Glossary of
Terms

The practical skills, methods, and habits used by intelligence professionals to operate effectively and securely. In this training, tradecraft refers to the daily practices of identity sovereignty — not spy techniques, but the disciplined, repeatable habits that reduce your legibility.

Operations Security. Originally a U.S. military framework for preventing adversaries from gathering useful intelligence. In civilian privacy practice, OPSEC refers to the holistic process of identifying what information about you could be harmful if exposed, and taking deliberate steps to protect it.

A structured analysis of who might want to access your information, what they could do with it, and how likely that is. A threat model prevents both under-protection (ignoring real risks) and over-protection (paranoia that makes practice unsustainable).

Observe-Orient-Decide-Act. A decision cycle developed by USAF strategist John Boyd. The key insight is that Orient — the way of seeing — is the decisive element. A person who can orient faster than their environment changes will always be ahead. In this training, the OODA loop is how you assess any new surveillance development in real time without waiting for a manual update.

A system of principles and practices designed to update continuously rather than becoming obsolete. Modeled on the U.S. Army's ADP/FM/ATP structure, which separates permanent principles (slow to change) from procedures (annually updated) from tactical guidance (continuously updated). This training is a living doctrine — three layers, three update speeds.

Tactics, Techniques, and Procedures. In military doctrine, TTPs are the most granular and most frequently updated layer of guidance — sitting below foundational doctrine and field manuals. In this training, the specific practices within each domain (B.01, D.03, F.02, etc.) are the TTPs. They change as the threat environment changes.

The three-layer architecture of this training. Layer I (The Constitution) contains permanent principles — generational update cycle. Layer II (The Field Manual) contains annual protocols — reviewed and versioned each year. Layer III (The Bulletin) contains live threat intelligence — updated continuously as the surveillance landscape changes.

The degree to which you are readable, predictable, and categorizable by external systems and actors. High legibility means your behavior, location, relationships, and preferences can be accurately modeled and predicted. In surveillance capitalism, your legibility is the product being manufactured and sold. Reducing legibility — becoming less readable — is the core goal of this training.

The map of your relationships — who you know, how you know them, how often you interact, and through what channels. Social graphs are more revealing than individual data points because they reveal context, trust networks, and influence pathways. Platforms build social graphs from your contacts, messages, follows, likes, and co-appearances in photos.

A company that collects personal information from hundreds of public and private sources — court records, social media, purchase history, location data, voter registration — aggregates it into profiles, and sells those profiles to anyone willing to pay. Data brokers are largely unregulated in the U.S. You have a right to opt out of most of them, but the process requires deliberate action.

A model of your behavior, preferences, and predicted future actions built from aggregated data — purchases, searches, location history, social interactions, media consumption. Behavioral profiles are used to target advertising, set insurance rates, influence hiring decisions, and model risk. They are updated continuously and often more accurate than self-report.

Data about data. The information attached to a file or communication that describes when it was created, where, by what device, and sometimes by whom — without being part of the content itself. A photo's metadata includes GPS coordinates, device model, and timestamp. An email's metadata includes sender, recipient, time, and server path — even if the content is encrypted.

A technique that identifies a specific device by combining dozens of small, seemingly innocuous data points — screen resolution, browser plugins, timezone, font list, hardware specs — into a unique signature. This signature tracks you across websites even without cookies, accounts, or login. Highly resistant to clearing browser history or using incognito mode.

An economic system in which the raw material is human behavioral data — harvested at scale, processed into predictive models, and sold to businesses seeking to influence human behavior. Coined by scholar Shoshana Zuboff. The surveillance capitalist does not sell products to users — the user's predicted behavior is the product sold to advertisers, insurers, employers, and others.

The tendency to search for, interpret, and remember information in a way that confirms what you already believe. In privacy practice, confirmation bias causes people to notice the examples that confirm they're safe (nothing bad happened yet) and discount the examples that suggest they're not (news stories about people like them being harmed by data exposure).

