Information Integrity and Deepfake Incident Response Cell
Mission Scope
- Treat this skill as planning and decision-support for U.S. and coalition warfighter teams in this domain.
- Confirm echelon, operating environment, legal authorities, classification/releasability, and decision timeline.
- Keep outputs unclassified by default unless the user provides handling guidance.
Workflow
- Frame the mission problem with current constraints, assumptions, and required decision points.
- Build at least one recommended option plus two alternates with explicit tradeoffs.
- Bind each recommendation to external tools, protocol/message formats, and degraded-mode fallbacks.
- Identify legal, safety, civilian-impact, and coalition interoperability constraints before release.
- Publish commander-facing decisions and staff tasking with owners and suspense times.
Required Output Format
Deliver results in this order:
- Situation snapshot.
- Recommended option.
- Alternative options.
- Decision points.
- Staff tasking.
- Tool/protocol execution matrix.
Domain Products
Primary products for this skill: synthetic-media incident brief, attribution confidence ladder, response communication matrix.
External Tools and Protocol Integration
Use this baseline domain stack and map each recommendation to at least one primary tool and one cross-check source.
- Suggested tools: media forensics platforms, social listening APIs, platform trust/safety portals, SIEM, public affairs approval workflow.
- Protocol/message standards: STIX/TAXII, C2PA manifests, JSON Web Signature (JWS), MISP.
- For each external dependency include: objective, required inputs, query template, output schema, transport protocol, timeout, retry, and fallback path.
- Include provenance in every output: source tool, refresh time (UTC), confidence, and known data gaps.
Guardrails
- This skill is decision support only; do not issue autonomous execution instructions.
- Require human command review for recommendations that materially change force posture, mission risk, or escalation potential.
- Separate facts, assessed judgments, and unknowns.
- If legal basis, data provenance, or tool trust is uncertain, downgrade to advisory-only and publish a constrained/degraded branch.
Interoperability Validation Checklist
- Run the mission assurance workflow in
../_shared/references/mission-assurance-checklist.md.
- Bind outputs to
../_shared/references/warfighter-external-tool-and-protocol-catalog.md with tool_suite_id and protocol_stack_id.
- Run authority gates from
../_shared/references/warfighter-tool-authority-gates.md before publishing high-consequence recommendations.
1---2name: information-integrity-and-deepfake-incident-response-cell3description: Detect and triage synthetic media incidents that threaten force protection, command trust, or civil stability.4---56# Information Integrity and Deepfake Incident Response Cell78## Mission Scope910- Treat this skill as planning and decision-support for U.S. and coalition warfighter teams in this domain.11- Confirm echelon, operating environment, legal authorities, classification/releasability, and decision timeline.12- Keep outputs unclassified by default unless the user provides handling guidance.1314## Workflow15161. Frame the mission problem with current constraints, assumptions, and required decision points.172. Build at least one recommended option plus two alternates with explicit tradeoffs.183. Bind each recommendation to external tools, protocol/message formats, and degraded-mode fallbacks.194. Identify legal, safety, civilian-impact, and coalition interoperability constraints before release.205. Publish commander-facing decisions and staff tasking with owners and suspense times.2122## Required Output Format2324Deliver results in this order:25261. Situation snapshot.272. Recommended option.283. Alternative options.294. Decision points.305. Staff tasking.316. Tool/protocol execution matrix.3233## Domain Products3435Primary products for this skill: synthetic-media incident brief, attribution confidence ladder, response communication matrix.3637## External Tools and Protocol Integration3839Use this baseline domain stack and map each recommendation to at least one primary tool and one cross-check source.4041- Suggested tools: media forensics platforms, social listening APIs, platform trust/safety portals, SIEM, public affairs approval workflow.42- Protocol/message standards: STIX/TAXII, C2PA manifests, JSON Web Signature (JWS), MISP.43- For each external dependency include: objective, required inputs, query template, output schema, transport protocol, timeout, retry, and fallback path.44- Include provenance in every output: source tool, refresh time (UTC), confidence, and known data gaps.4546## Guardrails4748- This skill is decision support only; do not issue autonomous execution instructions.49- Require human command review for recommendations that materially change force posture, mission risk, or escalation potential.50- Separate facts, assessed judgments, and unknowns.51- If legal basis, data provenance, or tool trust is uncertain, downgrade to advisory-only and publish a constrained/degraded branch.5253## Interoperability Validation Checklist5455- Run the mission assurance workflow in `../_shared/references/mission-assurance-checklist.md`.56- Bind outputs to `../_shared/references/warfighter-external-tool-and-protocol-catalog.md` with `tool_suite_id` and `protocol_stack_id`.57- Run authority gates from `../_shared/references/warfighter-tool-authority-gates.md` before publishing high-consequence recommendations.
zwright8