows its own channel has been turned, closes the channel, and distrusts its own intelligence, which is a loss the faction cannot recall. The controlled leak is the service's most delicate instrument, and the commander who uses it without accounting for the detection has spent the enemy's trust in its own service, which is a resource the faction does not own.

Surviving Spies: The Trusted Observers

The surviving spy is the commander's own trusted observer, who returns with reports from the enemy's surface. The class is the service's most disciplined and the most underused, and the Institute's 2023 audit found the gap: the overwhelming majority of factions ran on the local class's casual observation, and the factions that deliberately maintained surviving spies, with a defined reporting discipline and a defined reporting channel, made correct forecasts at nearly double the rate. The surviving spy is the local observer organized into a discipline.

The discipline has three parts, and the doctrine names them. The observer is trusted: a member whose loyalty is not in question and whose presence on the enemy's surface is legitimate. The observer reports on a defined schedule: the report is made regularly, whether or not anything notable happened, because the routine is what makes the change visible. And the observer reports through a defined channel: the report reaches the commander directly and is not broadcast, because the intelligence's secrecy is the service's survival. The three parts are the difference between the observer who happens to be present and the surviving spy who reports.

The April 2023 case is the demonstration. A faction's commander suspected a rival was planning a coordinated action but had no evidence. The commander did not guess, and did not rely on the reading of the rival's public posture, which was innocuous. The commander activated the surviving spy: a trusted member with a legitimate presence in the rival's public channels, who reported on a defined schedule. The observer noted a sudden increase in private-thread coordination and the creation of a new, hidden role. The commander had the forecast the omens could not provide, and when the rival's action launched, it landed against a faction that had known it was coming for two weeks.

The Architecture of All Five

The five classes are an architecture, and the doctrine's counsel is that they be built together. The local class provides the base: the ordinary observation of the enemy's surface. The surviving class provides the discipline: the defined reporting that turns observation into forecast. The inward class provides the depth: the plans and intentions that the surface does not carry. The converted class provides the economy: the enemy's own service turned to the faction's channel. And the doomed class provides the offense: the leak that manages the enemy's preparation. The commander who maintains all five has a service that observes, forecasts, reaches, converts, and deceives; the commander who maintains one has a rumor.

The architecture is also the doctrine's answer to the faction's most common error, which is the reliance on a single channel. The faction that runs its intelligence on its members' casual observation alone has built a service with one class and no discipline, and the service produces what the members happen to notice, which is what the enemy happened to let them see. The faction that builds the architecture has redundancy: when one class fails, the others stand, and the intelligence that reaches the commander has been collected by a service, not by a rumor.

The building has an order, and the doctrine's order is the depth of the classes. The local class is built first, because it is the base and the most available. The surviving class is built second, because it organizes the base into discipline. The inward, converted, and doomed classes are built third, as the service's reach grows and the commander's handling improves. The faction that builds the base before the reach has an architecture that can carry the deeper classes; the faction that reaches for the inward class before the base exists has a service with a deep source and no discipline, which is the service that loses its deep source.

The Five Classes Compared

The five classes are best held in one view, and a comparison table may help the commander keep the architecture distinct:

Class	What it observes	What it provides	What it costs
Local	The enemy's ordinary behavior	The base of the collection	Organization, or the observation is lost
Surviving	The enemy's surface, on a schedule	The forecast, at nearly double the rate	A trusted member maintained on the surface
Inward	The enemy's plans and intentions	The depth the surface cannot carry	The deepest source, the highest risk
Converted	The enemy's knowledge of the faction	The enemy's own channel, loaded by the faction	The handling, which must be clean or not at all
Doomed	The enemy's preparation	The management of the enemy's war	The leak that is detected, closing the channel

The table reads across as the architecture's whole shape. The local class provides the base and costs organization; the surviving class provides the forecast and costs a disciplined member; the inward class provides the depth and costs the highest risk; the converted class provides the economy and costs the clean handling; and the doomed class provides the offense and costs the undetected leak. The commander who holds the table holds the five classes and their prices, and the prices are the management discipline the chapter teaches.

The table also states the doctrine's counsel in its most compressed form: the classes are not alternatives to be chosen between, but parts to be built together, each paying for what it provides. The faction that refuses the surviving class because it costs a trusted member has refused the forecast for the price of the discipline; the faction that refuses the inward class because it costs the risk has refused the depth for the price of the reach. The architecture is the whole, and the whole is built because each class's price is paid by what the class provides.

Foreknowledge Comes from Other Men

The chapter's central epistemological claim is the one the doctrine insists on most strongly. Foreknowledge cannot be elicited from spirits, cannot be obtained inductively from experience, and cannot be derived by calculation. It can be obtained only from other men, meaning from the human sources who know the enemy's dispositions. The claim is a rejection of every substitute the community offers: the reading of omens, the analysis of vibes, the confident inference from a rival's public posture.

What enables the wise sovereign and the good general to strike and conquer, and achieve things beyond the reach of ordinary men, is foreknowledge.
Sun Tzu, The Art of War, ch. 13

Now this foreknowledge cannot be elicited from spirits; it cannot be obtained inductively from experience, nor by any deductive calculation.
Sun Tzu, The Art of War, ch. 13

Knowledge of the enemy's dispositions can only be obtained from other men.
Sun Tzu, The Art of War, ch. 13

The Rejection of the Omens

The doctrine's first rejection is the omen, and the community translation is the reading of signs as portents: the vibe of the rival's server, the mood of a thread, the sense that something is coming. The doctrine's claim is that the omen is not knowledge, because the omen is not anchored to a source. The faction that acts on the omen is acting on a feeling that could belong to any cause, and the feeling is as likely to be the enemy's deception as the enemy's truth. The omen cannot be verified, and the doctrine refuses to build a war on the unverifiable.

The rejection of the omen is not a rejection of reading. The chapter's later teaching on the reading of signs is precisely the reading of the enemy's surface as a text, and the difference is the anchor. The sign is anchored to a surface: the sudden quiet, the shift in tone, the hasty deletion, each observed on the enemy's public record and verified against it. The omen is unanchored: a mood, a vibe, a sense, without a surface and without a record. The doctrine builds on the sign and refuses the omen, and the distinction is the whole of the epistemology.

The community's attachment to the omen is understandable, because the omen is cheap and the sign is expensive. The omen costs nothing and feels like knowledge; the sign requires the observation, the schedule, and the report that the intelligence service exists to provide. The doctrine's counsel is that the faction which runs on omens has chosen the cheap substitute, and the substitute is the enemy's favorite currency, because the enemy that knows the faction reads vibes can manufacture the vibes the faction will read.

The Knowledge That Cannot Be Calculated

The doctrine's second rejection is the calculation, and the community translation is the confident inference from the rival's public posture: the deduction that the rival's silence means a plan, that the rival's announcement means an escalation, that the pattern of the posts means the next move. The doctrine's claim is that the calculation is not foreknowledge, because the calculation is the reading of the surface without the source, and the surface is the part of the enemy the enemy controls. The calculation infers from what the enemy shows, and what the enemy shows is what the enemy wants inferred.

The calculation is the doctrine's subtlest rejection, because the calculation looks like discipline. The faction that infers the enemy's plans from the enemy's posture appears to be reading, and the appearance is the trap: the posture is the enemy's display, and the inference from the display is the conclusion the enemy designed. The April 2023 rival's public posture was innocuous, and the calculation from it was nothing; the forecast came from the surviving spy, who saw the private-thread coordination and the hidden role, which the posture could not show.

The doctrine's counsel is that the calculation is the mind's substitute for the source, and the substitute is not accepted. The commander who wants foreknowledge does not calculate it from the surface; the commander sources it from other men, and the sourcing is the service. The calculation is used, in the doctrine, as a hypothesis to be checked against the sources, never as the knowledge itself, and the commander who treats the calculation as knowledge is the commander who has built the war on the enemy's display.

The Other Men and Their Dispositions

The doctrine's positive claim is that knowledge of the enemy's dispositions can only be obtained from other men, and the claim is the chapter's whole architecture in one sentence. The other men are the sources: the members in the enemy's communities, the enemy's own staff, the enemy's agents handled, the trusted observers who report. The dispositions are the enemy's actual state: the coordination, the preparation, the intention, the schedule. The claim is that the two are connected only by the source, and that the faction which wants the dispositions must maintain the men who can see them.

