Adversarial Awareness Cost Modeling

by Nick Clark | Published April 25, 2026 | PDF

Active probing has measurable cost. A radar pulse expends transmitter energy and consumes a spectrum allocation; an active sonar ping reveals the pinger's bearing to anyone listening; a network reachability test logs against the probed host and may trip an adversarial alert; even a passive query against a cooperating sensor consumes computational budget. The architecture disclosed in Provisional 64/049,409 treats these costs as first-class inputs to the admissibility evaluation: a probe is admissible only when its declared awareness-cost, weighed against its declared intelligence value, satisfies the composite admissibility weight in force.


Mechanism

Every probe carries a declared awareness-cost model. The model captures, at minimum, the energy or resource expenditure of the emission (RF wattage, sonar source level, computational cycles, spectrum allocation duration), the detection radius at which the emission is observable to an adversarial sensor of declared sensitivity, the detection probability under that adversarial sensing, the identifiable signature characteristics that would permit attribution of the emission to the probing unit or platform class, and the operational compromise that follows from disclosure (loss of surprise, loss of sanctuary, alerting of a defended target). The model is itself a credentialed object: it carries a model authority, a parameter set, an operational profile (geographic region, threat picture, mission phase), and a validity window. The credentialing is essential: a cost model whose authority cannot be verified is not admissible to the probe-decision evaluator, and a cost model whose validity window has lapsed is treated as advisory rather than dispositive.

Probe decisions admit against the awareness-cost in composite with the awareness gain. The intelligence value of the probe — the contribution it would make to the operating mesh's situational picture if it succeeded — is weighed against the awareness-cost; the composite weight is evaluated under the admissibility primitive. A probe with high intelligence value and low awareness-cost admits readily; a probe with high awareness-cost admits only when intelligence value is correspondingly high or when an authority with appropriate scope explicitly accepts the cost. Cost models, parameters, and the resulting probe decisions all enter lineage; downstream audit can verify that probe decisions were taken against the cost models in force at the time of decision, and the same lineage supports the inverse query — given an after-action observation that the cost was higher than predicted, the lineage permits identification of every probe decision that relied on the now-discredited model.

The architecture distinguishes three temporally ordered evaluation moments. At pre-emission, the candidate probe is evaluated against the cost model and the prevailing operational profile; the probe is either admitted, refused, or referred upward for explicit cost acceptance. At emission, the actual emission parameters (peak power, dwell time, frequency, beam pattern) are recorded as an observation that is itself admissible and that may differ from the planned parameters; this divergence is itself a credentialed datum. At post-emission, observable adversarial response — counter-targeting, jamming, evasion, alert escalation — is collected, attributed to the probe through a credentialed correlation primitive, and recorded as an observation that updates the cost model's confidence going forward. The post-emission step closes the loop on cost-model confidence in the same way that a sensor's downstream verification closes the loop on the sensor's declared accuracy.

Operating Parameters

Cost-model granularity is implementation-tunable. Coarse-grained models declare a single scalar awareness-cost per probe class; fine-grained models decompose cost into expenditure, detection, attribution, and compromise components, each weighted independently. Cost models may be conditioned on the operational profile: the same probe carries a different awareness-cost in a permissive environment than in a contested one, and the architecture admits probe-decision against the profile in force rather than against a globalized average. Profile transitions are themselves credentialed events: a shift from permissive to contested updates the cost models in force, and probe decisions taken under the prior profile remain in lineage with their original cost basis.

Composite admissibility weights are governed by the same authority that governs other admissibility weights; there is no separate "probe authority" outside the umbrella governance chain. Weight parameters declare how heavily detection probability counts against intelligence value, how attribution risk is treated relative to detection alone, and how operational-compromise consequences are amortized across the mission window. Cost models may be challenged through the dispute mechanism: a probe denied admissibility on cost grounds may be re-evaluated under an alternative model if a competent authority issues a re-credentialing observation.

Several parameters govern the granularity and refresh of the cost model itself. Cost-model refresh intervals declare the maximum time between credentialed updates; in highly dynamic threat environments this may be measured in minutes, while in stable garrison contexts it may be measured in months. Attribution-uncertainty parameters specify how the cost model handles the case in which adversarial sensing is itself uncertain — for example, the probability that an adversary possesses a particular detector class is itself a credentialed observation rather than a background assumption, and the cost calculation propagates this uncertainty into the composite weight rather than collapsing it into a point estimate. Cost-acceptance escalation thresholds declare the cost magnitudes at which a probe must be referred to a higher authority before admission, and the escalation chain is itself credentialed so that an after-action review can verify that the appropriate authority approved each high-cost probe.

Cost-model interaction parameters govern composition with other models in force. A probe may have an RF cost model and an EO cost model and a cyber cost model; if the probe's emission produces consequences in more than one modality (for example, an RF emission whose backscatter is detectable by an EO sensor), the composite cost is computed by a credentialed composition primitive rather than by ad-hoc summation. The composition primitive itself carries an authority and a validity window, so that operating doctrine can update the cross-modality composition logic without requiring updates to each individual cost model.

