Methods and Tradecraft

Intelligence work is, at its core, a craft. An organization's ideology, mandate, and resources define its objectives; its tradecraft defines whether those objectives are achievable. The methods below represent the repeatable patterns through which agencies across Khorvaire acquire secrets, protect their own, and shape outcomes — regardless of which crown or charter they serve.

Source Recruitment

Turning a person into an intelligence asset requires identifying something they want more than they want their loyalty. Post-war Khorvaire is a recruiter's market: demobilized soldiers without purpose, merchants drowning in debt from disrupted trade routes, nobles dispossessed by contested border settlements, refugees with destroyed records and invented histories. The motivations vary — ideology, money, grievance, vanity, fear — but the operational calculus is consistent: what will make this person betray their institution without immediately regretting it?

Recruitment failure carries immediate risk. A target who reports an approach burns the operative and potentially the network behind them. Long-term assets require sustained management: regular contact, payment, emotional support, and protection from exposure. A well-placed clerk providing documents is valuable; a senior official shaping policy on behalf of a handler is decisive. The relationship, however, is never equal. Handlers exploit; assets endure.

Dead Drops and Cut-Outs

Direct contact between operative and handler is the most dangerous link in any network. Dead drops — physical locations where material is deposited and retrieved without meeting — and cut-outs — intermediaries who pass information without knowing either party — exist to break that link.

Common drop sites include marked locations in libraries, hollows in particular trees along established routes, and pre-arranged positions within busy taverns where a note slipped under a tankard is never conspicuous. Magical variants use extradimensional compartments, invisible marks readable only under specific conditions, or enchanted containers triggered by particular words. Cut-outs are usually unwitting: a merchant carrying altered cargo, a porter delivering sealed correspondence she believes is routine business, a House Orien courier clerk bribed to flag certain packages without knowing why.

The advantage is expendability. A captured cut-out cannot compromise a network they don't understand. The weakness is control: dead drops require patience, and each intermediary introduces a point where messages can be delayed, intercepted, or altered.

Signals Intelligence

Every message is a vulnerability. Speaking stone traffic flowing through House Sivis stations, courier dispatches routed through House Orien relays, and sending spells cast by wizards who assume their magic is private — all of these represent potential intercept points for services with the means and patience to exploit them.

House Sivis presents both opportunity and obstacle. Their communication monopoly makes them a natural target for penetration, but their institutional commitment to client confidentiality — and their political relationship with Zilargo — means that unauthorized access requires either sophisticated magical eavesdropping or carefully placed human sources inside message stations. Services that have achieved either guard that capability jealously.

Encryption generates a permanent arms race. Ciphers, rotating code books, and magically obfuscated transmissions force opposing analysts to break new systems continually. Volume compounds the challenge: intercepting messages in useful quantity requires analysts who can distinguish operational intelligence from routine correspondence. The most revealing indicator is often not content but pattern — who communicates with whom, when traffic volume changes, and what that implies about preparations underway.

Blackmail and Compromise

Blackmail converts discovered information into operational leverage. Sexual indiscretion, financial impropriety, undisclosed religious affiliation, or criminal entanglement — any secret sufficiently damaging and sufficiently private can be turned into control. More sophisticated operations don't wait to discover compromising information; they engineer it, creating the incriminating situation, then arriving with documentation.

The confrontation itself is performance. A handler must convince the target that compliance costs less than exposure while avoiding the extremes that produce desperate acts: confession, violent retaliation, or suicide. Successful handlers work through graduated disclosure — demonstrating knowledge of minor transgressions while implying awareness of worse. Compromised assets are unstable by nature. They resent their handlers, constantly seek escape, and are prone to betrayal the moment they calculate that exposure might hurt their handler more than themselves. Blackmail works until it doesn't, and the failure mode is rarely quiet.

Disinformation and Narrative Control

Disinformation introduces false information into an adversary's decision-making process. Narrative engineering shapes broader institutional or public understanding over time. Both operate on the same principle: control what someone believes is true, and you shape what they do.

Post-war Khorvaire is particularly susceptible. Archives burned in the Mourning. Multiple governments claim legitimate authority over the same events. Regional newssheets — including the Korranberg Chronicle's competitors — operate with limited means to verify claims made by confident sources. Fabricated documents, rumors seeded through tavern networks, bribed witnesses, and illusory magic supporting planted evidence can all find purchase in an environment where institutional memory is fractured and verification infrastructure is weak.

Tactical disinformation targets immediate decisions through false troop movements or staged incidents. Strategic disinformation operates over years, undermining the credibility of institutions or establishing false historical narratives that will justify future actions. The persistent risk is blowback: false narratives released into the public information environment can circle back to deceive one's own population, allies, or decision-makers.

Surveillance

Surveillance is systematic observation: mapping a target's patterns, identifying their contacts, and predicting their behavior before they act. Street-level coverage requires personnel who disappear into their environments — a merchant watching from a market stall, a beggar tracking movement through a slum, a dock worker noting cargo transfers on a Sharn wharf.