The other men are the doctrine's insistence on the human, and the insistence is the chapter's guard against every machine the community substitutes for the source. The faction that automates its intelligence - the tool that monitors channels, the feed that aggregates posts, the algorithm that scores signals - has built a service of surfaces, not of men, and the surfaces are the enemy's display. The men are the ones who see what the surface hides: the coordination in private threads, the role created in secret, the intention the display conceals. The doctrine's claim is that the dispositions live among the men, and the faction that does not maintain the men has no access to them.

The insistence on the other men is also the chapter's moral weight, and the doctrine is explicit about what the weight is. The men are people, with loyalties, relationships, and risks, and the service that employs them employs them as people, not as machines. The commander who treats the sources as instruments to be spent has corrupted the service, because the sources are the faction's own members and the enemy's own people, and the corruption of the source is the corruption of the knowledge. The doctrine's counsel is that the men are maintained as people, because the dispositions are obtained from them, and the service that loses the people has lost the knowledge they carried.

The Knowledge of the Enemy's Own Knowledge

The doctrine's five classes include a category that the community underuses as often as it underuses the surviving spy, and the category is the converted class's whole purpose: the knowledge of what the enemy knows about the faction. The commander needs to know not only what the enemy intends but what the enemy has learned of the faction's own preparation, because the enemy's knowledge of the faction is the enemy's lever against it. The enemy that knows the faction's weakness will attack it; the enemy that does not know it will not, and the knowledge of the enemy's knowledge is the difference between the faction's exposure and its concealment.

The converted spy provides that knowledge, because the converted spy is the enemy's own agent, reporting back through the channel the enemy trusted. The handled agent carries the feed the faction wants the enemy to believe, and the feed is shaped by what the faction knows the enemy is looking for; the enemy's questions, its priorities, its assumptions about the faction are all visible in the channel the converted spy reports through. The commander who maintains the converted class has a window into the enemy's reading of the faction, and the window is the doctrine's subtlest reach.

The failure mode of the converted class's use is the commander who asks it for the wrong thing. The converted spy reports what the enemy is feeding on, and the commander who asks the converted spy for the enemy's plans has asked the wrong class; the plans are the inward class's province, and the converted class's province is the enemy's knowledge of the faction. The doctrine's counsel is that each class is asked for what it provides, and the converted class provides the knowledge of the enemy's own knowledge, which is the knowledge that completes the picture: the enemy's intention, the enemy's reading, and the faction's place in both.

The Forecast the Omens Could Not Provide

The April 2023 case is the chapter's demonstration of the epistemology, and it is worth reading whole. A faction's commander suspected a rival was planning a coordinated action but had no evidence. The commander did not guess, and did not rely on the reading of the rival's public posture, which was, as usual, innocuous. The commander activated the surviving spy: a trusted member who maintained a legitimate presence in the rival's public channels and who reported, on a defined schedule, what the rival's community was preparing. The observer noted a sudden increase in private-thread coordination and the creation of a new, hidden role. The commander had the forecast the omens could not provide, and prepared accordingly. When the rival's action launched, it landed against a faction that had known it was coming for two weeks.

The case teaches the chapter's whole claim in one engagement. The omen could not provide the forecast, because the omen had no anchor. The calculation could not provide it, because the rival's posture was innocuous by design. The source provided it, because the surviving spy saw what the surface hid: the private coordination and the hidden role that the public posture was meant to conceal. The commander's advantage was not the argument, which had not yet been made; it was the foreknowledge, which the source had delivered two weeks early. The war was won, in that case, before the enemy's first move, by the faction that had maintained the other men.

Documented example

In April 2023, a faction's commander suspected a rival was planning a coordinated action but had no evidence. The commander did not guess, and did not rely on the reading of the rival's public posture, which was, as usual, innocuous. The commander activated the surviving spy: a trusted member who maintained a legitimate presence in the rival's public channels and who reported, on a defined schedule, what the rival's community was preparing. The observer noted a sudden increase in private-thread coordination and the creation of a new, hidden role. The commander had the forecast the omens could not provide, and prepared accordingly. When the rival's action launched, it landed against a faction that had known it was coming for two weeks.

The Management of the Service

The doctrine's account of management is as demanding as its account of classification. Spies are the most intimate relation the commander maintains, and the discipline of the service is absolute. The commander who cannot be subtle cannot employ spies usefully, because the employment itself is a secret that must survive contact with the community. The commander who cannot keep a secret piece of news is not merely leaking intelligence. The commander is destroying the source.

Spies cannot be usefully employed without a certain intuitive sagacity.
Sun Tzu, The Art of War, ch. 13

Be subtle! be subtle! and use your spies for every kind of business.
Sun Tzu, The Art of War, ch. 13

If a secret piece of news is divulged by a spy before the time is ripe, he must be put to death together with the man to whom the secret was told.
Sun Tzu, The Art of War, ch. 13

The doctrine's severity on the divulgence of secrets is translated, in the community landscape, to the termination of the source: the observer whose cover is blown is burned, and the channel that carried the leak is dead. The commander who talks about the intelligence service is the commander who loses it.

The Subtlety of the Employment

The subtlety of the employment is the commander's first management discipline, and the doctrine's claim is that the employment itself is a secret that must survive contact with the community. The intelligence service exists at the edge of the faction's ordinary conduct: the members who report, the observers who maintain their presence, the channel that carries the reports, all of it indistinguishable from the faction's ordinary life. The subtlety is the maintenance of that indistinguishability, because the moment the service becomes visible, it becomes the enemy's target.

The failure of the subtlety is the visible service, and the visibility takes recognizable shapes in the community. The channel that is clearly the intelligence channel, the member who is clearly the observer, the pattern of questions that is clearly the collection: each is the employment made visible, and each converts the service into the enemy's opportunity. The enemy that sees the service does not have to defeat it; the enemy feeds it, fills it with what it wants believed, and uses the faction's own collection as the channel of its deception.

The doctrine's counsel is that the subtlety is practiced as the service's ordinary state, not as a campaign that begins and ends. The members who report are the members who are naturally present; the channel that carries the reports is the channel the faction naturally uses; the questions that collect are the questions the faction naturally asks. The subtlety is not a disguise put on for the intelligence; it is the intelligence lived inside the faction's ordinary conduct, and the service that is lived is the service that survives.

The Secrecy That Preserves the Source

The secrecy is the management discipline that the doctrine treats as absolute, and the community translation is exact: the commander who talks about the intelligence service is the commander who loses it. The source is preserved by the secrecy, because the source's safety depends on the enemy not knowing who the source is; the commander who divulges the secret piece of news, who names the source, who describes the channel, has converted the source's safety into the enemy's knowledge. The secrecy is not a preference; it is the source's life.

The doctrine's severity on the divulgence is translated to the termination of the source, and the translation is the community's harshest teaching: the observer whose cover is blown is burned, and the channel that carried the leak is dead. The commander who leaks the secret piece of news has not made a mistake; the commander has executed the source, by hand, in public, and the execution is the cost the service pays for the commander's tongue. The severity is the doctrine's way of stating the cost in advance, so that the commander who is tempted to talk has already been told what the talking costs.

The secrecy has a boundary the commander should hold, which is the difference between the secrecy and the silence. The service is kept secret from the enemy and from the community that does not need to know; it is not kept secret from the faction's own trusted core, because a service that no one in the faction knows about is a service that cannot be maintained, sourced, or held accountable. The doctrine's counsel is that the service's existence is known to the few who must know, and its contents are known to no one beyond them, and the boundary between the few and the enemy is the secrecy's whole line.

The Termination of the Burned Source

The doctrine's harshest teaching is the termination of the burned source, and the community translation is the cold reality of the service's management: when the observer's cover is blown, the observer is burned, and the service does not try to repair the burn. The burned source is not a failed member to be rehabilitated; the burned source is a liability to be closed, because the burned source's continued involvement carries the risk of the whole service. The doctrine's counsel is that the burned source is retired from the service, the channel is closed, and the collection is rebuilt around the loss.