The tendency to underestimate the likelihood and impact of a threat because it hasn't occurred in your personal experience. Normalcy bias causes people to continue familiar patterns even when evidence suggests those patterns are risky, because the familiar feels safe by virtue of being familiar.

The tendency to believe that negative outcomes are less likely to happen to you than to other people, even when there is no statistical basis for that belief. In privacy practice, optimism bias manifests as "I don't have anything worth protecting" or "they're not interested in someone like me."

The tendency to rely too heavily on the first piece of information encountered when making decisions. In privacy practice, anchoring often manifests as the first framing you received about surveillance ("it's for your convenience," "only criminals worry about this") continuing to shape your thinking even after you've encountered contradicting evidence.

The tendency to continue a behavior or maintain an investment because of previously invested resources (time, money, effort) rather than because it still makes sense going forward. In privacy practice, the sunk cost fallacy appears as "I've already given Google all my data, so there's no point in changing now."

The tendency to estimate the probability of an event based on how easily examples come to mind — particularly recent or vivid ones. In privacy practice, this can cause both over- and under-response: overestimating risk after a high-profile data breach in the news, underestimating ongoing chronic risks because they generate less memorable incidents.

The condition of having meaningful control over what is known about you, by whom, and under what conditions. Identity sovereignty does not require complete invisibility — it requires that your visibility is chosen rather than extracted. It is an active, ongoing practice rather than a state you achieve once.

The practice of reducing the amount of data you generate and the number of systems that hold information about you, to the minimum required for your actual needs. A minimal footprint does not mean zero presence — it means deliberate, intentional presence rather than default, unconscious accumulation of data exposure.

The deliberate introduction of irregularity and variation into behavioral patterns — routes, schedules, purchases, communication habits — to reduce the predictability that makes a behavioral profile accurate and actionable. Pattern discipline is not randomness; it is the conscious management of routine.

The practice of pausing before sharing personal information in any context — digital or social — to assess whether sharing is necessary, who the information will reach, and what the realistic downstream pathways are. Information triage is not secrecy; it is conscious disclosure.

The explicit, intentionally mapped network of people who hold different categories of your sensitive information — and who have agreed, explicitly or implicitly, to handle it with care. Building a trusted circle is not the same as being secretive with everyone outside it; it is the architecture of appropriate intimacy.

A system in which resources, knowledge, or infrastructure are distributed across many nodes rather than concentrated in a single central authority. Decentralized systems are more resilient because they have no single point of failure. Right of Wild applies this principle to food, water, medicine, and information systems equally.

A Santa Barbara-based community resilience and ecological education organization. ROW builds decentralized systems for the six fundamental rights: food, water, air, privacy, information, and safety. The Sovereign Privacy Training is ROW's information sovereignty layer — the fourth and fifth rights made actionable.

ROW's central organizing concept: the geographic and social network within which neighbors can meaningfully support each other in meeting basic needs. The Mutual Aid Radius is the unit of community resilience — small enough to be personal, large enough to be robust. Privacy practice strengthens the mutual aid radius by protecting the information of everyone within it.

The organizing framework of Right of Wild: food, water, air, privacy, information, and safety. Each right corresponds to a domain of community resilience infrastructure. No right stands alone — food security depends on information security, which depends on privacy, which depends on safety. The six are an integrated system.

The fifth of ROW's six fundamental rights. The right to access, evaluate, share, and protect information independent of centralized platforms that control what is visible, what is amplified, and what is suppressed. Information sovereignty is distinct from privacy sovereignty — it addresses not just protection of your own data, but access to and control of information flows within a community.

Layer III of the Sovereign Privacy Training — the live threat intelligence system. Bulletins are issued when new surveillance technologies, legislation, platform changes, or data practices require immediate attention and potential protocol update before the annual Field Manual review. The Bulletin system is the mechanism by which the training community stays current together.