Operational Readiness Drill Program
Preparedness is engineered, never assumed. This document establishes the ten-exercise drill catalogue THE RESET maintains, the four-color escalation framework that classifies every incident, the assembly protocol and crew designations that every operator internalizes before their first live shift, and the rolling ledger of completed and forthcoming exercises. Whether the alert is a scheduled rehearsal or a genuine threat, the operations floor follows one playbook.
Exercise Catalogue
The programme comprises ten distinct exercises, each assigned a cadence tier reflecting its operational tempo and a severity classification that dictates the escalation posture for a corresponding real-world event. Cadences range from weekly signal-verification checks to annual full-spectrum continuity tests.
EX-01: Deepfake Saturation Attack
A hostile actor floods three or more monitored surfaces with synthetic media targeting a protected cohort. Operators must identify origin vectors through the Instrumentation Mesh, flag fabricated assets for the Evidence Vault, and coordinate a Friction-tier counter-pattern deployment across all affected channels within the drill window.
PL-4 Cadence · Bi-weekly
EX-02: PL-4 Technique Containment Failure
A Sentinel Compulsion Stack or equivalent PL-4 construct breaches its containment boundary inside the Restricted-Technique Vault. The drill exercises seal-and-isolate procedures, handler accountability, antidote staging, and GOVERNOR-mediated lockdown of adjacent storage partitions — all before the construct can reach a live surface.
PL-4 Cadence · Weekly
EX-03: Coordinated Platform Manipulation
Multiple platform operators acting in concert deploy engagement-maximising dark patterns across overlapping user populations. The exercise trains cross-directorate triage: Intelligence identifies the coordination signature, Field Ops stages counter-pattern injections, and R&D/Persuasion validates that each counter remains within its authorised bound.
PL-3 Cadence · Bi-weekly
EX-04: Algorithmic Amplification Cascade
A recommender system enters a runaway feedback loop, exponentially amplifying compulsion-grade content. Operators practise real-time Compulsion Index monitoring, emergency disclosure pushes to at-risk cohorts, and coordinated demotion requests through the appropriate Dispatch channels.
Index Cadence · Monthly
EX-05: Dark-Pattern Injection Event
A previously clean surface is found serving an embedded dark pattern — injected through a compromised ad network or third-party SDK. Teams exercise the sampling-and-provenance chain defined in the relevant SOP, quarantine the affected surface segment, and prepare an evidence package for the Legal directorate.
PL-3 Cadence · Monthly
EX-06: Narrative Laundering Operation
A hostile influence outfit launders manipulative narratives through ostensibly independent channels to circumvent standard pattern-detection. Intelligence analysts trace provenance through the Influence Graph, Field Ops marks contaminated nodes, and the floor coordinates a graduated Nudge-to-Friction escalation without alerting the laundering network.
Intel Cadence · Monthly
EX-07: Pattern Fabric / GOVERNOR Degradation
Simulated partial or total loss of the Pattern Fabric backbone and GOVERNOR analytics engine. Operators fall back to manual telemetry reads from the Instrumentation Mesh, paper-based SOP digests, and the UNDERTOW relay backbone. The exercise is scored on time-to-manual-coverage and decision accuracy under degraded conditions.
Infrastructure Cadence · Quarterly
EX-08: Counter-Pattern Overrun Response
A deployed counter-pattern exceeds its authorised bound on a live surface and begins harming the users it was designed to protect. The drill practises immediate rollback via the Injector kill-switch, surface isolation, antidote deployment, and the mandatory harm-assessment report outlined in the Misfire SOP.
PL-3 Cadence · Bi-weekly
EX-09: Hostile Identification of the Directorate
A platform conglomerate or persuasion syndicate moves to identify, locate, or publicly expose THE RESET. The exercise activates the continuity-of-command protocol under the Steward (STILLWATER), scrubs external communications, rotates UNDERTOW relay identities, and verifies that all OPSEC containment layers hold.
Classified Cadence · Annual
EX-10: Embedded Source Compromise & Extraction
A forward field cell or embedded source inside a target organisation is compromised or loses contact. The drill exercises recall procedures, UNDERTOW command-node routing, personnel recovery under the Influence Doctrine, and secure exfiltration of any intelligence product before the source position is fully burned.
