Synthetic or Exercise Marker¶
Marking scheme — instantiates Deception Blowback Containment
Stamps every artificial, decoy, or exercise artifact with a durable, machine-readable label that says "not real — exclude me" so authorized systems can recognize and filter it later.
Machines and archives preserve artifacts without remembering why they exist, so a decoy or exercise record can resurface years later stripped of all context and be read as genuine. The Synthetic or Exercise Marker is the labeling convention that forestalls this by tagging a planted or simulated artifact at the moment of creation, so anyone or anything encountering it downstream can tell it apart from real data. Its two distinctive properties: the label acts at source and travels with the artifact (provenance), and the mark itself carries the handling instruction — "not real / restricted-use / exclude" — so no external lookup is needed to know what to do with it. It is not a map of where the artifact travels (Audience-Channel Matrix), and it is not the enforcement that acts on the mark; it makes artifacts self-identifying so that enforcement is possible at all.
Example¶
Agencies run a live regional exercise simulating a chemical spill. Every injected message — situation reports, mock casualty counts, test alerts — is stamped with the long-standing convention "EXERCISE EXERCISE EXERCISE" in its headers and body, plus a machine-readable exercise flag on each digital record. The purpose is precisely blowback containment: without the marks, a mock casualty figure can be scraped into a live dashboard or forwarded to a real hospital as a genuine count. Because every inject is marked at source, the alerting systems and dashboards can filter them automatically, and any that leak are recognizable on sight as drill traffic. Outcome: the exercise stresses real systems without a single piece of mock data being mistaken for real.
How it works¶
Its distinctive discipline is three-fold. Mark at creation, not after the fact, so no artifact is ever born unlabeled. Make the mark both human-readable and machine-readable, and durable enough to survive handling. And encode the handling instruction into the mark itself — synthetic, restricted-use, exclude — so downstream systems can act without consulting an external register. It is a convention, not an actor: it enables filtering and recognition; it does not perform them.
Tuning parameters¶
- Mark visibility — overt (a human-readable banner) versus covert or embedded (a watermark or metadata) versus both. Overt is unmissable but may tip off the target; covert survives more contexts but needs tooling to read.
- Durability — how well the mark survives copying, summarizing, format conversion, or screenshotting. More durable means less leakage, at more effort.
- Payload — how much the mark carries: just "synthetic," or purpose, owner, expiry, and exclusion rule. Richer marks enable smarter downstream handling.
- Binding — whether the mark is merely attached or cryptographically bound to the artifact. Binding resists stripping.
- Coverage — which artifacts must be marked: every inject, or only the durable, record-bound ones most likely to persist.
When it helps, and when it misleads¶
Its strength is being the cheapest, most scalable form of containment — it makes artifacts self-identifying wherever they travel, and it is the precondition for any automated exclusion. Its failure mode is mark decay: a screenshot, a paraphrase, or a re-typed summary drops the label, and the artifact is again indistinguishable from real; and an overt mark can undermine the deception's purpose if the target sees it. The classic misuse is treating "we marked it" as containment complete — marking is necessary, never sufficient, because something must still honor the mark. The discipline is to bind the mark to the artifact and always pair it with enforcement. Modern content-provenance standards such as C2PA[n1] show both the promise and the fragility: provenance only helps where the systems downstream are built to read it.
How it implements the components¶
provenance_and_marking_scheme— it is the scheme: the convention for labeling synthetic, exercise, or decoy artifacts at source with durable, readable marks.synthetic_artifact_exclusion_rule— it embeds the exclusion instruction into the mark itself ("restricted-use / exclude"), the machine-readable tag that downstream filters key on.
It only labels; it does not enforce. Keeping marked artifacts out of models and dashboards is the Training-Data Exclusion List, which enforces the rule this marker embeds. Reactive isolation of records already found contaminated is the Contaminated Record Quarantine, and mapping where marked artifacts might travel is the Audience-Channel Matrix.
Related¶
- Instantiates: Deception Blowback Containment — the marker is the provenance layer that makes every other downstream filter and recognizer possible.
- Sibling mechanisms: Training-Data Exclusion List · Contaminated Record Quarantine · Truth Anchor Memo · Audience-Channel Matrix · Deception Blowback Register · Compartmented Briefing · Friendly Reliance Probe · Re-Entry Red-Team Review · Sunset and Debrief Trigger · Bounded Correction Protocol · After-Action Truth Reconciliation
Editorial Notes¶
Form Classification¶
Form family: Interface, Display & Cue
Rationale: Synthetic or Exercise Marker operates as a user-facing prompt, display, template, or perceptual cue that shapes attention and action at the point of use because it stamps every artificial, decoy, or exercise artifact with a durable, machine-readable label that says 'not real — exclude me' so authorized systems can recognize and filter it later.
Independent corroboration: The frozen evidence defines Synthetic or Exercise Marker as 'Stamps every artificial, decoy, or exercise artifact with a durable, machine-readable label that says 'not real — exclude me' so authorized systems can recognize and filter it later', so its operative form is Interface, Display & Cue.
Nearest alternative: Rule, Policy & Commitment — Synthetic or Exercise Marker includes features of a standing rule, threshold, contractual commitment, or policy constraint governing future conduct, but its defining operation is a user-facing prompt, display, template, or perceptual cue that shapes attention and action at the point of use.
Review outcome: Independent reviewer agreement; medium confidence.
Origin Attribution¶
Primary origin: Security Studies & Intelligence Analysis
Origin pattern: Cross-disciplinary synthesis
Present-day reach: Universal
Rationale: Explicitly labeling simulated inputs prevents exercises from contaminating real operations.
Related originating lineages:
- Computer Science & Software Engineering — Test-environment markers separate synthetic and production events.
- Military & Strategic Studies — Military planning, readiness, and strategic operations supplies a parallel or contributing lineage for the mechanism's defining operation: stamps every artificial, decoy, or exercise artifact with a durable, machine-readable label that says 'not real — exclude me' so authorized systems can recognize and filter it later.
Review resolution: The blind reviewers agree that security_intelligence is the primary origin and differ only on alternate origin disagreement, origin mode disagreement, domain reach disagreement, encyclopedia synthesis disagreement. I preserve every independently explained alternate from both records rather than imposing a numeric cap. I retain cross_disciplinary_synthesis because the combined evidence shows material contributions from several lineages. The broader reach of universal records portability separately from historical provenance; encyclopedia_synthesis=true preserves the affirmative synthesis judgment where either reviewer identified one.
Encyclopedia synthesis: The exact catalogued form synthesizes established practice rather than reproducing a single standard historical label.
Review outcome: Reconciled after independent review; high confidence.
Notes¶
[n1] C2PA (the Coalition for Content Provenance and Authenticity) is an open technical standard for attaching tamper-evident provenance metadata to media, so downstream tools can trace where a file came from and how it was produced. It illustrates the marker's core limit as well as its promise: provenance protects no one except where the systems that encounter the artifact are built to read and respect it. ↩