An Exposure Audit for Anyone Working Under Cover OPSEC
Cover identities are rarely broken by the operation. They are broken by the officer’s own life leaking into it, and each of those leaks is something you can check by looking.
The deployment
Use a reference, not a name. A list of a person’s weak points is itself worth protecting. This stays in this browser until you export it.
Where it stands
The checks
Each item describes the safe state. Mark it in place, exposed, or not applicable with a reason. An item left unmarked is counted as a gap.
The record of this audit
SHA-256 of everything above: