Notice the change. Protect the person and the mission.
Intelligence officers, program leaders, and technical specialists carry exceptional trust. A meaningful departure from someone’s established public online behavior may warrant attention before it negatively impacts the mission. That change could point to an emerging security concern, or to a person who would benefit from counseling or other support. Cratylus helps your team recognize the departure and decide what to do next.
Establish the baseline. Alert on the departure.
Cratylus follows a trusted individual’s public online behavior over time to establish a behavioral baseline of their usual language, tone, and interactions. It watches for meaningful departures from that personal baseline and alerts your team to changes that deserve human review. That comparison starts with the person’s own history.
- Understand the individual. Establish a baseline from the key person’s public online activity over time, within the agency’s authorized scope. Use the tracked individual’s own pattern of expression and interaction as the reference point.
- Bring a meaningful change to attention. Send an alert when observed behavior departs meaningfully from that baseline. The reviewer examines what changed, when it changed, and how it relates to the person’s responsibilities.
- Choose the right response. Verify the context, then route the concern appropriately: a private check-in, an offer of counseling or employee assistance, counterintelligence guidance, or a security review supported by evidence.
What a departure from the baseline can look like
Illustrative changes for human review:
- A sustained change in how they express themself. Someone whose public communication has been free of rants, belligerent talk, etc. or alternatively has always been a bit caustic within limits, begins repeatedly expressing distress or escalating hostility toward colleagues. A reviewer can examine the change and consider a supportive check-in.
- A departure from established discretion. A person who has consistently kept sensitive work out of public posts begins sharing internal details or expressing an intention to expose protected information. That shift can justify a security review tied to the individual’s actual access.
- An unusual pattern of public exchanges. New, repeated exchanges about sensitive expertise depart from the person’s usual circumspect or guarded behavior. Reviewers can assess whether the visible requests suggest targeting by a foreign adversary and whether the employee needs guidance.
Earlier attention. A considered response.
An alert opens a decision, not a verdict. Your team can support a trusted colleague who is struggling, investigate a credible security concern, or close the alert when the context and further research explains the change.
A departure can reflect an ordinary change in circumstances, a need for support, or a developing security concern. The alert brings it to attention; an authorized reviewer verifies the context and determines the next step. A behavioral change alone, especially one outburst, establishes neither harmful intent nor a need for counseling.
The lesson is to examine changes in conduct and disclosure boundaries over time. A departure from a person’s public baseline can prompt a contextual review and warrant further investigation, counceling, or simple awareness for security teams and human resources.
