Evidence limitation

Threat intelligence is not target authority

Direct limitation

It does not itself establish legal target status, self-defense, consent, jurisdiction, proportionality, or permission for a private or state operation.

Artifact or claim that may be supported

Threat intelligence can attribute infrastructure, capability, behavior, and confidence to a suspected actor.

What the evidence does not establish

It does not itself establish legal target status, self-defense, consent, jurisdiction, proportionality, or permission for a private or state operation.

Additional evidence required

An accurate technical finding can still support an unlawful or misdirected action when decision authority and legal basis are missing.

Mitigation

Bind intelligence to legal review, competent approval, effect limits, third-party analysis, deconfliction, abort criteria, and post-action evidence.

Supporting sources

No public source record is assigned; the claim remains bounded by project doctrine, a governed report, or an explicitly unresolved evidence requirement.

Related topic

Security and Resilience