Alternative Embodiments

Defense covert-operations embodiments treat awareness-cost as the dominant term: probes that would disclose presence are refused absent explicit acceptance, and the cost-model parameter set is dominated by attribution and compromise components. Active-defense embodiments balance differently: in a contact engagement, attribution is already lost, and the cost model reduces to expenditure and detection-radius (the latter relevant to other adversaries who might be drawn in). Civilian disclosure-sensitive embodiments — penetration testing, fraud investigation, regulatory inquiry — apply the same primitive with non-kinetic cost terms: alerting the subject of investigation, consuming the subject's logged-event budget, exposing the investigating organization's interests.

Embodiments may also vary in how the cost-model authority is structured. A unitary embodiment delegates all cost models to a single mission authority. A federated embodiment maintains per-platform cost models authored by the platform's operating service, composed at probe-decision time with a mission-level operational profile. Cross-modality awareness cost (RF probe consequences for the EO posture, sonar probe consequences for the RF posture), byzantine-robust cost evaluation under compromised cost authorities, and graduated-response integration in which probe-decision feeds escalation control are all alternative embodiments built on the same cost primitive.

Additional embodiments extend the primitive to non-traditional cost domains. Scientific-instrumentation embodiments treat the perturbation of the observed system as a cost — a probe that disturbs a quantum-coherent state, a calibration sweep that destabilizes a delicate experimental apparatus, or an interrogation pulse that depletes the cooled atom population in a precision metrology experiment all carry costs that compose under the same primitive used for adversarial awareness. Ecological-survey embodiments treat disturbance to wildlife — the displacement of nesting birds by aircraft survey, the response of marine mammals to active sonar — as a credentialed cost evaluated alongside data-collection value. Privacy-sensitive embodiments treat the per-query disclosure budget against a population's privacy guarantees as a cost, so that aggregated-statistics queries are admissible only when the residual privacy budget supports them. In each case the same primitive applies, parameterized by the appropriate cost model, without requiring a separate evaluator.

Composition

Awareness-cost modeling composes with the recursive closure of the governance chain: cost-evaluation outputs are themselves observations re-admitted to subsequent probe decisions, so a probe whose actual awareness-cost (as measured after emission) exceeds its declared cost updates the model's confidence going forward. It composes with cross-mesh reconciliation: in coalition operations, partner-specific cost models are reconciled through declared agreements, so a NATO probe's cost in a UN-shared envelope is evaluated against a translated cost model. It composes with the dispute mechanism, the time-translation primitive, and the byzantine-robust evaluation primitive without modification.

Composition with policy-bounded actuation is particularly important: the actuation policy may incorporate cost-derived thresholds directly — "do not emit above declared detection-probability X without explicit acceptance" — so that the actuation envelope itself reflects the cost discipline rather than treating cost as an external constraint. Composition with environmental-disruption tolerance permits the cost model to vary with degraded link conditions: a probe that would have low awareness-cost in nominal conditions may carry higher cost in disrupted conditions because the disruption itself implies adversarial activity. Composition with graduated-response integration allows the cost-decision output to feed an escalation evaluator, so that a refused high-cost probe automatically triggers consideration of lower-cost alternatives drawn from the same intelligence-value estimate, rather than terminating the operational thread.

Prior-Art Distinction

Existing electronic-warfare and emission-control architectures handle awareness-cost through doctrine: an EMCON state declares classes of emission permitted and prohibited, and operators conform manually. Such architectures do not credential the cost model itself, do not weigh cost against intelligence value structurally, and do not enter probe decisions into a lineage that admits downstream audit. Cyber and signals-intelligence systems handle disclosure risk through procedural review (typically pre-mission), not through composite admissibility evaluated in the loop. The disclosed architecture promotes cost from doctrine to credentialed observation, evaluated in composite with intelligence value at decision time, and recorded with sufficient structure to support after-action reconstruction.

The departure from prior art is not merely architectural but evidentiary. EMCON regimes produce, at best, a compliance record (was the emission permitted under the policy in force at the time?); they do not produce a decision record explaining why the emission was admitted in light of its cost. Pre-mission review processes produce decision records that are not contemporaneous with the operational reality the probe encounters; a probe whose pre-mission cost estimate has been overtaken by an unanticipated threat update cannot be re-evaluated in the loop. Operations-research treatments of probe scheduling — the literature on bandit problems, optimal stopping, and expected-information-gain probe selection — produce algorithms that optimize a scalar objective but do not credential the inputs nor expose the resulting decisions to subsequent audit. The disclosed architecture combines the contemporaneity of in-the-loop review, the rigor of credentialed inputs, and the auditability of structured lineage in a single primitive, none of which is available in any single prior-art treatment.

Disclosure Scope

This article elaborates the adversarial-awareness-cost aspects of Provisional 64/049,409. The disclosure covers the awareness-cost model format, the cost-evaluation primitives, the composite admissibility weighting that integrates cost with intelligence value, and the probe-decision integration with lineage. The cost primitive is general; the defense covert-operations, active-defense, civilian disclosure-sensitive, scientific-instrumentation, ecological-survey, privacy-sensitive, unitary, and federated embodiments are non-limiting. As adversarial sensing capabilities advance, cost models update through governance procedures, and updates are themselves credentialed observations subject to the umbrella admissibility discipline. The same primitive is intended to support emerging probe modalities — quantum sensing, distributed cooperative interrogation, and machine-learning-driven adaptive emission — without requiring extension of the underlying cost-evaluation logic; what changes across these modalities is the parameterization, not the architecture.

Nick Clark Invented by Nick Clark Founding Investors:
Anonymous, Devin Wilkie
72 28 14 36 01