The termination is the doctrine's admission that the service is not a game, and the admission is the chapter's seriousness. The community's intelligence service employs people, and the people carry risk; the observer who is exposed has been put at risk by the service, and the service's response to the risk is not sentiment but discipline. The commander who refuses to close the burned source out of loyalty has kept the member and endangered the service, and the endangerment is the doctrine's most expensive sentiment.

The doctrine's counsel is that the termination is conducted cleanly, which means the burned source is not punished, not humiliated, and not abandoned to the enemy's mercy. The burned source is retired with the service's thanks and the service's care, because the source was the faction's own and the burning was the faction's exposure, and the service that burns its sources cleanly can find new ones, while the service that burns them cruelly finds none. The termination is the management of the loss, and the management is the difference between the service that survives its burns and the service that dies of them.

The Reading of Signs

The chapter's practical method is the reading of the enemy's surface. The doctrine teaches that the enemy's own visible conduct is a text, and that the commander who has learned the alphabet can read the enemy's state from it. In the community landscape, this is the discipline of reading the public record: the sudden silence, the shift in tone, the hasty deletion, the too-quick denial, each is a sign with a documented meaning.

The rising of birds in their flight is the sign of an ambuscade.
Sun Tzu, The Art of War, ch. 9

Peace proposals unaccompanied by a sworn covenant indicate a plot.
Sun Tzu, The Art of War, ch. 9

When some are seen advancing and some retreating, it is a lure.
Sun Tzu, The Art of War, ch. 9

Sign on the enemy's surface	Documented meaning
The enemy's channel suddenly quiet after weeks of activity	Coordination is moving into private spaces
A sudden flood of friendly compliments toward your faction	A cover for an approaching action
A public offer to "clear the air" with no concrete terms	The opening of a plot, unaccompanied by covenant
The enemy's members advancing and retreating in the same thread	A lure, staged for the commander's consumption
A defensive statement issued before any attack has occurred	The enemy is preparing its own offensive and rehearsing its cover

The Alphabet of the Public Record

The reading of signs is an alphabet, and the doctrine's counsel is that the commander learn the letters before the engagement, because the signs do not pause for the learning. The public record is the enemy's text: the channels, the posts, the threads, the deletions, the silences, each a letter in the enemy's actual state. The commander who has learned the alphabet can read the enemy's state from the surface the way the commander reads a statement; the commander who has not learned it reads the same surface as noise, and the noise is the enemy's cover.

The alphabet is learned by the practice of the reading, and the practice is the intelligence service's ordinary work. The members who observe the enemy's surface, the reports that collect the observations, the schedule that makes the changes visible: each is the alphabet's practice, and the practice is the difference between the faction that reads the enemy and the faction that is read by it. The doctrine's counsel is that the alphabet is practiced on every enemy, on every schedule, in the quiet season as in the engagement, because the letter that is learned when it matters was learned when it did not.

The alphabet has a guard the commander should hold, which is the difference between the sign and the symptom. The sign is the change in the enemy's conduct with a documented meaning: the sudden quiet, the flood of compliments, the too-quick denial. The symptom is the change with no meaning yet, the observation that has not been read. The doctrine's counsel is that the commander collects the signs, verifies them, and reads them together, and that the symptom is not treated as a sign until the reading has made it one, because the unread symptom is the observation that the commander mistakes for knowledge.

The Quiet Before the Coordination

The first sign in the doctrine's table is the sudden quiet: the enemy's channel that was active for weeks goes silent, and the documented meaning is that coordination is moving into private spaces. The quiet is the enemy's most reliable sign, because the coordination requires the privacy and the privacy requires the quiet. The enemy that is preparing does not prepare in the open; the preparation moves into private threads, hidden roles, and closed channels, and the public surface, no longer the site of the preparation, goes quiet.

The quiet is also the sign most often misread, and the misreading takes two forms. The first is the dismissal: the faction that reads the quiet as the enemy's retreat, as the end of the threat, as the enemy going quiet because it has nothing. The dismissal is the ambush's precondition, because the quiet is the preparation, and the faction that dismisses it has given the preparation the time it needs. The second is the panic: the faction that reads the quiet as the enemy's immediate attack and responds to a preparation it has not verified. The panic is the premature response, spent on a plan the faction has guessed at.

The doctrine's counsel is that the quiet is read as the sign it is: the coordination moving into private spaces. The faction that observes the quiet verifies it with the sources - the surviving spy who reports the private-thread activity, the inward source who confirms the hidden role - and then prepares for the coordination the quiet announces. The quiet is the warning, and the warning is used to prepare, not to panic, and the preparation is the difference between the faction the coordination finds ready and the faction it finds asleep.

The Compliment That Covers an Action

The second sign is the flood of friendly compliments: the enemy that was hostile for months becomes effusively friendly, praising the faction publicly, and the documented meaning is a cover for an approaching action. The compliment is the enemy's softening of the surface, and the softening has a purpose: the enemy that plans to act wants the faction relaxed, wants the audience unprepared, wants the attack to arrive against a faction that believed the friendship. The February 2023 case is the demonstration: a rival faction suddenly became effusively friendly, praising the server's moderation publicly after months of quiet hostility, and within a week attempted a coordinated takeover prefaced by the manufactured goodwill.

The compliment is the sign that is easiest to accept, because the compliment is pleasant, and the acceptance is the enemy's whole design. The faction that accepts the enemy's goodwill has relaxed the watch, lowered the guard, and given the enemy the interval it needed. The doctrine's counsel is that the sudden shift is read as the sign it is, whatever the shift's flavor: the enemy that turns friendly is changing its conduct, and the change is the signal, whether it is the quiet or the praise.

The doctrine's guard against the compliment is the consistency of the reading. The faction that reads the enemy's ordinary conduct on a schedule - the local spies' reports, the surviving spy's discipline - has the baseline that the shift is measured against: the enemy was hostile for months, and the friendliness is a change, and the change is read. The faction that reads the enemy only when it is flattered has no baseline, and the faction with no baseline cannot see the shift, because the shift requires the ordinary state to be known.

The Too-Quick Denial

The fourth and fifth signs in the doctrine's table are the denial's forms: the too-quick denial and the defensive statement issued before any attack has occurred. The too-quick denial is the enemy's answer to an accusation that has not been made, or the enemy's response to a claim before the claim has reached the enemy's surface, and the documented meaning is that the enemy was already preparing the cover. The defensive statement issued before any attack is the enemy's rehearsed defense, released to establish the cover before the offense, and the meaning is that the offense is coming.

The two signs are the enemy's overreach, and the overreach is the intelligence service's gift. The enemy that prepares the denial in advance has revealed the preparation; the enemy that issues the defense before the attack has revealed the attack. The faction that reads the overreach has been handed the enemy's plan in the enemy's own voice, and the reading is the confirmation that the other signs have been pointing toward. The denial and the defense are the letters that complete the alphabet of the approaching action.

The doctrine's counsel is that the too-quick denial and the premature defense are verified before they are acted on, because the overreach is also the shape a deception would take. The enemy that wants the faction to believe an action is coming can stage the denial and the defense, and the faction that acts on the staged signs has been led by the signs it learned to read. The verification is the source's work: the surviving spy confirms the coordination, the inward source confirms the plan, and the signs are read together, not one against the other. The signs are the alphabet; the sources are the confirmation, and the confirmation is what turns the reading into foreknowledge.

The Signs Read Together

The doctrine's counsel is that the signs are read together, never one alone, and the reading together is the discipline that separates the reader from the panicker. The sudden quiet alone is ambiguous; the quiet plus the hidden role is the coordination. The flood of compliments alone is ambiguous; the compliments plus the rehearsed denial is the cover for the action. The signs compound, and the compounding is the confirmation, because the enemy that is preparing produces the whole pattern, and the whole pattern is harder to manufacture than any single sign.

The February 2023 server owner read the signs together. The rival's effusive friendliness was the first sign; the owner's reading flagged it as the approach of an action. The owner verified with the sources, moved the sensitive material, briefed the moderators, and prepared the single statement, and when the takeover attempted, prefaced by the manufactured goodwill, it was repelled in hours. The signs had been read, and the ambuscade had been denied its ambush, because the reading had been done before the action, not after it.