Magical surveillance extends range dramatically. Scrying, divination rituals, and sensor spells can penetrate buildings that would require significant resources to observe mundanely. Transformed operatives can operate in spaces where a human form would be conspicuous. However, magical approaches carry their own vulnerabilities: scrying requires personal connection to targets, sensor spells produce detectable arcane signatures, and scryroscopes — now available from Cannith enclaves — alert their owners to the presence of active divination within their vicinity. Privacy wards and anti-scrying countermeasures create surveillance dead zones that force services back toward traditional methods.

The analytical challenge is usually greater than the collection challenge. Raw observation generates volume, not intelligence. Trained analysts who track patterns over time, build network maps, and identify anomalies suggesting operational preparation are the scarce resource — and losing them to a rival or an assassin can set a service back years.

Infiltration and Long-Term Penetration

An operative placed inside a target organization and left to build a legitimate career over years represents the highest-value and highest-risk intelligence asset available. Long-term penetrations provide sustained access, early warning of decisions not yet implemented, and the ability to shape institutional behavior from within.

Successful infiltration requires complete identity construction. In the post-Mourning environment, this is more achievable than it once was: destroyed records in Cyre and disrupted institutional continuity across the Five Nations mean that claimed histories are harder to verify than they were under unified Galifar. A refugee from near the Mournland's edge can plausibly claim any number of backgrounds that no living record contradicts.

The operational challenge is dual. The penetration agent must perform their cover role convincingly enough to advance — access to restricted information typically requires seniority — while communicating with handlers without detection. Dragonmarked House facilities present particularly valuable targets. A source who has spent three years working as a junior artificer in a Cannith workshop before reaching the restricted research levels is more valuable than a dozen documents acquired through bribery. The psychological toll is commensurate: sustained deception, isolation, and the permanent risk that a single mistake ends in a cell rather than a safe house.

Sabotage and Denial

Sabotage disrupts enemy capabilities. Denial prevents adversaries from accessing resources, information, or personnel. The preferred outcome in both cases is disruption that appears accidental — equipment failure rather than obvious attack, a key specialist who quietly accepts a competing offer rather than one who is found dead.

Physical sabotage in Khorvaire frequently targets infrastructure with cascading effects: a lightning rail switching station, an elemental binding facility, a warehouse holding components that cannot easily be replaced. Magical sabotage can corrupt enchanted items, introduce cursed components into supply chains, or dispel permanent wards that took months to establish. Denial operations range from simple records destruction before capture to systematic recruitment of an adversary's irreplaceable specialists.

The operational question is proportionality. The highest-value sabotage operations are those where a small intervention produces a disproportionate effect — destroying one critical component that stalls an entire production line, eliminating knowledge that cannot be reconstructed from documentation alone. Beyond the material effect, sabotage operations carry psychological value: demonstrating that a target's security is penetrable is itself a form of leverage.

Assassination and Targeted Removal

Intelligence services do not generally prefer assassination. It is expensive in resources and operational exposure, invites retaliation, and eliminates a potential source of continued intelligence. It becomes viable in specific circumstances: when an adversary intelligence officer cannot be neutralized otherwise, when a witness must be silenced, when softer approaches have failed to remove a critical obstacle, or when a message needs to be sent that survives softer methods.

The ideal assassination does not register as such. Heart failure, tragic accident, suicide — investigations that begin by questioning the cause of death produce leads that investigations begun from a confirmed murder cannot. Methods include poison, staged violence, precision magical strike, and arranged circumstances. Operational planning mirrors that of infiltration: access route identification, escape protocols, and post-action narrative control.

House Thuranni has effectively industrialized this market, operating targeted removal as a contracted service rather than purely a political tool. This creates a dynamic where state services can outsource high-risk operations while maintaining deniability — and where attribution of an assassination becomes a puzzle in its own right, since any competent service knows that Thuranni work has been retained by a client, not undertaken on house initiative.

Defector Handling

A defector who voluntarily abandons their institution provides intelligence on the day they arrive — and rapidly depreciating intelligence thereafter, as their former organization changes every protocol they could have compromised. The value window is narrow, and the verification problem is acute: genuine defectors and planted provocateurs present nearly identical initial profiles.

High-value defectors include intelligence officers with knowledge of active networks, weapons specialists, diplomatic personnel with decision-making access, and House members who carry proprietary techniques that their institution guards with physical security rather than documentation. Extraction — removing the individual from hostile territory — requires planning proportionate to the target's profile: forged travel papers for a low-priority defector, coordinated team insertion or magical teleportation for someone whose disappearance will prompt immediate pursuit.

Post-extraction, the work continues for months. Debriefing requires patience and skepticism in equal measure; a subject's memories are not a filing system, and what they believe they know is not always what is true. Defectors require new identities, protection from retaliation, and in many cases, eventual integration into institutions that did not recruit them and are not certain they trust them. The intelligence community maintains informal understandings about which personnel are considered too destabilizing to recruit across — not out of sentiment, but because taking certain assets guarantees escalation that neither party finds profitable.