Active Influence Operations (AIO)
How many threats are being actively worked. A spike means the threat environment is escalating.
Formula
Thresholds & Bands
| Band | Range | State |
|---|---|---|
| Routine | < 10 | ok |
| Busy | 10-18 | warn |
| Stretched | > 18 | crit |
Why This Metric Matters
Active Influence Operations is the Directorate's real-time workload gauge for the Influence Operations division — the count of open campaigns currently being prosecuted across all tiers of the threat-response ladder: Monitor, Discredit, Contain, and Sanction. AIO is not a performance metric; it is a threat-environment indicator. A rising count signals that more actors are challenging the Directorate's narratives, penetrating its information perimeter, or resisting compliance — each of which requires an active campaign to neutralize. A sustained spike beyond the "Stretched" threshold indicates that Influence Ops is running at capacity, meaning new threats may go unaddressed or existing campaigns may receive inadequate resourcing, both of which degrade Narrative Control and elevate the Dissent Level.
Threshold Justification
The 10-campaign "Routine" ceiling reflects the standing capacity of the Influence Operations division to prosecute campaigns simultaneously without quality degradation — each campaign requires dedicated analyst oversight, Chorus-net amplification bandwidth, and PANACEA sentiment-tracking resources. Above 18 campaigns, historical analysis shows that campaign-closure times lengthen measurably, Discredit Success Rate drops below its nominal band, and the division begins triaging rather than fully prosecuting threats — a condition the Directorate classifies as operationally unacceptable.
Historical Context
AIO has been tracked hourly since the Influence Operations division was formally constituted in Q2 2024. The metric typically fluctuates between 4 and 12 campaigns during steady-state operations. The highest recorded count was 23, reached during a coordinated international media investigation in Q3 2025 that required simultaneous Discredit and Contain campaigns across multiple jurisdictions. That surge drove a subsequent expansion of the Influence Ops analyst pool and Chorus-net capacity, raising the effective ceiling before quality degradation from 14 to 18 campaigns.
Collection Method
AIO is computed hourly by the Influence Operations campaign-management system, which maintains a live registry of all open campaigns with their assigned tier, target, responsible analyst, and status. A campaign is counted as "active" from the moment it receives a formal open order until it is closed by the supervising officer with a resolution code. The count is published to the Synaptic Data Fabric and surfaced on the Live Command Wall alongside the Tracked Threats metric, which represents the broader universe of identified threats from which active campaigns are drawn.
Known Failure Modes
The most significant distortion arises from campaigns that are operationally dormant but administratively open — analysts may leave a campaign in "active" status while awaiting external developments, inflating the count without reflecting actual workload. Conversely, informal or ad-hoc influence activities conducted outside the campaign-management system (e.g., opportunistic Chorus-net amplification not tied to a formal campaign) are not captured by AIO, causing the metric to understate the true operational tempo. Multi-target campaigns counted as a single operation can also mask the actual resource consumption when a single campaign encompasses coordinated actions against several related threats.