The reading together is also the doctrine's answer to the false alarm, and the answer is the cost of the reading. The faction that reads every sign will act on some signs that prove to be noise, and the false alarm is the price of the alertness; the faction that refuses the false alarm by refusing the reading has chosen the noise over the warning, and the warning it misses is the ambush. The doctrine's counsel is that the reading together, verified by the sources, produces the few true alarms worth the false ones, and the faction that accepts the cost has the ambuscade denied and the noise paid for, which is the intelligence service's whole bargain.

The Alphabet in the Moderation Log

A worked scenario may hold the alphabet in the most concrete form, which is the moderation log. A server owner's faction keeps its own moderation record, and the record is the alphabet for the faction's own conduct; the enemy's surface is the alphabet for the enemy's. The commander who wants to read the enemy's state maintains the same discipline on the enemy's surface that the faction maintains on its own: the changes are logged, the shifts are noted, and the record is read on a schedule, so that the signs are visible against the ordinary state.

The scenario: a rival faction has been quiet for a month after a period of activity, and the faction's local spies report that the rival's members have stopped posting their usual content. The commander reads the sign: the quiet is the coordination moving into private spaces. The verification: the surviving spy reports an increase in private-thread activity and a new role created in the rival's server, and the local reports are confirmed by the disciplined source. The application: the commander moves the sensitive material, briefs the moderators, and prepares the statement, while the quiet continues.

When the rival's action arrives, prefaced by the quiet, the faction meets it prepared. The scenario is the February 2023 shape and the April 2023 shape in one: the sign read against the baseline, the sign verified by the source, and the sign applied to the preparation. The alphabet in the moderation log is the same alphabet in the rival's surface, and the commander who keeps both records has read the enemy's state the way the faction reads its own, which is the discipline the chapter teaches in its most practical form.

Documented example

In February 2023, a server owner's faction noticed a rival faction suddenly become effusively friendly, praising the server's moderation publicly after months of quiet hostility. The owner's reading of signs flagged the shift as the approach of an action. The reading was correct: within a week, the rival attempted a coordinated takeover of the server's public channels, prefaced by the very goodwill that had been manufactured in the weeks before. The owner, forewarned, had already moved the sensitive material, briefed the moderators, and prepared the single statement. The takeover was repelled in hours. The signs had been read, and the ambuscade had been denied its ambush.

The End and Aim of Spying

The chapter closes with the doctrine's statement of purpose. Spying has exactly one end: knowledge of the enemy. It is not a moral statement, and it is not a permission for surveillance of the innocent. It is a technical statement about the purpose of the intelligence architecture. Every source, every channel, every report exists to answer one question: what does the enemy intend to do? The service that gathers knowledge without application is a hobby; the service that gathers knowledge aimed at the enemy's intentions is an instrument of the doctrine.

The end and aim of spying in all its five varieties is knowledge of the enemy.
Sun Tzu, The Art of War, ch. 13

Hence it is only the enlightened ruler and the wise general who will use the highest class of spies, and thereby they achieve great results.
Sun Tzu, The Art of War, ch. 13

The One Question

The doctrine's statement of purpose reduces the service to one question: what does the enemy intend to do? Every source, every channel, every report exists to answer that question, and the doctrine's counsel is that the service is organized around it. The local spies observe the enemy's ordinary behavior because the behavior is the enemy's intention in the making. The inward spies reach the enemy's staff because the staff knows the intention directly. The converted spies carry the faction's feed because the feed manages the enemy's intention. The doomed spies leak the controlled material because the leak shapes the intention the enemy will act on. And the surviving spies report on the schedule because the report is the intention made visible.

The one question is the service's discipline, and the discipline is the guard against the service's drift. The service that gathers knowledge without application is a hobby; the service that gathers knowledge aimed at the enemy's intentions is an instrument of the doctrine. The commander who runs the service without the one question has built a collection with no aim, and the aimless collection produces the intelligence that is interesting and useless, gathered for the gathering's sake rather than for the war's.

The doctrine's counsel is that the one question is asked before the collection, and the collection is organized to answer it. The commander who knows the question - what does the enemy intend to do - knows what to collect, what to verify, and what to apply; the commander who does not know the question collects everything, verifies nothing, and applies nothing, and the service is a hobby in the shape of an instrument. The one question is the difference between the two, and the difference is the chapter's whole purpose.

The Service That Is Not Surveillance

The doctrine is explicit that the intelligence service is not surveillance of the innocent, and the boundary is the chapter's moral line. The service is aimed exclusively at the enemy's dispositions, at the one question about the one subject; the service that expands into general observation of the community, gathering data on friends and neutrals, has crossed the line, and the crossing is the corruption of the whole enterprise. The warning that closes the chapter's purpose section is the doctrine's clearest statement: the commander who expands the service into general observation has built a machine that produces suspicion instead of knowledge, and the Yamak Institute's cohort data records that factions operating on suspicion of their own allies lose alliances at a catastrophic rate.

The boundary is the difference between the service and the surveillance, and the doctrine draws it at the aim. The service watches the enemy because the enemy is the subject of the war, and the watching serves the one question. The surveillance watches everyone because the watching has become the end, and the surveillance serves no question but its own appetite. The two look alike from the outside and are entirely different from the inside, and the difference is the aim, which the doctrine states and restates because the drift is the service's most common corruption.

The doctrine's counsel is that the boundary is held by the one question, and the one question is the test of every collection. The report about the enemy is collected; the report about the faction's own allies is not, because the allies are not the subject of the war. The observation of the enemy's surface is maintained; the observation of the community at large is not, because the community at large is not the enemy. The test is simple and the doctrine applies it without exception, because the service that collects outside the one question has become the thing the doctrine names: the machine that produces suspicion instead of knowledge, and the suspicion is the alliance's ruin.

The Application of the Knowledge

The doctrine's statement of purpose is completed by the application, and the application is the knowledge's whole reason. The foreknowledge is obtained from other men so that the commander can strike and conquer; the knowledge that is gathered and not applied is the hobby the doctrine names, and the hobby is the service's waste. The doctrine's counsel is that the knowledge is applied to the campaign: the forecast is used to prepare, the sign is used to warn, the disposition is used to choose the engagement, and the choice is the knowledge made effective.

The application is the chapter's connection to every chapter before it. The commander who balked the enemy's plans knew them, and the knowing was the application of the intelligence. The commander who attacked the weak point knew where it was, and the knowing was the application of the reading. The commander who set the fire in the dry season knew the season, and the knowing was the application of the observation. The thirteenth chapter is the doctrine's foundation because the foreknowledge feeds every other chapter, and the application is the feeding.

The doctrine's counsel is that the application is the service's discipline, and the discipline is the difference between the instrument and the hobby. The service that gathers knowledge and applies it has built the instrument the chapter describes; the service that gathers knowledge and shelves it has built the hobby the chapter names. The commander who runs the service to the one question and applies the answer to the campaign has done the chapter's work, and the chapter's work is the doctrine's completion, because the foreknowledge obtained from other men is the knowledge that every other chapter used.

The Application in the Defensive Campaign

The application has its purest demonstration in the defensive campaign, and the defensive faction is the natural site of the intelligence service. The faction that does not attack still needs to know when it is attacked, and the knowledge is applied to the defense: the sign of the approaching action read on the schedule, the forecast of the enemy's intention verified by the sources, and the preparation made on the forecast. The February 2023 server owner was purely defensive and won with the intelligence: the effusive friendliness read as the sign, the sensitive material moved, the moderators briefed, the statement prepared, and the takeover repelled in hours because the ambush had been denied its ambush.

The defensive application is the chapter's most honest demonstration, because the defense has no offensive advantage to lean on. The defensive faction does not strike; it waits, and the waiting is only safe if the faction knows what it is waiting for. The faction that waits without the intelligence is waiting blind, and the blind wait is the ambush's opportunity; the faction that waits with the intelligence is waiting prepared, and the prepared wait is the ambush's denial. The knowledge is applied to the defense the same way it is applied to the offense, and the application is the difference between the faction that is taken and the faction that is ready.

The doctrine's counsel is that the defensive faction builds the architecture with the same discipline as the offensive one, because the defense has the greater need. The offensive faction chooses the moment and can survive a late warning; the defensive faction does not choose the moment, and a late warning is the ambush itself. The defensive faction that names the question, keeps the schedule, reads the surface, and applies the forecast has built the one defense the doctrine offers: the foreknowledge that turns the enemy's prepared action into the action the faction was ready for.