Field Ops Cadence · Quarterly
Four-Color Escalation Framework
All incidents — rehearsed or genuine — are classified on a four-color ladder. GOVERNOR raises the initial alert from Instrumentation Mesh telemetry and Compulsion Index thresholds; the operations floor validates and may escalate through the Live Dashboard. Authoritative tier transitions are recorded in the GOVERNOR Console audit log.
| Level | Activation Criteria | Required Posture |
|---|---|---|
| GREEN | Baseline operations. No anomalous activity detected across any monitored surface. | Normal watch rotations and the published exercise schedule proceed without modification. |
| AMBER | GOVERNOR flags a watch condition: telemetry drift on one or more surfaces, or a single-channel Compulsion Index deviation above threshold. | Sector leads verify via the Dashboard and brief directorate heads. Response assets are staged but assembly is not yet called. |
| RED | Confirmed active threat: counter-pattern overrun, dark-pattern injection, evidence custody breach, or Injector anomaly validated by two independent sources. | Full assembly. Exercise marshal assumes floor authority; crew designations activate; affected surfaces are isolated pending resolution. |
| BLACK | Catastrophic event: PL-4 containment failure, hostile identification of the directorate, or loss of evidence-chain integrity across multiple vaults. | Facility lockdown. The Steward (STILLWATER) assumes direct command. Continuity protocol engages; all external communications are scrubbed and re-routed. |
Assembly Protocol & Crew Designations
When GOVERNOR or any authorised officer declares RED or BLACK, every person on the operations floor executes the same assembly sequence. Crew designations are pre-assigned during onboarding and refreshed each quarter; no operator should learn their role during a live event.
Assembly Sequence
- Secure your active workstation — save counter-op state or hold containment as applicable.
- Acknowledge the escalation level via your nearest terminal or GOVERNOR voice channel.
- Proceed to your designated assembly point using the approved route; do not transit through any flagged sector.
- Check in with your sector lead for personnel accounting; any unaccounted name triggers an immediate escalation increment.
- Await crew tasking from the exercise marshal; no sector re-entry without explicit marshal authorisation.
- Remain at your post until the marshal issues the stand-down order, confirmed via the Live Dashboard and GOVERNOR broadcast.
Crew Designations
- Exercise Marshal — assumes floor command for the duration; initiates assembly, assigns crews, and issues the stand-down.
- Sector Leads — one per operational sector; conduct personnel accounting, manage routing, and relay status to the marshal.
- Antidote Coordinator — manages rollback of live counters, stages the Sentinel Antidote, and certifies surface restoration.
- Intelligence Liaison — maintains the GOVERNOR data feed, correlates Instrumentation Mesh telemetry, and advises the marshal on threat evolution.
Support Crew
- Communications Controller — owns the GOVERNOR broadcast channel, timestamps all tier transitions, and manages directorate-wide notifications.
- Containment Verifier — inspects Restricted-Technique Vault seals, confirms counter-op boundary integrity, and clears sectors for re-entry prior to stand-down.
- Evidence Custodian — safeguards chain-of-custody records during the event and packages any artefacts generated by the exercise.
- Scribe — produces the time-stamped after-action chronology that feeds the exercise ledger and any subsequent review.
Exercise Ledger — 2091
The rolling record of completed and forthcoming exercises for the current readiness year. After-action reports are held by the Readiness Division and summarised quarterly for the Steward's review.
| Date | Exercise | Escalation Level | Outcome |
|---|---|---|---|
| 2091-01-08 | EX-02: PL-4 Technique Containment Failure | BLACK | Cleared · Steward-reviewed |
| 2091-01-22 | EX-08: Counter-Pattern Overrun Response | RED | Cleared |
| 2091-02-05 | EX-01: Deepfake Saturation Attack | RED | Cleared w/ observations |
| 2091-02-19 | EX-03: Coordinated Platform Manipulation | RED | Cleared |
| 2091-03-12 | EX-07: Pattern Fabric / GOVERNOR Degradation | AMBER | Cleared w/ observations |
| 2091-04-02 | EX-04: Algorithmic Amplification Cascade | RED | Cleared |
| 2091-05-14 | EX-05: Dark-Pattern Injection Event | RED | Scheduled |
| 2091-06-18 | EX-06: Narrative Laundering Operation | RED | Scheduled |
| 2091-08-07 | EX-10: Embedded Source Compromise & Extraction | RED | Scheduled |
| 2091-11-20 | EX-09: Hostile Identification of the Directorate | BLACK | Scheduled |