Cost imposition

Sustained targeting is not free. Every individual instance of every tactic on the tactics side of this site requires resources that the operator side has to find, allocate, and account for. A hop-seeding campaign costs SMS infrastructure, throwaway numbers, and operator time per attempted contact. A street-theater deployment costs participants' attention, route coordination, and the social-political capital of recruiting and retaining them. A WiFi-sensing surveillance setup costs equipment, proximity, and the analyst time to process the captured data. A citizen-informant network costs the diffuse political legitimacy that makes the program defensible if exposed. Operations of this kind have budgets, and budgets are finite, and the budget per individual target is one of the harder line items to defend if anyone ever audits the program.

The defender does not have to defeat the operation outright to make it fail. The defender only has to make each tactic expensive enough to abandon — or, when full abandonment is not achievable, expensive enough to force a substitution. Substitution is the second prize and may be the larger one, because what an operator chooses next when their preferred tactic becomes too costly tells you what they have available, what they consider equivalent, and what they have not yet been willing to spend on. The substitution is information.

This is the principle underneath most of the techniques on this site. It is worth pulling out and naming because the principle generalizes to attacks that are not yet documented and to operators whose specific identity is not yet known.

The two defensive modes.

The first mode is blocking — removing the surface a tactic depends on so that the tactic cannot be deployed at all. No wireless blocks the radio attack surface. Lock the box blocks the cloud-vendor compulsion vector. Salt and sand blocks the silent-physical-entry vector by making any entry produce visible evidence. Where blocking is feasible, blocking is the right move; the tactic is eliminated from the operator's playbook against you specifically.

The second mode is taxation — leaving the surface present but making the tactic expensive to run against you. Data poisoning does not eliminate hidden recording but makes the captured data analyst-expensive and intel-poor. Mockery as armor does not stop street theater but raises the reputational cost of being recognizable as a participant. Recognition signaling does not stop the recruitment of observers but raises the cognitive cost on each observer who reads the signal. Phantom call does not prevent the operators from being within earshot but raises the cost of staying near you by making each proximity event an unwanted recognition event.

The taxation mode is the more general principle because it is available even when the tactic cannot be blocked. A defender who has only the blocking move available is stuck against any tactic that cannot be blocked; a defender who has the taxation move available has something to do against every tactic on the menu.

The three resources operators spend.

• Money. Equipment, infrastructure, payments, services. Increases linearly with target count for some tactics, sub-linearly for others (a citizen-informant network has fixed cost up to the size of the network and marginal cost per additional target small inside that capacity).
• Time. Both clock time per incident (how long an analyst spends on each recording) and elapsed time across the campaign (how long the operator has to maintain attention). Time is the resource defenders can most reliably tax because operator attention is finite and rotates.
• Human labor. The number of people involved in the operation. Larger operations are harder to keep secret, easier to leak from, more expensive to recruit and retain. Many tactics on this site depend on small numbers of human actors precisely because human labor is the most expensive resource the operator commands.

A fourth resource is appearing in operator stacks at a rapidly increasing rate: machine-learning capability. Automated SAR-style flagging, voice and face recognition, gait identification, LLM-assisted pattern matching of target output, automated content generation for harassment. The marginal cost of operator-side AI is falling fast and the defender has to factor this trajectory in. The good news, partially, is that AI tools are dual-use — defenders can use the same ML capability to process their own pattern documentation, run image diffs on tamper markers, and analyze captured operator behavior. The bad news is that operators have access to better data, more infrastructure, and bigger models, and the asymmetry favors the side with more compute.

What taxation looks like in practice.

Across the techniques on this site, every taxation move shares a structure: identify the part of the tactic that scales most expensively, and add cost there.

• For tactics that depend on trust in a captured signal, contaminate the signal with adversarial inputs (data poisoning). The operator's downstream analysis cost goes up; the intel value goes down.
• For tactics that depend on unknown recognition, demonstrate recognition specifically and signed (recognition signaling). The operator now has to consider that every output is potentially a coded message and must spend analyst time on each.
• For tactics that depend on seriousness, deny it with humor (mockery as armor). The operator's reputational cost per public engagement rises; the social cost of being identified as a member of the ridiculed group rises.
• For tactics that depend on predictability, vary your routes, schedules, stores, hours. The operator's coordination cost per encounter rises.
• For tactics that depend on plausible deniability of individual events, document the aggregate so the deniability collapses when the record is reviewed. The operator's exposure-risk per future incident rises.
• For tactics that depend on the target's continued production of usable signal, deny that signal — lock the box, turn off radios, restrict the LAN, take devices offline when not in use. The operator's per-incident yield falls; cost-per-bit-of-intel rises.

The taxation is cumulative across techniques. A defender who deploys five compounding cost-impositions against the same operator is not running five independent campaigns; they are running one campaign that taxes five different resource pools at once. The operator's budget has to come from somewhere.

The substitution-as-information benefit.

When a tactic becomes too expensive to maintain, the operator does not give up — they substitute. What they substitute to is the signal. If they move from SMS hop-seeding to email phishing, you have learned what email infrastructure they have access to. If they move from street theater to citizen-informant pressure, you have learned what local network they have built. If they move from cloud-agent compulsion to physical-entry attempts, you have learned both that the network channel is now closed to them and that physical-entry capability is among the resources they still command. Each substitution is a data point about what the operator considers equivalent and what they are willing to spend on.

This is why pattern documentation matters operationally — the documented record of which tactics were tried and in what order is the visible trace of the operator's resource constraints. A defender who has kept this record can see the operator's shape even without seeing the operator's face.

The honest accounting.

The war of attrition is asymmetric and the asymmetry is not in the defender's favor.

The operator has institutional infrastructure, recurring budget, distributed labor, established legal cover, and increasingly capable automation. The defender has personal time, personal attention, personal resilience, and whatever resources they had before the targeting began (which are usually being actively eroded by the targeting itself). The operator can rotate personnel; the defender cannot rotate themselves. The operator's budget renews on an institutional cycle; the defender's renews only as fast as they can recover.

The taxation strategy does not change this asymmetry. It changes the exchange rate. Every hour the defender spends imposing cost may cost the operator several hours of analyst time, or several thousand dollars of equipment, or several percent of the political legitimacy a program needs to keep operating. The defender pays one cost; the operator pays a multiple of it. The multiple is what makes the strategy work over a long time horizon.

It is still a war the defender did not choose to fight and cannot decisively win. Cost imposition does not produce victory; it produces survival under conditions that would otherwise produce collapse. It also produces the conditions under which someone with actual enforcement authority — the investigators already watching — may eventually be able to act. The defender is buying time and producing intelligence; the resolution, when it comes, will not be the defender's hand.

The closing principle.

Every defensive move on this site is, ultimately, an instance of this one. Each tactic that becomes too expensive to deploy reveals something about who could afford it before. Each substitution narrows the description of who the operator is. Each cost imposed widens the gap between the program's per-target spend and the per-target intelligence value, until eventually — for someone, on some line item, at some review — the math stops working.

Make every tactic expensive. The exchange rate is the point.