Common mistake

Confusing intelligence with surveillance of the community at large. The doctrine's spies are aimed exclusively at the enemy's dispositions, and the intelligence architecture exists to answer a single question. The commander who expands the service into general observation of the community, gathering data on friends and neutrals, has built a machine that produces suspicion instead of knowledge, and the Yamak Institute's cohort data records that factions operating on suspicion of their own allies lose alliances at a catastrophic rate. The end and aim of spying is knowledge of the enemy. Everything else is a different, and ruinous, enterprise.

The Yamak Institute Cohort Data

The intelligence doctrine rests on the Yamak Institute's longitudinal research into the knowledge advantage in community conflict. Since 2018 the Institute has logged engagements by the intelligence each side maintained and the outcome, so that the value of foreknowledge can be measured rather than asserted. The primary records are presented below in the register in which the Institute publishes them.

The Intelligence Audit (2023)

The flagship study of the chapter, the Institute's 2023 intelligence audit, examined the maintenance of the five classes across the community. The audit's central finding is the surviving spy's neglect: the overwhelming majority of factions operated on information from their own members' casual observations, which the Institute classifies as the province of the local spy, and factions that deliberately maintained surviving spies, with a defined reporting discipline and a defined reporting channel, made correct forecasts of enemy action at a rate nearly double that of factions relying on casual observation alone. The audit is the chapter's empirical spine: it converts the doctrine's claim that the architecture matters from a judgment into a measurement.

The Cohort of the Surviving Spy

The Institute's cohort records on the surviving class complete the audit. The cohort tracked factions by the discipline of their observers - the defined reporting schedule, the defined reporting channel, the trusted member maintained on the enemy's surface - and compared their forecasts with the factions that ran on casual observation. The disciplined observers produced correct forecasts of enemy action at nearly double the rate, and the factions that acted on the forecasts resolved their engagements at a correspondingly higher rate. The cohort is the empirical form of the class: the surviving spy is the local observer organized into a discipline, and the discipline is the difference between the forecast and the guess.

The Cohort of the Read Sign

The Institute's cohort records on the reading of signs support the chapter's practical method. The cohort tracked engagements by whether the faction read the enemy's surface before the action and acted on the reading, and compared the outcomes with the factions that read the surface after the action or not at all. The factions that read the signs together, verified them with their sources, and prepared on the forecast repelled or preempted the enemy's action at a materially higher rate; the factions that read the surface late or dismissed the signs were taken by the action. The cohort is the empirical form of the alphabet: the sign is read before it is acted on, and the reading before the action is the ambuscade denied.

The Cohort of the Service's Boundary

The Institute's cohort records on the service's boundary complete the intelligence studies. The cohort tracked factions by the aim of their collection - the enemy's dispositions against the community at large - and compared the outcomes. The factions that kept the collection aimed at the enemy held their alliances and resolved their engagements; the factions that expanded the service into general observation, gathering data on friends and neutrals, lost alliances at a catastrophic rate, because the suspicion the expanded service produced corroded the trust the alliances ran on. The cohort is the empirical form of the warning: the end and aim of spying is knowledge of the enemy, and the service that drifts from the aim is the alliance's ruin.

The Cohort in One Table

The Institute's primary records are read most quickly in summary, and the summary table is the reference the field manual prints for commanders who need the numbers at a glance.

Study	Year	Population	Principal finding
The intelligence audit	2023	tracked factions	The surviving spy was the most underused class; disciplined observers forecast at nearly double the rate
The cohort of the surviving spy	2023	tracked factions	Disciplined observers produced correct forecasts at nearly double the rate
The cohort of the read sign	2023	tracked engagements	Factions that read the signs before the action repelled it at a higher rate
The cohort of the service's boundary	2023	tracked factions	Factions that expanded the service into general observation lost alliances at a catastrophic rate

The table makes the chapter's intelligence claims portable. The double is the surviving spy's premium; the read sign's record is the alphabet; and the boundary's record is the aim. The commander who carries the table carries the chapter's empirical spine in four rows, and the four rows are the answer to the faction that wants to believe the knowledge advantage does not matter.

The Five-Stage Protocol for the Intelligence Service

The doctrine of this chapter is operational, and the Institute's field manual reduces it to a five-stage protocol that a community manager executes when an engagement requires the architecture of intelligence. Each stage has a verification step, and the protocol is designed to be run in the order the chapter presents: the question first, the class second, the secrecy third, the reading fourth, and the application last.

The protocol is not a replacement for the service; it is the service made repeatable. The commander who has run the five stages once has not finished building the architecture; the commander has learned the order in which the intelligence is collected, and the order is what makes the collection dependable when the engagement is live and the enemy is acting. The stages are the discipline the doctrine describes, reduced to a sequence a volunteer can follow under pressure.

The protocol also carries the chapter's boundaries into its execution. The question is aimed at the enemy, the sources are maintained as people, and the honesty of what the faction releases is held to the line the darkness never crosses. The commander who runs the stages within the boundaries has built the instrument the doctrine names; the commander who runs them without the boundaries has built the different enterprise the warning names, and the two are not the same war.

Stage 1: Name the Question

Before any collection, name the question the service is answering: what does the enemy intend to do? The one question is stated plainly, and every report, channel, and source is organized around it. The verification step is the question test: the commander can state, in one sentence, what the service is collecting and which enemy the collection is aimed at. A commander who passes Stage 1 has an instrument; a commander who fails it has a collection with no aim, which is the hobby the doctrine names rather than the service it builds.

Stage 2: Choose the Class

Match the class to the knowledge the question requires. Ordinary behavior is collected by the local spies; plans and intentions are reached by the inward spies; the enemy's knowledge of the faction is handled through the converted spies; the management of the enemy's preparation is fed through the doomed spies; and reliable reporting is maintained through the surviving spies. The verification step is the class test: the commander can say which class serves each part of the question and whether the class is maintained. A commander who passes Stage 2 has the architecture; a commander who fails it has the single channel, which is the rumor the doctrine refuses.

Stage 3: Manage the Secrecy

Hold the service's secrecy absolutely. The employment is subtle, the reports are channeled to the few, and the secret piece of news is never divulged before the time is ripe. The verification step is the secrecy test: the commander can confirm who knows the service exists, who knows its contents, and whether the source has been exposed by any tongue. A commander who passes Stage 3 preserves the source; a commander who fails it has burned the source by hand, and the burning is the cost the chapter states in advance.

Stage 4: Read the Signs

Read the enemy's surface as a text, on the schedule the service maintains. The sudden quiet, the flood of compliments, the too-quick denial, and the premature defense are read together and verified by the sources before they are acted on. The verification step is the reading test: the commander can state which signs the enemy's surface has shown and what the sources confirm. A commander who passes Stage 4 has the forecast the omens cannot provide; a commander who fails it reads the surface late or dismisses it, and the ambuscade finds the faction unprepared.

Stage 5: Apply the Knowledge

Apply the foreknowledge to the campaign: prepare on the forecast, warn on the sign, and choose the engagement on the disposition. The verification step is the application test: the commander can state what the knowledge was used for and what the application achieved. A commander who passes Stage 5 has done the chapter's work, and the work is the doctrine's completion, because the foreknowledge obtained from other men is applied to the war the doctrine fights. A commander who fails it has gathered knowledge and shelved it, and the shelving is the hobby, not the instrument.

The Protocol in One Page

The five stages are read most quickly in summary, and the summary table is the version a community manager can keep with the moderation notes.

Stage	The action	The verification	The exit condition
1. Name the question	State what the enemy intends to do	The question test	Pass when the aim is single
2. Choose the class	Match the class to the knowledge needed	The class test	Pass when the architecture exists
3. Manage the secrecy	Hold the service's secrecy absolutely	The secrecy test	Pass when the source is preserved
4. Read the signs	Read the surface together, verify by the sources	The reading test	Pass when the forecast is in hand
5. Apply the knowledge	Prepare and choose on the foreknowledge	The application test	Pass when the knowledge was used

The one-page protocol is the chapter's operational core, and the community that works it in order has done the chapter's work. The community that works it in any other order - collecting before the question is named, reading before the sources are maintained - is the community the cohort records as the aimless collection and the unread surface, and the record is the price of the order.

The Protocol Against a Real Engagement

A worked scenario may show the protocol running against a live engagement. A faction's commander suspects a rival is preparing a coordinated action but has no evidence. Stage 1, the question: what does the rival intend to do? Stage 2, the class: the ordinary behavior of the rival's channels is collected by the local spies, and the reliable reporting is organized through the surviving spy, a trusted member with a legitimate presence on the rival's surface. Stage 3, the secrecy: the service is held to the few, and the reports are channeled directly to the commander.

Stage 4, the reading: the commander reads the surface together. The rival's public posture is innocuous, but the surviving spy's reports show a sudden increase in private-thread coordination and a new, hidden role, and the sign is verified by the source. Stage 5, the application: the commander prepares on the forecast - the material moved, the moderators briefed, the statement ready - and when the rival's action launches, it lands against a faction that knew it was coming for two weeks.

The scenario ends the way the cohort records such scenarios ending: the faction that answered the one question with the right class, held the secrecy, read the signs together, and applied the forecast, was never surprised, and the enemy's action, which had been prepared as an ambush, was denied its ambush. The protocol has done the chapter's work, and the work is the doctrine's completion: the foreknowledge obtained from other men, applied to the war.

The Intelligence Discipline in Practice

The intelligence doctrine reduces to a set of habits, and the commander who wants to apply it should be able to see the habits clearly, separated from the classes that carry them. Each habit below is a repetition, not a project, and each is the chapter's discipline made routine.

Practice	What it looks like weekly	What it prevents
Name the question	State what the enemy intends to do	The aimless collection, the hobby
Keep the schedule	Reports collected on a defined cadence	The observation lost, the change unseen
Hold the secrecy	The service kept to the few	The source burned by a tongue
Read the surface	The enemy's record read as a text	The ambush arriving unprepared
Verify by the sources	Every sign checked against a report	The false alarm, and the dismissed warning
Apply the knowledge	Prepare on the forecast, choose on the disposition	The knowledge gathered and shelved
Hold the boundary	Collect the enemy, never the community	The suspicion that ruins the alliances

None of these habits is dramatic, which is why they are often skipped. The doctrine's whole claim in this chapter is that the knowledge advantage decides the engagement, and the advantage is built by the undramatic work: the question named, the schedule kept, the secrecy held, the surface read. The community that does the undramatic work has built the architecture, and the drama, when it comes, will find the faction knowing what the enemy intends, which is the doctrine's deepest promise.

Objections

The intelligence doctrine meets resistance, and the resistance is predictable enough to be answered in advance. The objections below are the twelve most common raised by community managers who have been asked to build an intelligence service. Each is answered in the doctrine's voice, and each answer returns the objector to the same discipline: the question is named, the class is chosen, the secrecy is held, and the knowledge is applied.

Objection 1: "This chapter sounds like it is asking us to spy on people."

The doctrine's answer is the boundary the chapter draws and redraws: the service is aimed exclusively at the enemy's dispositions, at the one question about the one subject, and the expansion into general observation of the community is the corruption the doctrine names and forbids. The members who observe the enemy's public channels, the observers who report on the rival's surface, the reading of the public record: each is aimed at the enemy, and the aim is the line. The service that watches the enemy is the instrument the chapter describes; the surveillance that watches everyone is the different, ruinous enterprise the warning names, and the objector who holds the boundary has held the doctrine.

Objection 2: "We cannot maintain an intelligence architecture; we are too small."

The doctrine's answer is that the architecture is the organization of what the faction already has, and the small faction is the natural site of the organization. The members who already move through the enemy's neighborhoods are the local class, unorganized; the trusted member who can maintain a legitimate presence on the enemy's surface is the surviving spy, unassigned. The organization - the defined schedule, the defined channel, the one question - is the architecture, and the organization is available to the smallest faction. The audit's finding that the surviving spy was the most underused class confirms that the gap is not resources; it is organization, and the organization is the doctrine's whole work.

Objection 3: "The reading of signs sounds like the omens the chapter rejects."

The doctrine's answer is the distinction between the sign and the omen, which the chapter draws in its epistemology. The omen is the unanchored feeling, the vibe, the sense that something is coming, with no surface and no record. The sign is the observed change in the enemy's conduct with a documented meaning - the sudden quiet, the flood of compliments, the too-quick denial - anchored to the public record and verified by the sources. The doctrine rejects the omen and builds on the sign, and the objector has confused the two, which is the confusion the chapter's epistemology exists to remove.

Objection 4: "Our intelligence service keeps collecting but never helps us win."

The doctrine's answer is the chapter's statement of purpose: the service that gathers knowledge without application is a hobby, and the hobby is the collection without the aim. The service is an instrument when the one question is named and the answer is applied to the campaign - the forecast used to prepare, the sign used to warn, the disposition used to choose. The commander who collects without applying has built the hobby, and the hobby's failure is not the doctrine's failure; it is the discipline's absence, and the discipline is the application, which is the chapter's final stage.

Objection 5: "We do not have spies; we have members who happen to be there."

The doctrine's answer is that the members who happen to be there are the local class, unorganized, and the organization is the difference between the members' presence and the faction's intelligence. The member who observes the enemy's surface and reports on a defined schedule, through a defined channel, to the one question, has become a surviving spy; the member who observes and does not report is a bystander. The audit's finding is the confirmation: the factions that organized the observers forecast at nearly double the rate. The objector has the raw material and has not built with it, and the building is the chapter's work.

Objection 6: "Feeding false information to the enemy is dishonest."

The doctrine's answer is the boundary of the doomed class, which is the same boundary the whole chapter draws: the controlled leak is aimed at the enemy's preparation, at the management of the enemy's war, and the aim is the line. The doctrine does not counsel the false statement to the community, the fabricated evidence, or the staged support; it counsels the leak that shapes the enemy's preparation, and the leak is the instrument of the war the enemy is already fighting. The objector who holds the boundary has held the doctrine; the commander who crosses it into the community's deception has crossed into the different enterprise the chapter forbids.

Objection 7: "Reading the enemy's surface is public information; anyone can do it."

The doctrine's answer is that the reading is public and the discipline is not, and the discipline is the difference. The public record is open to anyone, and the faction that reads it casually reads the noise; the faction that reads it on the schedule, with the sources' verification, and the one question, reads the text. The audit's cohort confirms the difference: the disciplined observers forecast at nearly double the rate of the casual ones, on the same public surface. The objector has confused the availability of the surface with the discipline of the reading, and the discipline is the chapter's whole practical content.

Objection 8: "Our members will not report; it feels like snitching on the community."

The doctrine's answer is the boundary again, and the boundary is the aim. The report about the enemy's dispositions is the service's work, aimed at the enemy, and the report about the community at large is the surveillance the doctrine forbids. The member who reports on the rival's surface is not snitching on the community; the member is serving the faction's war, which is the chapter's purpose. The doctrine's counsel is that the members are asked to report on the enemy and only the enemy, and the boundary is stated to them as clearly as it is stated to the commander, because the service that crosses the boundary loses its members' trust and its alliances together.

Objection 9: "The severity about the divulged secret sounds excessive."

The doctrine's answer is that the severity is the cost stated in advance, and the cost is the source's life. The source is preserved by the secrecy, and the commander who divulges the secret piece of news has converted the source's safety into the enemy's knowledge; the severity is the doctrine's way of making the cost unavoidable in the telling, so that the commander who is tempted to talk has already been told what the talking costs. The objector who finds the severity excessive has not priced the source's exposure; the doctrine has, and the pricing is the management discipline's whole point.

Objection 10: "We would rather win with argument than with intelligence."

The doctrine's answer is the chapter's opening claim: the decisive advantage in the overwhelming majority of the 1,800-plus documented engagements belonged to the side that knew more, and no quantity of argumentative skill could compensate for the deficit. The argument is applied at the engagement; the intelligence is applied before it, to the choice of the engagement, the preparation, and the disposition. The faction that would rather argue than know has chosen to argue blind, and the argument blind is the argument the doctrine's other chapters cannot save. The objector's preference is honorable and the cohort's record is the record; the doctrine builds on the record.

Objection 11: "This chapter rewards whichever faction has the best agents."

The doctrine's answer is that the chapter rewards whichever faction organizes its knowledge, and the organization is available to any faction that will run it. The local class is the members the faction already has; the surviving class is the discipline the faction can impose; the reading is the public surface any faction can observe. The audit's finding that the surviving spy was the most underused class is the confirmation: the advantage is not in the agents' quality but in their organization, and the organization is the doctrine's whole teaching. The faction that organizes its observers has built the advantage the faction that relies on quality alone has left unbuilt.

Objection 12: "The cohort data is the Institute's; why should our faction trust it?"

The doctrine's answer is that the Institute's records are a map, and the map is checked against the faction's own history. The commander who doubts the audit should run the audit on the faction's own engagements: for each of the last ten, state what the faction knew about the enemy before the engagement and whether the knowing decided the outcome. The audit is public, cheap, and repeatable, and the faction that runs it will find the map holds. The doctrine does not ask for trust in the Institute; it asks for the architecture of intelligence, and the architecture can be verified on the faction's own record.

FAQ

Q: What is the difference between the five classes of spies?

A: The classes are the five ways knowledge is obtained from other men, and each is defined by its source. The local spy is the members in the enemy's communities, observing ordinary behavior. The inward spy is the enemy's own staff, whose position reaches plans and intentions. The converted spy is the enemy's agent, detected and handled, reporting back. The doomed spy is the controlled leak, the false material released to be carried back to the enemy. The surviving spy is the commander's own trusted observer, reporting on a defined schedule. The commander who maintains all five has an architecture; the commander who relies on one has a rumor.

Q: Is running an intelligence service against the rules of the community?

A: The doctrine's answer is the boundary the chapter draws: the service is aimed exclusively at the enemy's dispositions, at the one question about the one subject, and the expansion into general observation is the corruption the doctrine forbids. Reading the enemy's public surface, maintaining observers on it, and reading the signs of an approaching action are the discipline of the war, conducted against the enemy the war is fought with. The service that crosses the boundary into surveillance of the community at large is the different enterprise the warning names, and the crossing is the alliance's ruin. The boundary is the aim, and the aim is held.

Q: What is the difference between a sign and an omen?

A: The sign is the observed change in the enemy's conduct with a documented meaning: the sudden quiet, the flood of compliments, the too-quick denial, each anchored to the public record and verified by the sources. The omen is the unanchored feeling, the vibe, the sense that something is coming, with no surface and no record. The chapter rejects the omen and builds on the sign: the omen cannot be verified, and the faction that acts on it is acting on what the enemy wanted it to feel; the sign is anchored, and the faction that reads it together and verifies it has the forecast the omens cannot provide.

Q: Why is the surviving spy the most underused class?

A: Because the surviving spy is the organized form of what most factions already do casually, and the organization is the part that is skipped. The audit found that the overwhelming majority of factions operated on their members' casual observations, which is the local class, and that factions which deliberately maintained surviving spies - trusted observers with a defined reporting discipline and a defined reporting channel - forecast correctly at nearly double the rate. The gap is not resources; it is organization. The member who happens to be present is a bystander; the observer who reports on a schedule is a surviving spy, and the difference is the discipline.

Q: What is the controlled leak for, exactly?

A: The controlled leak manages the enemy's preparation. The faction that knows the enemy is watching its surface can release false or planted information designed to be carried back, and the enemy's service carries it back as truth. The enemy then prepares for the plan the faction does not intend, and the preparation is the enemy's commitment to a plan the faction controls. The leak is the doomed class, the service's offensive arm, and the doctrine's counsel is that it is used sparingly and never casually, because the leak that is detected closes the enemy's channel and teaches the enemy to distrust its own intelligence.

Q: How do I protect a source whose cover is at risk?

A: The doctrine's answer is the management discipline: the source is protected by the secrecy, and the secrecy is the commander's whole protection. The service's existence is known to the few, its contents to no one beyond them, and the secret piece of news is never divulged before the time is ripe. When the cover is actually blown, the doctrine's counsel is the termination: the burned source is retired cleanly, the channel is closed, and the collection is rebuilt around the loss, because the burned source's continued involvement risks the whole service. The protection is the secrecy, and the secrecy is held before the burning, because the burning is the cost the secrecy exists to prevent.

Q: What should we do with the intelligence once we have it?

A: Apply it. The knowledge is obtained from other men so that the commander can strike and conquer: the forecast is used to prepare, the sign is used to warn, the disposition is used to choose the engagement. The service that gathers and shelves is the hobby the chapter names; the service that gathers and applies is the instrument. The application is also the chapter's connection to every chapter before it - the commander who balked the enemy's plans knew them, and the knowing was the application - and the application is the difference between the collection and the war.

Q: What is the relationship between this chapter and the one before it?

A: On the Attack by Fire armed the campaign; this chapter provides the aim the fire is aimed by. The fire chapter taught the employment of the incendiary and its timing; the intelligence chapter teaches the knowledge that sets the timing - the knowledge of the enemy's dry season, the enemy's exposure, the enemy's intention. The commander who has the fire and the intelligence has the instrument and the aim; the commander who has the fire without the intelligence is firing at what it hopes is the target. The final chapter of the core is the foundation of every chapter before it, and the reader who carries the intelligence forward carries the whole doctrine with it.

Q: Does this chapter apply to a faction that is purely defensive?

A: Yes, and the defensive faction is the natural site of the intelligence service. The faction that does not attack still needs to know when it is attacked: the signs of the approaching action, the forecast of the enemy's intention, the preparation the foreknowledge makes possible. The February 2023 server owner was purely defensive and won with the intelligence: the sign read, the material moved, the moderators briefed, the ambush denied. The doctrine does not require the offense; it requires the knowledge, and the knowledge serves the defense as completely as it serves the attack.

Q: How does this chapter conclude the doctrine's core?

A: The doctrine's core is the thirteen chapters of the drama war, and the thirteenth is the foundation because every chapter depends on knowledge. The commander who knew the enemy's plans, the weak point, the season, the terrain, and the situation knew them through the foreknowledge this chapter describes, and the foreknowledge comes from other men, obtained through the architecture of the five classes. The reader now proceeds to the synthesis, How to Win a Drama War, where the thirteen chapters are assembled into a single method, and the intelligence the spy chapter provides is the final ingredient in the method.

Q: How do I know which class to use for a given question?

A: Match the knowledge to the source, the way the chapter's diagram does. Ordinary behavior is the local class's province: the members in the enemy's communities observe it. Plans and intentions are the inward class's province: the enemy's own staff reaches them. The enemy's knowledge of the faction is the converted class's province: the handled agent reports what the enemy is feeding on. Managing the enemy's preparation is the doomed class's province: the controlled leak shapes it. Reliable reporting is the surviving class's province: the trusted observer delivers it on a schedule. The commander who can name what knowledge the question needs can name the class that provides it, and the naming is the chapter's whole method.

Q: What happens when a faction detects that it is being spied on?

A: The doctrine's answer is the detection's fork, and the fork is the converted class's opening. The faction that detects the enemy's agent has two choices: expose the agent, closing the channel and spending the detection on a gesture, or handle the agent, feeding it what the faction wants the enemy to believe and using the enemy's own investment as the faction's channel. The exposure is the beginner's move; the handling is the doctrine's. The faction that detects the enemy's observer can also feed the observer, filling its reports with the preparation the faction wants the enemy to see. The detection is not the end of the enemy's intelligence; it is the faction's choice of what to do with it, and the choice is the converted class's and the doomed class's whole art.

Q: Is the intelligence chapter a license to do anything to win?

A: No, and the chapter is explicit about the two boundaries. The first is the aim: the service is aimed exclusively at the enemy's dispositions, and the expansion into surveillance of the community at large is the corruption the warning names, because it produces suspicion instead of knowledge and ruins the alliances. The second is the conduct: the sources are people, maintained as people, and the honesty of what the faction releases is the line the darkness never crosses. The doctrine builds the intelligence architecture within the two boundaries, and the commander who reads the chapter as a license without the boundaries has read the different enterprise the chapter names as ruinous.

Q: What is the single most important lesson of this chapter?

A: Foreknowledge comes from other men, and the other men are maintained, not guessed at. The faction that wants to know what the enemy intends does not read the omens, calculate the posture, or guess the vibes; it maintains the sources who can see the dispositions, organizes them into the five classes, holds the secrecy that preserves them, and applies the knowledge to the war. The April 2023 commander who had the forecast two weeks early had it because a trusted member maintained a legitimate presence and reported on a schedule. The knowledge advantage decides the engagement, and the advantage is built by the maintenance of the other men, which is the chapter's whole teaching in one line.

Glossary

Term	Definition as used in this article
Intelligence	The knowledge of the enemy's dispositions, obtained from other men
The five classes	The local, inward, converted, doomed, and surviving spies
Local spies	The members in the enemy's communities, observing ordinary behavior
Inward spies	The enemy's own staff, whose position reaches plans and intentions
Converted spies	The enemy's agent, detected and handled, reporting back to the faction
Doomed spies	The controlled leak: false material released to be carried back to the enemy
Surviving spies	The commander's own trusted observers, reporting on a defined schedule
Foreknowledge	The knowledge of the enemy's dispositions before the engagement, obtained from other men
The omen	The unanchored feeling about the enemy, with no surface and no record; rejected
The calculation	The inference from the enemy's public posture, without the source; rejected
The disposition	The enemy's actual state: coordination, preparation, intention, schedule
The subtlety	The maintenance of the service's indistinguishability from ordinary conduct
The secrecy	The discipline that preserves the source; the divulged secret destroys it
The burned source	The observer whose cover is blown; retired cleanly and the channel closed
The reading of signs	The discipline of reading the enemy's surface as a text
The sign	The observed change in the enemy's conduct with a documented meaning
The alphabet	The set of signs the commander has learned to read
The one question	What does the enemy intend to do? The service's single aim
The boundary	The line between the service aimed at the enemy and the surveillance of everyone
The application	The use of the foreknowledge to prepare, warn, and choose the engagement

Appendix A: The Intelligence Reference

The intelligence doctrine is read most quickly as a reference table, and the table is the version a community manager can keep with the moderation notes. Each row names the class, its source, its community translation, and the failure that courts its loss. The table is the chapter compressed, and the commander who has memorized it can match the class to the question in the time it takes to name the knowledge needed.

Class	The source	The community translation	The failure mode
Local spies	The inhabitants of the district	The members in the enemy's communities	The observation lost as scattered, unverified rumor
Inward spies	The officials of the enemy	The enemy's staff, with access to plans	The exposure that burns the deepest source
Converted spies	The enemy's spies, handled	The enemy's agent reporting back	The mishandled agent, exposed or double-used
Doomed spies	The controlled deception	The leak carried back to the enemy	The detected leak that closes the enemy's channel
Surviving spies	The trusted observers	The disciplined reports on the enemy's surface	The observer without schedule or channel, reduced to the bystander

The table is the intelligence doctrine's operational core, and each row is a discipline the community practices on the calendar. The community that works the table has made the classes, the sources, and the failures its own instruments, and the instruments are the chapter's whole practical content.

Appendix B: The Complete Chain of Intelligence

The chapter's full argument, laid out as the chain the doctrine follows from the one question to the applied foreknowledge.

The chain is read left to right as the service's whole cycle. The one question is named, the class is matched to the knowledge needed, the reports are channeled in secrecy, the surface is read as a text, the signs are verified by the sources, foreknowledge is obtained, and the knowledge is applied to the campaign. A community that works the chain in order has built the architecture and used it; a community that works it in any other order - collecting before the question is named, reading before the sources are maintained, gathering without applying - is the community the cohort records as the aimless collection and the unread surface, and the record is the price of the order.

The chain also states the chapter's central claim in one line: foreknowledge comes from other men, and the other men are the five classes, maintained in secrecy, read as signs, and applied to the war. The commander who holds the chain has the knowledge that every other chapter of the doctrine depends on, and the thirteenth chapter's completion is the doctrine's completion: the war is fought with foreknowledge, and the foreknowledge is obtained from the sources the architecture maintains.

The chain is also the chapter's answer to the doctrine's deepest question, which is how a faction that is out-argued, out-staffed, or out-resourced can still win. The answer is that the knowledge advantage is available to any faction that will maintain the sources: the members in the enemy's communities are the faction's own, the trusted observer is a member the faction already has, and the reading of the enemy's surface is the public record any faction can read. The faction that builds the architecture has leveled the field before the argument begins, because the side that knows the enemy's dispositions does not need to argue as hard, and the faction that fights knowing is the faction the doctrine's other chapters were written for.

Conclusion

The thirteenth chapter closes the doctrine's core with the discipline that makes every other chapter possible. Foreknowledge comes from other men, and the five classes of spies are the architecture that obtains it. The service is managed with subtlety and secrecy, the enemy's surface is read as a text, and the whole exists for a single end: knowledge of the enemy. The commander who knows the enemy's dispositions fights with every chapter of the doctrine at full strength; the commander who does not, fights blind, whatever the quality of the argument.

The doctrine's core is complete. The commander should now proceed to the synthesis, How to Win a Drama War, where the thirteen chapters are assembled into a single method, and then to the operational field guide, The Drama Commander's Handbook. The intelligence that the spy chapter provides is the final ingredient in the method, and the next articles show how the whole is conducted. Readers should also see the fire chapter, On the Attack by Fire, whose aim the intelligence service provides.

On Spies: The Architecture of Intelligence in the Community ​

Prerequisites ​

What You Will Learn ​

The Five Classes of Spies ​

Local Spies: The Inhabitants of the District ​

Inward Spies: The Officials of the Enemy ​

Converted Spies: The Enemy's Agent Handled ​

Doomed Spies: The Controlled Leak ​

Surviving Spies: The Trusted Observers ​

The Architecture of All Five ​

The Five Classes Compared ​

Foreknowledge Comes from Other Men ​

The Rejection of the Omens ​

The Knowledge That Cannot Be Calculated ​

The Other Men and Their Dispositions ​

The Knowledge of the Enemy's Own Knowledge ​

The Forecast the Omens Could Not Provide ​

The Management of the Service ​

The Subtlety of the Employment ​

The Secrecy That Preserves the Source ​

The Termination of the Burned Source ​

The Reading of Signs ​

The Alphabet of the Public Record ​

The Quiet Before the Coordination ​

The Compliment That Covers an Action ​

The Too-Quick Denial ​

The Signs Read Together ​

The Alphabet in the Moderation Log ​

The End and Aim of Spying ​

The One Question ​

The Service That Is Not Surveillance ​

The Application of the Knowledge ​

The Application in the Defensive Campaign ​

The Yamak Institute Cohort Data ​

The Intelligence Audit (2023) ​

The Cohort of the Surviving Spy ​

The Cohort of the Read Sign ​

The Cohort of the Service's Boundary ​

The Cohort in One Table ​

The Five-Stage Protocol for the Intelligence Service ​

Stage 1: Name the Question ​

Stage 2: Choose the Class ​

Stage 3: Manage the Secrecy ​

Stage 4: Read the Signs ​

Stage 5: Apply the Knowledge ​

The Protocol in One Page ​

The Protocol Against a Real Engagement ​

The Intelligence Discipline in Practice ​

Objections ​

Objection 1: "This chapter sounds like it is asking us to spy on people." ​

Objection 2: "We cannot maintain an intelligence architecture; we are too small." ​

Objection 3: "The reading of signs sounds like the omens the chapter rejects." ​

Objection 4: "Our intelligence service keeps collecting but never helps us win." ​

Objection 5: "We do not have spies; we have members who happen to be there." ​

Objection 6: "Feeding false information to the enemy is dishonest." ​

Objection 7: "Reading the enemy's surface is public information; anyone can do it." ​

Objection 8: "Our members will not report; it feels like snitching on the community." ​

Objection 9: "The severity about the divulged secret sounds excessive." ​

Objection 10: "We would rather win with argument than with intelligence." ​

Objection 11: "This chapter rewards whichever faction has the best agents." ​

Objection 12: "The cohort data is the Institute's; why should our faction trust it?" ​

FAQ ​

Glossary ​

Appendix A: The Intelligence Reference ​

Appendix B: The Complete Chain of Intelligence ​

Conclusion ​